The DOI matches its Crossref record; 50 of the 52 references it cites were found in a registry or an index.
Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning
Open accessAbstract
As machine learning becomes widely used for automated decisions, attackers have strong incentives to manipulate the results and models generated by machine learning algorithms. In this paper, we perform the first systematic study of poisoning attacks and their countermeasures for linear regression models. In poisoning attacks, attackers deliberately influence the training data to manipulate the results of a predictive model. We propose a theoretically-grounded optimization framework specifically designed for linear regression and demonstrate its effectiveness on a range of datasets and models. We also introduce a fast statistical attack that requires limited knowledge of the training process. Finally, we design a new principled defense method that is highly resilient against all poisoning attacks. We provide formal guarantees about its convergence and an upper bound on the effect of poisoning attacks when the defense is deployed. We evaluate extensively our attacks and defenses on three realistic datasets from health care, loan assessment, and real estate domains.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Persistent, self-modifying memory further introduces risks of silent state corruption, where malicious logic can propagate across future reasoning steps without clear provenance (Jagielski et al., 2018;Li et al., 2022;Steinberger, Peter, 2025b).”
From Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents (2025) · cites this paper as Jagielski et al., 2018
Experimental — accuracy not yet measuredIn the citing paper
“Another detection-based defense mechanism uses euclidean distance to expose any deviation in the model update parameters for each client [90].”
From Vulnerabilities in federated learning (2021) · cites this paper as [90]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The Elements of Statistical Learning
Hastie, T., Tibshirani, R., & Friedman, J. (2009) · Springer Series in Statistics · doi:10.1007/978-0-387-84858-7 · Cited by 25,970
Fischler, M. A., & Bolles, R. C. (1981) · Communications of the ACM · doi:10.1145/358669.358692 · Cited by 25,893
The Elements of Statistical Learning: Data Mining, Inference, and Prediction
Lu, Z. Q. J. (2010) · Journal of the Royal Statistical Society Series A (Statistics in Society) · doi:10.1111/j.1467-985x.2010.00646_6.x · Cited by 12,916
Explaining and Harnessing Adversarial Examples
Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014) · arXiv · doi:10.48550/arxiv.1412.6572 · Cited by 10,381
Towards Evaluating the Robustness of Neural Networks
Carlini, N., & Wagner, D. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.49 · Cited by 8,859
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Robust estimation of a location parameter
Huber, P. J. (1964) · The Annals of Mathematical Statistics · doi:10.1214/aoms/1177703732 · Cited by 7,228
Robust principal component analysis?
Candès, E. J., Li, X., Ma, Y., & Wright, J. N. (2011) · Journal of the ACM · doi:10.1145/1970392.1970395 · Cited by 7,048
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
The Limitations of Deep Learning in Adversarial Settings
Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z. B., & Swami, A. (2016) · 2016 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2016.36 · Cited by 3,993
Flagged first, then by citations
2 of the 52 references couldn’t be matched to a known paper.
Research works printed but not linked: 6
- 0, Kaggle House Prices Advanced Regression Techniques
- kan, 0, Lending Club Loan Data
- hao, 2016, PREDA-TOR: Proactive recognition and elimination of domain abuse at time-of-registration, Proceedings of the 23rd ACM Conference on Computer and Communications Security
- faggella, 2016, Machine learning healthcare applications — 2017 and beyond
- 0, PharmGKB Downloads - IWPC Data
- srndic, 0, Mimicus - Contagio Dataset
Cited by
Sorted by citations
Items 501–600 of 861
RAI4IoE: Responsible AI for Enabling the Internet of Energy
Xue, M., Nepal, ., Liu, L., Sethuvenkatraman, S., Yuan, X., Rudolph, C., Sun, R., & Eisenhauer, G. (2023) · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA) · doi:10.1109/tps-isa58951.2023.00012 · Cited by 6
VeriCNN: Integrity verification of large-scale CNN training process based on zk-SNARK
Fan, Y., Ma, K., Zhang, L., Liu, J., Xiong, N. N., & Yu, S. (2024) · Expert Systems with Applications · doi:10.1016/j.eswa.2024.124531 · Cited by 7
Godavarthi, S., & Dr. Venkateswara Rao, G. (2024) · International Journal of Computational and Experimental Science and Engineering · doi:10.22399/ijcesen.538 · Cited by 6
Sengupta, A. (2024) · INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT · doi:10.55041/ijsrem40091 · Cited by 6
Adaptive and Blind Regression for Mobile Crowd Sensing
Chang, S., Li, C., Zhu, H., & Chen, H. (2019) · IEEE Transactions on Mobile Computing · doi:10.1109/tmc.2019.2931341 · Cited by 5
Mitigating Adversarial Attack for Compute-in-Memory Accelerator Utilizing On-chip Finetune
Huang, S., Jiang, H., & Yu, S. (2021) · IEEE Non-Volatile Memory Systems and Applications Symposium (NVMSA) · doi:10.1109/nvmsa53655.2021.9628739 · Cited by 5
Data Poisoning Attacks on Crowdsourcing Learning
Chen, P., Sun, H., & Chen, Z. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-85896-4_14 · Cited by 5
Optimal Feature Manipulation Attacks Against Linear Regression
Li, F., Lai, L., & Cui, S. R. (2021) · IEEE Transactions on Signal Processing · doi:10.1109/tsp.2021.3115951 · Cited by 5
A Survey of Adversarial Attacks on Wireless Communications
Luo, X., Qin, Q., Gong, X., & Xue, M. (2022) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-04231-7_7 · Cited by 5
Classification Auto-Encoder Based Detector Against Diverse Data Poisoning Attacks
Razmi, F., & Xiong, L. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-37586-6_16 · Cited by 8
FedCom: Byzantine-Robust Federated Learning Using Data Commitment
Zhao, B., Wang, T., & Fang, L. (2023) · International Conference on Communications · doi:10.1109/icc45041.2023.10279255 · Cited by 5
Law and Adversarial Machine LearningPreprint
Kumar, R. S. S., O'Brien, D., Albert, K., & Vilojen, S. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1810.10731 · Cited by 5
FedCom: A Byzantine-Robust Local Model Aggregation Rule Using Data Commitment for Federated LearningPreprint
Zhao, B., Sun, P., Fang, L., Wang, T., & Jiang, K. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2104.08020 · Cited by 5
Adversarial Attacks Detection Method for Tabular Data
Wawrowski, Ł., Biczyk, P., Ślȩzak, D., & Sikora, M. (2025) · Machine Learning and Knowledge Extraction · doi:10.3390/make7040112 · Cited by 4
Robustness of Updatable Learning-based Index Advisors against Poisoning Attack
Zheng, Y., Lin, C., Lyu, X., Zhou, X., Li, G., & Wang, T. (2024) · Proceedings of the ACM on Management of Data · doi:10.1145/3639265 · Cited by 4
DNN Partitioning and Assignment for Distributed Inference in SGX Empowered Edge Cloud
Li, Y.-P., Zeng, D.-Z., Gut, L., Guo, S., & Zomaya, A. Y. (2024) · IEEE International Conference on Distributed Computing Systems · doi:10.1109/icdcs60910.2024.00065 · Cited by 6
Defense-Guided Adaptive Attack on Byzantine-Robust Federated Learning
Hu, C., Liu, Y., Zhang, M., & Yang, Z. (2024) · Communications in computer and information science · doi:10.1007/978-981-96-0151-6_7 · Cited by 4
Brohi, S. N., & Mastoi, Q.-U.-A. (2025) · Big Data and Cognitive Computing · doi:10.3390/bdcc9050114 · Cited by 4
Risk Assessment in Smart Aging Care Systems: An Elderly-Centered Perspective
Chakraborty, N., Iqbal, S., & Zulkernine, M. (2023) · IEEE International Conference on Digital Health (ICDH) · doi:10.1109/icdh60066.2023.00012 · Cited by 4
Byzantine detection for federated learning under highly non-IID data and majority corruptions
Wang, Z., & Zhao, P. (2024) · Wireless Networks · doi:10.1007/s11276-024-03799-x · Cited by 5
Unlearning Attacks for Regression Learning
Chen, J., Shi, W., Lin, W., Wang, C., Liu, W., Sun, H., & Liu, G. (2025) · IEEE Transactions on Neural Networks and Learning Systems · doi:10.1109/tnnls.2025.3553821 · Cited by 4
Mitigating Impact of Data Poisoning Attacks on CPS Anomaly Detection with Provable Guarantees
Abedzadeh, S., & Bhattacharjee, S. (2025) · Information · doi:10.3390/info16060428 · Cited by 4
On the Risks of Trusting Artificial Intelligence: The Case of Cybersecurity
Taddeo, M. (2021) · Digital ethics lab yearbook · doi:10.1007/978-3-030-80083-3_10 · Cited by 5
An Adversarial Risk Analysis Framework for Batch Acceptance Problems
González‐Ortega, J., Soyer, R., Insua, D. R., & Ruggeri, F. (2021) · Decision Analysis · doi:10.1287/deca.2020.0420 · Cited by 4
Machine Learning Integrity and Privacy in Adversarial Environments
Oprea, A. (2021) · ACM Symposium on Access Control Models and Technologies (SACMAT) · doi:10.1145/3450569.3462164 · Cited by 4
Self-citationHernández‐Castro, C. J., Liu, Z., Serban, A., Tsingenopoulos, I., & Joosen, W. (2022) · Lecture notes in computer science · doi:10.1007/978-3-030-98795-4_12 · Cited by 5
Maabreh, M., Darwish, O., Karajeh, O., & Tashtoush, Y. M. (2022) · International Arab Conference on Information Technology (ACIT) · doi:10.1109/acit57182.2022.9994126 · Cited by 4
AAIA: an efficient aggregation scheme against inverting attack for federated learning
Yang, Z., Yang, S., Huang, Y., Martínez-Ortega, J.-F., López, L., & Chen, Y. (2023) · International Journal of Information Security · doi:10.1007/s10207-023-00670-6 · Cited by 5
Reducing Certified Regression to Certified Classification for General Poisoning Attacks
Hammoudeh, Z., & Lowd, D. (2023) · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml54575.2023.00040 · Cited by 5
A Survey on Security Threats to Machine Learning Systems at Different Stages of its Pipeline
Lahe, A. D., & Singh, G. (2023) · International Journal of Information Technology and Computer Science · doi:10.5815/ijitcs.2023.02.03 · Cited by 5
PALOR: Poisoning Attacks Against Logistic Regression
Wen, J., Zhao, B. Z. H., Xue, M., & Qian, H. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-55304-3_23 · Cited by 4
Ftaimi, A., & Mazri, T. (2021) · E3S Web of Conferences · doi:10.1051/e3sconf/202122901004 · Cited by 4
Poisoning Attack for Inter-agent Transfer Learning
Cheng, Z., & Li, Z. (2021) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-030-90022-9_21 · Cited by 4
Oriole: Thwarting Privacy Against Trustworthy Deep Learning Models
Chen, L., Hu, W., Zhao, B. Z. H., Xue, M., & Qian, H. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-90567-5_28 · Cited by 5
Automated Binary Analysis: A Survey
Liu, Z., Chen, C., Ahmed, E., Liu, D., & Zhang, J. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-22677-9_21 · Cited by 4
EdgeInfer: Robust Truth Inference under Data Poisoning Attack
Tahmasebian, F., Xiong, L., Sotoodeh, M., & Sunderam, V. S. (2020) · IEEE International Conference on Smart Data Services (SMDS) · doi:10.1109/smds49396.2020.00013 · Cited by 3
Mitigation of poisoning attack in federated learning by using historical distance detection
Shi, Z., Ding, X., Li, F., Chen, Y., & Li, C. (2021) · Cyber Security in Networking Conference (CSNet) · doi:10.1109/csnet52717.2021.9614278 · Cited by 4
A Sub-Linear Time Framework for Geometric Optimization with Outliers in High DimensionsPreprint
Ding, H. (2020) · arXiv (Cornell University) · doi:10.4230/lipics.esa.2020.38 · Cited by 8
Quantifying and Mitigating Privacy Risks of Contrastive LearningPreprint
He, X., & Zhang, Y. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2102.04140 · Cited by 4
Khamis, R. A. (2020) · Carleton University's Institutional Repository (MacOdrum Library, Carleton University) · doi:10.22215/etd/2020-14257 · Cited by 5
Pseudo-Labeling for Enhanced User Privacy in Approximate Machine Unlearning
Watanabe, S. (2025) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp49660.2025.10890795 · Cited by 3
Mo, Y., Tang, M., Lin, R., Zhou, B., & Li, X. (2025) · IEEE Access · doi:10.1109/access.2025.3582519 · Cited by 5
Multi-Agent AI Framework for Threat Mitigation and Resilience in Machine Learning Systems
Foundjem, A. T., Tidjon, L. N., Silva, L. D., & Khomh, F. (2026) · ACM Transactions on Software Engineering and Methodology · doi:10.1145/3780095 · Cited by 12
A Data-Centric Anomaly-Based Detection System for Interactive Machine Learning Setups
Bugeja, J., & Persson, J. (2022) · International Conference on Web Information Systems and Technologies · doi:10.5220/0011560100003318 · Cited by 3
Improving Social Bot Detection Through Aid and Training
Kenny, R., Fischhoff, B., Davis, A. L., & Canfield, C. (2023) · Human Factors The Journal of the Human Factors and Ergonomics Society · doi:10.1177/00187208231210145 · Cited by 4
RMF: A Risk Measurement Framework for Machine Learning Models
Schröder, J., & Breier, J. (2024) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3664476.3670867 · Cited by 3
Towards Fair Federated Learning via Unbiased Feature Aggregation
He, Z., Wang, Z., Dong, X., Sun, P., Ren, J., & Ren, K. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3541306 · Cited by 3
VVUQ, Reliability, and the Law
Kemper, B. (2025) · IEEE reliability magazine · doi:10.1109/mrl.2025.3532564 · Cited by 3
Multifeature Fusion-Based Closed-Box Attack Detection Method for Automatic Modulation Classification
Gao, R., Cong, Y., Zhang, X., & Yang, L. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3546745 · Cited by 3
Maverick: Personalized Edge-Assisted Federated Learning with Contrastive Training
Wang, K., He, Q., Dong, Z., Chen, R., He, C., Chua, C., Chen, F., & Yang, Y. J. (2025) · International World Wide Web Conference (WWW) · doi:10.1145/3696410.3714884 · Cited by 3
Privacy and Security in Distributed Data Markets
Alabi, D., Galhotra, S., Mehnaz, S., Song, Z., & Wu, E. (2025) · ACM SIGMOD International Conference on Management of Data (SIGMOD) · doi:10.1145/3722212.3726008 · Cited by 3
Jia, J., Wang, B., & Gong, N. Z. (2021) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3433210.3437519 · Cited by 4
Towards Evaluating Adversarial Attacks Robustness in Wireless Communication
Ftaimi, A., & Mazri, T. (2021) · International Journal of Advanced Computer Science and Applications · doi:10.14569/ijacsa.2021.0120675 · Cited by 3
Data complexity-based batch sanitization method against poison in distributed learning
Wang, S., Fan, K., Zhang, K., Li, H., & Yang, Y. (2022) · Digital Communications and Networks · doi:10.1016/j.dcan.2022.12.001 · Cited by 3
Safety and Security in AI Systems
Mahanta, K., & Maringanti, H. B. (2023) · Advances in computational intelligence and robotics book series · doi:10.4018/978-1-6684-6821-0.ch006 · Cited by 3
Clean-label Backdoor Attack on Machine Learning-based Malware Detection Models and Countermeasures
Zheng, W., & Omote, K. (2022) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom56396.2022.00171 · Cited by 3
Geetha, S., Cyril, C. P. D., & Priya, S. (2023) · International Conference on Intelligent and Innovative Technologies in Computing, Electrical and Electronics (IITCEE) · doi:10.1109/iitcee57236.2023.10091037 · Cited by 3
RetractedBhadle, R. V., & Rathod, D. (2023) · Biennial International Conference on Nascent Technologies in Engineering (ICNTE) · doi:10.1109/icnte56631.2023.10146665 · Cited by 3
A Novel Poisoning Attack on Few-Shot based Network Intrusion Detection
Alhussien, N., & AlEroud, A. F. (2023) · IEEE/IFIP Network Operations and Management Symposium (NOMS) · doi:10.1109/noms56928.2023.10154453 · Cited by 3
PPFL-IDS: Privacy-Preserving Federated Learning Based IDS Against Poisoning Attacks
Xu, M., & Li, X. (2023) · Mobile Networks and Applications · doi:10.1007/s11036-023-02231-6 · Cited by 3
Jalili, A. Q., Dziatkovskii, A., & Australia, P. V. &. I. (2023) · Economic Annals-ХХI · doi:10.21003/ea.v202-01 · Cited by 3
Siddika, A., & Zhao, L. (2023) · IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress (DASC/PiCom/CBDCom/CyberSciTech) · doi:10.1109/dasc/picom/cbdcom/cy59711.2023.10361446 · Cited by 4
FedChallenger: Challenge-Response-Based Defence for Federated Learning Against Byzantine Attacks
Moyeen, M. A., Kaur, K., Agarwal, A., Ricardo Manzano, S., Zaman, M., & Goel, N. (2023) · Globecom · doi:10.1109/globecom54140.2023.10437878 · Cited by 3
Study on Poisoning Attacks: Application Through an IoT Temperature Dataset
Vuseghesa, F. K., & Messai, M. (2023) · IEEE International Conference on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE) · doi:10.1109/wetice57085.2023.10477844 · Cited by 3
Research Progress on Security and Privacy of Federated Learning: A Survey
Ma, X., & Yan, M. (2024) · Wireless Personal Communications · doi:10.1007/s11277-024-11372-0 · Cited by 3
Interactive Trimming Against Evasive Online Data Manipulation Attacks: A Game-Theoretic Approach
Fu, Y., Ye, Q., Du, R., & Hu, H. (2024) · IEEE International Conference on Data Engineering (ICDE) · doi:10.1109/icde60146.2024.00276 · Cited by 5
Achieving Secure On-Orbit Comparison in LEO-Satellite-Enabled Offshore Wind Farm Surveillance
Kong, Q., Wang, Y., Zhang, S., Chen, B., Xiao, S., Bao, H., & Shao, J. (2024) · IEEE Internet of Things Journal · doi:10.1109/jiot.2024.3454765 · Cited by 3
Park, J., You, G., Ji, Y., & Youm, H. Y. (2024) · Asia Joint Conference on Information Security (AsiaJCIS) · doi:10.1109/asiajcis64263.2024.00026 · Cited by 3
Contrastive Learning for Distortion Tolerable Network Slice Prediction in Open RAN
He, Z., Alimohammadi, H., Chatzimiltis, S., Mayhoub, S., Akbari, M., & Shojafar, M. (2025) · IEEE Wireless Communications and Networking Conference · doi:10.1109/wcnc61545.2025.10978529 · Cited by 3
Preference Poisoning Attacks on Reward Model Learning
Wu, J., Wang, J., Xiao, C., Wang, C., Zhang, N., & Vorobeychik, Y. (2025) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp61157.2025.00094 · Cited by 17
Poisoning finite-horizon Markov decision processes at design time
Caballero, W. N., Jenkins, P. R., & Keith, A. J. (2020) · Computers & Operations Research · doi:10.1016/j.cor.2020.105185 · Cited by 3
In Pursuit of Preserving the Fidelity of Adversarial Images
Clements, J., & Lao, Y. (2022) · IEEE International Conference on Acoustics Speech and Signal Processing · doi:10.1109/icassp43922.2022.9747529 · Cited by 3
One-pixel and X-pixel adversarial attacks based on smell bees optimization algorithm
Ali, Y. M. B. (2023) · Future Generation Computer Systems · doi:10.1016/j.future.2023.07.028 · Cited by 3
Bitton, R., Maman, N., Singh, I., Momiyama, S., Elovici, Y., & Shabtai, A. (2021) · arXiv (Cornell University) · Cited by 3
Reliability analysis and data driven modelling of railway component failure
Wang, J. (2021) · doi:10.32657/10356/159237 · Cited by 3
Raza, A. (2023) · theses.fr (ABES) · doi:10.70675/ac35dc8az89ccz4977z8f25zb7c8937f7cf0 · Cited by 4
Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents
de Witt, C. S., Krawiecka, K., Krawczuk, I., Hagag, B., Anderson, W. L., Belcak, P., Bucknall, B., Cai, X., Chopra, A., Cohen, D., et al. (2025) · arXiv · doi:10.48550/arxiv.2505.02077 · Cited by 108
FedPerturb: Covert Poisoning Attack on Federated Learning via Partial Perturbation
Jin, T., Fu, Z., Meng, D., Wang, J., Qi, Y., & Cao, G. (2023) · Frontiers in artificial intelligence and applications · doi:10.3233/faia230393 · Cited by 2
Yan, G., Wang, H., Yuan, X., & Li, J. (2024) · International Symposium on Research in Attacks, Intrusions and Defenses (RAID) · doi:10.1145/3678890.3678915 · Cited by 2
Rattanavipanon, N., & Nunes, I. D. O. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3555179 · Cited by 5
Nkashama, D. K., Masakuna, J. F., Soltani, A., Verdier, J.-C., Frappier, M., Tardif, P.-M., & Kabanza, F. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-82362-6_5 · Cited by 2
Robust Aggregation with Adversarial Experts
Guo, Y., & Kong, Y. (2025) · International World Wide Web Conference (WWW) · doi:10.1145/3696410.3714557 · Cited by 2
Reducing Defense Vulnerabilities in Federated Learning: A Neuron-Centric Approach
Erdöl, E. S., Erdöl, H., Üstübioğlu, B., Ulutaş, G., & Symeonidis, I. (2025) · Applied Sciences · doi:10.3390/app15116007 · Cited by 2
Not All Edges are Equally Robust: Evaluating the Robustness of Ranking-Based Federated Learning
Gong, Z., Zhang, Y., Zhang, L. Y., Zhang, Z., Xiang, Y., & Pan, S. (2025) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp61157.2025.00251 · Cited by 2
Untargeted Poisoning Membership Inference With Sample Selection and Enhancement
Li, J., Yang, X., Ma, W., Wang, B., Wen, S., & Xiang, Y. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3601844 · Cited by 2
Resilient automatic model selection for mobility prediction
Atiiq, S. A., Gehrmann, C., Khalil, K., Sternby, J., & Yuan, Y. (2025) · Cluster Computing · doi:10.1007/s10586-025-05661-x · Cited by 2
Ethical and equitable approaches in AI for vector-borne disease management
Williams, J. J., Angelidou, I. A., Cholvi-Simó, M., Kadriaj, P., Martinou, A. F., Nadejda, M., Ong, S., Sadak, F., Skuhrovec, J., Velo, E., et al. (2025) · AI and Ethics · doi:10.1007/s43681-025-00933-z · Cited by 4
Zhang, M., Hu, C., Cao, X., Sajjanhar, A., Yang, Z., Hassan, M. U., Jin, Z. G., & Li, J. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3655513 · Cited by 2
Exploring adversarial attacks against malware classifiers in the backdoor poisoning attack
Reddy, G. S., & Lakshmi, S. M. (2021) · IOP Conference Series Materials Science and Engineering · doi:10.1088/1757-899x/1022/1/012037 · Cited by 2
RetractedPoisoning Attack against Online Regression Learning with Maximum Loss for Edge Intelligence
Zhu, Y., Wen, H., Zhang, P., Han, W. M., Sun, F., & Jia, J. (2022) · International Conference on Computing, Communication, Perception and Quantum Technology (CCPQT) · doi:10.1109/ccpqt56151.2022.00037 · Cited by 2
Depth-2 neural networks under a data-poisoning attack
Karmakar, S., Mukherjee, A., & Papamarkou, T. (2023) · Neurocomputing · doi:10.1016/j.neucom.2023.02.034 · Cited by 8
An Artificial Intelligence Enabled Self Replication System Against Cyber Attacks
Mokkapati, R., & Dasari, V. L. (2023) · International Conference on Smart Systems and Inventive Technology (ICSSIT) · doi:10.1109/icssit55814.2023.10061089 · Cited by 2
Trust and Physical Layer Security for 6G Cyber-Physical Systems
Chorti, A. (2023) · Harvard Data Science Review · doi:10.1162/99608f92.3a330a0b · Cited by 2
MPHM: Model poisoning attacks on federal learning using historical information momentum
Shi, L., Chen, Z., Shi, Y., Lin, W., Tao, Y., He, M., Wang, Q., Zhou, Y. H., & Gao, Y. (2023) · Security and Safety · doi:10.1051/sands/2023006 · Cited by 2
Poisoning Online Learning Filters by Shifting on the Move
Tann, W. J.-W., & Chang, E. (2023) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn58367.2023.00033 · Cited by 2
Double Momentum Backdoor Attack in Federated Learning
Panigrahi, S., Bouacida, N., & Mohapatra, P. (2023) · Journal of Student Research · doi:10.47611/jsrhs.v12i1.3644 · Cited by 2
Adversarial Text Rewriting for Text-aware Recommender Systems
Oh, S., Verma, G., & Kumar, S. (2024) · ACM International Conference on Information and Knowledge Management (CIKM) · doi:10.1145/3627673.3679592 · Cited by 2
Qiao, Y., Liu, D., Wang, R., & Liang, K. (2024) · IEEE Journal on Emerging and Selected Topics in Circuits and Systems · doi:10.1109/jetcas.2024.3450527 · Cited by 2
Mecanismo para Mitigar Ataques de Envenenamento de Modelo no Aprendizado Federado
Morais, M. G. O., da Costa, J. B. D., Gonzalez, L. F. G., Souza, A. M. D., & Villas, L. A. (2024) · doi:10.5753/courb.2024.3398 · Cited by 2
Metadata
- Authors
- Jagielski, M., Oprea, A., Biggio, B., Liu, C., Nita-Rotaru, C., & Li, B.
- Affiliations
- Northeastern University (US)
- University of Cagliari (IT)
- University of California, Berkeley (US)
- Venue
- 2018 IEEE Symposium on Security and Privacy (SP)
- Publisher
- IEEE
- Published
- 2018-05
- Pages
- 19-35
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W2962763344
- Cited by
- 861
- References
- 52
- Citations by year
- 2026: 50 · 2025: 114 · 2024: 133 · 2023: 146 · 2022: 120 · 2021: 132 · 2020: 98 · 2019: 54 · 2018: 14
- FWCI
- 30.43
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- UNICA IRIS Institutional Research Information System (University of Cagliari) (submittedVersion, public-domain)
- arXiv (Cornell University)
- Funders
- National Science Foundation (1238962, 1238959, 1239054, 1239166)
- European Commission (780788, EU-H2020, HORIZON2020, H2020)
- Defense Advanced Research Projects Agency (FA8750-17-2-0091, FA8750)
- Horizon 2020 Framework Programme (EU‐H2020, 780788)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Keywords
- poisoning attacks, linear regression, adversarial learning, statistical attacks, optimization framework, convergence guarantees, health care, loan assessment, real estate
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review