The DOI matches its Crossref record; 50 of the 52 references it cites were found in a registry or an index.
Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning
Open accessAbstract
As machine learning becomes widely used for automated decisions, attackers have strong incentives to manipulate the results and models generated by machine learning algorithms. In this paper, we perform the first systematic study of poisoning attacks and their countermeasures for linear regression models. In poisoning attacks, attackers deliberately influence the training data to manipulate the results of a predictive model. We propose a theoretically-grounded optimization framework specifically designed for linear regression and demonstrate its effectiveness on a range of datasets and models. We also introduce a fast statistical attack that requires limited knowledge of the training process. Finally, we design a new principled defense method that is highly resilient against all poisoning attacks. We provide formal guarantees about its convergence and an upper bound on the effect of poisoning attacks when the defense is deployed. We evaluate extensively our attacks and defenses on three realistic datasets from health care, loan assessment, and real estate domains.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Persistent, self-modifying memory further introduces risks of silent state corruption, where malicious logic can propagate across future reasoning steps without clear provenance (Jagielski et al., 2018;Li et al., 2022;Steinberger, Peter, 2025b).”
From Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents (2025) · cites this paper as Jagielski et al., 2018
Experimental — accuracy not yet measuredIn the citing paper
“Another detection-based defense mechanism uses euclidean distance to expose any deviation in the model update parameters for each client [90].”
From Vulnerabilities in federated learning (2021) · cites this paper as [90]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The Elements of Statistical Learning
Hastie, T., Tibshirani, R., & Friedman, J. (2009) · Springer Series in Statistics · doi:10.1007/978-0-387-84858-7 · Cited by 25,970
Fischler, M. A., & Bolles, R. C. (1981) · Communications of the ACM · doi:10.1145/358669.358692 · Cited by 25,893
The Elements of Statistical Learning: Data Mining, Inference, and Prediction
Lu, Z. Q. J. (2010) · Journal of the Royal Statistical Society Series A (Statistics in Society) · doi:10.1111/j.1467-985x.2010.00646_6.x · Cited by 12,916
Explaining and Harnessing Adversarial Examples
Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014) · arXiv · doi:10.48550/arxiv.1412.6572 · Cited by 10,381
Towards Evaluating the Robustness of Neural Networks
Carlini, N., & Wagner, D. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.49 · Cited by 8,859
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Robust estimation of a location parameter
Huber, P. J. (1964) · The Annals of Mathematical Statistics · doi:10.1214/aoms/1177703732 · Cited by 7,228
Robust principal component analysis?
Candès, E. J., Li, X., Ma, Y., & Wright, J. N. (2011) · Journal of the ACM · doi:10.1145/1970392.1970395 · Cited by 7,048
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
The Limitations of Deep Learning in Adversarial Settings
Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z. B., & Swami, A. (2016) · 2016 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2016.36 · Cited by 3,993
Flagged first, then by citations
2 of the 52 references couldn’t be matched to a known paper.
Research works printed but not linked: 6
- 0, Kaggle House Prices Advanced Regression Techniques
- kan, 0, Lending Club Loan Data
- hao, 2016, PREDA-TOR: Proactive recognition and elimination of domain abuse at time-of-registration, Proceedings of the 23rd ACM Conference on Computer and Communications Security
- faggella, 2016, Machine learning healthcare applications — 2017 and beyond
- 0, PharmGKB Downloads - IWPC Data
- srndic, 0, Mimicus - Contagio Dataset
Cited by
Sorted by citations
Items 601–700 of 861
Poisoning Actuation Attacks Against the Learning of an Optimal Controller
Fotiadis, F., Kanellopoulos, A., Vamvoudakis, K. G., & Hugues, J. (2024) · Proceedings of the ... American Control Conference/Proceedings of the American Control Conference · doi:10.23919/acc60939.2024.10644755 · Cited by 2
BrInstFlip: A Universal Tool for Attacking DNN-Based Power Line Fault Detection Models
Jiang, Y., Xu, Y., Liang, Z., Xu, W., Dong, T., Zhang, X., Yang, Y., Meng, Y., & Zhu, H. (2024) · IEEE/CIC International Conference on Communications in China (ICCC) · doi:10.1109/iccc62479.2024.10681810 · Cited by 2
Lee, J., Cho, Y., Lee, R., Yuk, S., Youn, J., Park, H., & Shin, D. (2025) · Electronics · doi:10.3390/electronics14020374 · Cited by 5
An Invisible Backdoor Attack Based on Semantic Feature
Chen, Y., Xu, X., Wang, X., Li, Z., & Chen, W. (2025) · International Journal of Pattern Recognition and Artificial Intelligence · doi:10.1142/s0218001425500041 · Cited by 6
Design-Reality Gap Analysis of Health Information Systems Failure
Makumbani, H., & Tsibolane, P. (2025) · Procedia Computer Science · doi:10.1016/j.procs.2025.02.199 · Cited by 2
FDBA: Feature-guided Defense against Byzantine and Adaptive attacks in Federated Learning
Hu, C., Hu, Q., Zhang, M., & Yang, Z. (2025) · Journal of Information Security and Applications · doi:10.1016/j.jisa.2025.104035 · Cited by 2
Can We Trust Your Voice? Exploring Vulnerabilities in Voice Authentication
Li, K., Baird, C., & Lin, D. (2025) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc54725.2025.10975995 · Cited by 2
Timber! Poisoning Decision Trees
Calzavara, S., Cazzaro, L., & Vettori, M. (2025) · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml64287.2025.00051 · Cited by 2
Modeling by topological data analysis and game theory for analyzing data poisoning phenomena
Феррара, М. (2025) · AIMS Mathematics · doi:10.3934/math.2025693 · Cited by 2
Byzantine-Robust Federated Learning
Liu, Z., Guo, Q., Hu, Y., Aseeri, A., Li, D., & Zhang, R. (2025) · International Conference on Computer Communications and Networks (ICCCN) · doi:10.1109/icccn65249.2025.11134006 · Cited by 2
Testing the Channels of Convolutional Neural Networks
Choi, K. Y., Son, D., Kim, Y., & Seo, J. (2023) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v37i12.26726 · Cited by 2
Towards Model-Centric Security for IoT Systems
Guo, Y., Tan, Z., & Lu, S. (2020) · International Conference on Computer Communications and Networks (ICCCN) · doi:10.1109/icccn49398.2020.9209689 · Cited by 2
Adversarial Black-Box Attacks with Timing Side-Channel Leakage
Nakai, T., SUZUKI, D., Omatsu, F., & Fujino, T. (2020) · IEICE Transactions on Fundamentals of Electronics Communications and Computer Sciences · doi:10.1587/transfun.2020cip0022 · Cited by 2
EPSTO-ARIMA: Electric Power Stochastic Optimization Predicting Based on ARIMA
Xu, Y., Xu, G., An, Z., & Liu, Y. (2021) · IEEE International Conference on Smart City and Informatization (iSCI) · doi:10.1109/isci53438.2021.00019 · Cited by 2
Hasan, F., Sarat, W. I. K., Khan, S., Hossain, M. L., Islam, M. T., & Ibrahim, M. N. (2022) · International Conference on Computing Advancements (ICCA) · doi:10.1145/3542954.3542991 · Cited by 2
AI and Stochastic Terrorism – Should it be done?
Kemper, B. (2022) · IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) · doi:10.1109/issrew55968.2022.00091 · Cited by 2
Using MNIST Dataset for De-Pois Attack and Defence
Niloor, C., Agarwal, R., & Mishra, P. (2023) · Algorithms for intelligent systems · doi:10.1007/978-981-99-5792-7_17 · Cited by 3
Guo, L., Chen, Y., & Yu, S. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-78189-6_8 · Cited by 2
Attacking Data Transforming Learners at Training Time
Alfeld, S., Vartanian, A., Newman-Johnson, L., & Rubinstein, B. I. P. (2019) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v33i01.33013167 · Cited by 2
Model Capacity Vulnerability in Hyper-Parameters Estimation
Zhao, W., Liu, X., Liu, Q., Chen, J., & Li, P. (2020) · IEEE Access · doi:10.1109/access.2020.2969276 · Cited by 2
Mitigation of Adversarial Attacks through Embedded Feature SelectionPreprint
Bao, Z., Muñoz-González, L., & Lupu, E. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1808.05705 · Cited by 2
White-Box Target Attack for EEG-Based BCI Regression ProblemsPreprint
Meng, L., Lin, C., Jung, T.-R., & Wu, D. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1911.04606 · Cited by 2
Class-Oriented Poisoning Attack.Preprint
Zhao, B., & Lao, Y. (2020) · arXiv (Cornell University) · Cited by 2
Graph Computing for Financial Crime and Fraud Detection: Trends, Challenges and OutlookPreprint
Kurshan, E., & Shen, H. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.03227 · Cited by 2
Stochastic-HMDs: Adversarial Resilient Hardware Malware Detectors through Voltage Over-scalingPreprint
Islam, M. S., Alouani, I., & Khasawneh, K. N. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2103.06936 · Cited by 2
Towards robust image classification with deep learning and real-time DNN inference on mobile
Zhao, P. (2020) · doi:10.17760/d20416558 · Cited by 2
HOLMES: A Platform for Detecting Malicious Inputs in Secure Collaborative ComputationPreprint
Chen, W., Sotiraki, K., Chang, I., Kantarcıoğlu, M., & Popa, R. A. (2021) · IACR Cryptology ePrint Archive · Cited by 2
HaS-Net: A Heal and Select Mechanism to Securely Train DNNs against Backdoor AttacksPreprint
Ali, H. M., Nepal, ., Kanhere, S. S., & Jha, S. K. (2021) · doi:10.36227/techrxiv.16571184 · Cited by 2
Leveraging Artificial Intelligence in blockchain-based E-health for safer decision making frameworkPreprint
Asqah, M. A., Moulahi, T., Zidi, S., & Alabdulatif, A. (2022) · Research Square · doi:10.21203/rs.3.rs-1379110/v1 · Cited by 2
Lipschitz Continuity and Data Poisoning Attacks — Applications in Intelligent Transportation SystemsPreprint
Wang, X., Wang, F., Hong, Y., & Ban, X. J. (2024) · SSRN Electronic Journal · doi:10.2139/ssrn.4622771 · Cited by 2
Applications, Opportunities and Challenges of AI in the Real Estate SectorPreprint
Antão, J., Ribeiro, R., & Pereira, R. (2024) · Research Square · doi:10.21203/rs.3.rs-4001575/v1 · Cited by 2
Arce, P. G., & Insua, D. R. (2024) · Wiley StatsRef: Statistics Reference Online · doi:10.1002/9781118445112.stat08332 · Cited by 2
Save-Points Detection for Machine Unlearning in Multiple Linear Regression Models
Nengwani, M., Chibaya, C., & Madzima, K. (2021) · International Multidisciplinary Information Technology and Engineering Conference (IMITEC) · doi:10.1109/imitec52926.2021.9714557 · Cited by 1
Hardware-Accelerated FaaS for the Edge-Cloud Continuum
Nanos, A., Kretsis, A., Mainas, C., Ntouskos, G., Ferikoglou, A., Danopoulos, D., Kokkinis, A., Masouros, D., Siozios, K., Soumplis, P., et al. (2023) · IEEE International Conference on Network Protocols (ICNP) · doi:10.1109/icnp59255.2023.10355594 · Cited by 1
Adversarial Learning for Coordinate Regression Through k-Layer Penetrating Representation
Jiang, M., Sui, Y., Lei, Y., Xie, X., Li, C., Liu, Y., & Tsang, I. W.-H. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3376437 · Cited by 1
Hidden Backdoor Attacks in NLP Based Network Services
Li, S., Zhu, H., Wu, W., & Shen, X. (2024) · Wireless networks · doi:10.1007/978-3-031-57389-7_4 · Cited by 1
Just War Theory and the Permissibility of Autonomous Weapons Systems
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.003.0008 · Cited by 1
Leveraging Imperfect Restoration for Data Availability Attack
Huang, Y., Styborski, J., Lyu, M., Wang, F., & Kong, A. W. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-73464-9_5 · Cited by 1
Federated Learning Poison Attack Detection Scheme Based on Gradient Similarity
Zhao, Q., Zhang, Y., Jing, Z., Zhou, Y., & Xin, Z. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-80419-9_2 · Cited by 1
Certified unlearning for a trustworthy machine learning-based access control administration
Llamas, J. M., Preuveneers, D., & Joosen, W. (2025) · Int. J. Inf. Sec. · doi:10.1007/s10207-025-01003-5 · Cited by 2
DOBEL: detecting backdoors in ensemble learning
Kim, S., & Hahn, C. (2025) · Cluster Computing · doi:10.1007/s10586-024-04961-y · Cited by 1
Model Residuals as Shields: A Two-Level Formulation to Defend Smart Grids From Poisoning Attacks
Lin, T.-W., Roy, P., Zeng, Y., Jin, M., Jia, R., Liu, C., & Sangiovanni-Vincentelli, A. L. (2025) · IEEE Internet of Things Journal · doi:10.1109/jiot.2025.3575005 · Cited by 1
Self-citationStrategic Interplay: Game-Theoretic Frameworks for Topological Robustness Against Data Poisoning
Феррара, М. (2025) · WSEAS Transactions on Information Science and Applications archive · doi:10.37394/23209.2025.22.44 · Cited by 1
Zhao, Y., Cao, Y., Zhang, J., Zhang, Z., & Wang, W. (2025) · Expert Systems with Applications · doi:10.1016/j.eswa.2025.129502 · Cited by 1
SignDefence: Byzantine-Robust Federated Learning with Sign Direction and Leaky ReLU
Moyeen, M. A., Kaur, K., Agarwal, A., Ricardo Manzano, S., Zaman, M., & Goel, N. (2025) · International Conference on Communications · doi:10.1109/icc52391.2025.11161809 · Cited by 1
Model Stability Defense Against Model Poisoning in Federated Learning
Guo, Q., Wu, D., Qi, Y., Qi, S., Li, Q., Yao, M., & Liang, K. (2025) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2025.3618769 · Cited by 1
SA-FL: Secure Aggregation Scheme in Federated Learning Against Poisoning Attacks
Chang, Y., Chen, Q., Luan, T. H., & Su, Z. (2026) · IEEE Transactions on Cognitive Communications and Networking · doi:10.1109/tccn.2026.3656284 · Cited by 1
Model Hijacking Attack in Federated Learning
Li, Z., Wu, S., Chen, R., Aditya, P., Akkuş, İ. E., Vanga, M., Zhang, M., Li, H., & Zhang, Y. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3666296 · Cited by 1
Copyright, Privacy, and Ethical Issues of Generative AI
Thoker, Z. A., Marwaha, L., & Jan, S. (2026) · Advances in computational intelligence and robotics book series · doi:10.4018/979-8-3373-7852-7.ch003 · Cited by 1
A Particle Consensus Approach to Solving Nonconvex-Nonconcave Min-Max Problems
Borghi, G., Huang, H., & Qiu, J. (2026) · SIAM Journal on Control and Optimization · doi:10.1137/25m1766760 · Cited by 1
Ma, M., Liu, S., Vo, V., Fang, M., Nepal, S., & Bai, G. (2026) · ACM Asia Conference on Computer and Communications Security (ASIA CCS) · doi:10.1145/3779208.3785390 · Cited by 1
Adversarial Deception in Deep Learning: Analysis and Mitigation
Wei, W., Liu, L., Loper, M. L., Chow, K.-H., Gürsoy, M. E., Truex, S., & Wu, Y. (2020) · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA) · doi:10.1109/tps-isa50397.2020.00039 · Cited by 1
Accelerating Poisoning Attack Through Momentum and Adam Algorithms
Jiang, W., Li, H., Gong, L., Yang, H., & Lu, R. (2020) · IEEE Vehicular Technology Conference · doi:10.1109/vtc2020-fall49728.2020.9348449 · Cited by 1
Timing Attack on Random Forests: Experimental Evaluation and Detailed Analysis
Dan, Y., Shibahara, T., & Takahashi, J. (2021) · Journal of Information Processing · doi:10.2197/ipsjjip.29.757 · Cited by 1
EPFSTO-ARIMA: Electric Power Forced Stochastic Optimization Predicting Based on ARIMA
Xu, G., & Xu, Y. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-93206-0_5 · Cited by 1
Sobkowicz, P. (2022) · Frontiers in Artificial Intelligence · doi:10.3389/frai.2022.1010219 · Cited by 1
Robust Learning with Adversarial Perturbations and Label Noise
Zhang, P.-F., Huang, Z. H., Luo, X., & Zhao, P. (2022) · ACM International Conference on Multimedia in Asia (MMAsia) · doi:10.1145/3551626.3564934 · Cited by 1
An Exploration of Poisoning Attacks on Data-Based Decision Making
Kinsey, S., Wong, W. T., Sinha, A., & Nguyen, T. H. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-26369-9_12 · Cited by 1
XMAM:X-raying models with a matrix to reveal backdoor attacks for federated learning
Zhang, J., Zhang, F., Jin, Q., Wang, Z., Lin, X., & Hei, X. (2023) · Digital Communications and Networks · doi:10.1016/j.dcan.2023.01.017 · Cited by 1
Beta Poisoning Attacks Against Machine Learning Models: Extensions, Limitations and Defenses
Kara, A., Koprucu, N., & Gürsoy, M. E. (2022) · IEEE International Conference on Trust, Privacy and Security in Intelligent Systems and Applications (TPS-ISA) · doi:10.1109/tps-isa56441.2022.00031 · Cited by 2
Argumentation-Based Adversarial Regression with Multiple Learners
Bhuyan, M. H., & Nieves, J. C. (2022) · IEEE International Conference on Tools with Artificial Intelligence (ICTAI) · doi:10.1109/ictai56018.2022.00023 · Cited by 1
Training-Time Attacks against K-nearest Neighbors
Vartanian, A., Rosenbaum, W., & Alfeld, S. (2023) · Proceedings of the AAAI Conference on Artificial Intelligence · doi:10.1609/aaai.v37i8.26198 · Cited by 1
Zhang, Z., Zhang, C., Chen, G., Xiao, S., & Huang, L. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-36049-7_19 · Cited by 1
Understanding of healthcare problems and solutions using deep learning
Shrivastava, R., Singh, S. P., Singh, S., & Sajwan, M. (2023) · Elsevier eBooks · doi:10.1016/b978-0-443-19413-9.00016-3 · Cited by 1
Способи маскування військових об’єктів від виявлення системами штучного інтелекту
Tsybulia, S., & Волокита, А. (2023) · Сучасні інформаційні технології у сфері безпеки та оборони · doi:10.33099/2311-7249/2023-47-2-139-146 · Cited by 1
Adversarial Attack Versus a Bio-Inspired Defensive Method for Image Classification
Garcia-Porras, O., Salazar-Colores, S., Moya-Sánchez, E. U., & Sánchez-Pérez, A. (2023) · Communications in computer and information science · doi:10.1007/978-3-031-45316-8_34 · Cited by 1
Cohort-based Federated Learning Credit Evaluation Method in the Metaverse
Li, H., Zhou, Z., Zhang, H., & Jiang, K. (2023) · International Conference on High Performance Compilation, Computing and Communications (HP3C) · doi:10.1145/3606043.3606044 · Cited by 1
Federated Computing in Electric Vehicles to Predict Coolant Temperature
Schwermer, R., Bicer, E.-A., Schirmer, P. A., Mayer, R., & Jacobsen, H. (2023) · International Middleware Conference · doi:10.1145/3626562.3626829 · Cited by 1
Random Data Poisoning Attacks on Nonlinear Regression Learning
Sakib, M. N. H., & Islam, A. B. M. A. A. (2023) · International Conference on Networking, Systems and Security (NSysS) · doi:10.1145/3629188.3629199 · Cited by 1
An Improved Nested Training Approach to Mitigate Clean-label Attacks against Malware Classifiers
Reddy, A., Venkatesan, S., Izmailov, R., & Oprea, A. (2023) · IEEE Military Communications Conference (MILCOM) · doi:10.1109/milcom58377.2023.10356253 · Cited by 1
Self-citationSecurity of NVMe Offloaded Data in Large-Scale Machine Learning
Krauß, T., Götz, R., & Dmitrienko, A. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-51482-1_8 · Cited by 1
Provably Secure Decisions Based on Potentially Malicious Information
Wang, D., Muller, T., & Sun, J. (2024) · IEEE Transactions on Dependable and Secure Computing · doi:10.1109/tdsc.2024.3353295 · Cited by 1
Thebaud, T., Joshi, S., Li, H., Sustek, M., Villalba, J., Khudanpur, S. P., & Dehak, N. (2023) · IEEE Workshop on Automatic Speech Recognition and Understanding (ASRU) · doi:10.1109/asru57964.2023.10389650 · Cited by 1
Data Poisoning Attacks in Cognitive Computing
Koundinya, A. K., Patil, S. S., & Chandu, B. R. (2024) · IEEE International Conference for Convergence in Technology (I2CT) · doi:10.1109/i2ct61223.2024.10544345 · Cited by 1
Dye4AI: Assuring Data Boundary on Generative AI Services
Wang, S., Sun, K., & Zhai, Y. (2024) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3658644.3670299 · Cited by 1
Efficient Detection and Mitigation Schemes for Speculative Side Channels
Pashrashid, A., Hajiabadi, A., & Carlson, T. E. (2024) · IEEE International Symposium on Circuits and Systems proceedings · doi:10.1109/iscas58744.2024.10558385 · Cited by 1
Poisoning Attack in Machine Learning Based Invalid Ad Traffic Detection
Yu, L., Li, S., Meng, Y., Wang, X. R., & Zhu, H. (2024) · Communications in computer and information science · doi:10.1007/978-981-97-4519-7_5 · Cited by 1
Trojan attribute inference attack on gradient boosting decision trees
Ito, K., Enkhtaivan, B., Teranishi, I., & Sakuma, J. (2024) · IEEE European Symposium on Security and Privacy · doi:10.1109/eurosp60621.2024.00036 · Cited by 1
When Rewards Deceive: Counteracting Reward Poisoning on Online Deep Reinforcement Learning
Bouhaddi, M., & Adi, K. (2024) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr61664.2024.10679438 · Cited by 1
The Groundwork for an Ethics of Artificial Intelligence in Defence
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.003.0001 · Cited by 1
A bibliometric study toward quantitative research assessment of security of machine learning
Paracha, A., & Arshad, J. (2024) · Information Discovery and Delivery · doi:10.1108/idd-01-2024-0003 · Cited by 3
Detectable Mislabeling – Can Faulty AI Models be Recognized from Incomplete Memory Traces?
Krzywiecki, Ł., Kulczycki, T., Nteranya, C. E., & Stós, A. (2024) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom63139.2024.00329 · Cited by 1
An Analytical Framework for Evaluating Successful Poisoning Attacks on Machine Learning Algorithms
Surekha, M., Sagar, A. K., & Khemchandani, V. (2025) · SN Computer Science · doi:10.1007/s42979-025-03814-8 · Cited by 1
Prevention of Data Poisonous Threats on Machine Learning Models in e-Health
Alruwaili, E., & Moulahi, T. (2025) · ACM Transactions on Computing for Healthcare · doi:10.1145/3728369 · Cited by 1
Fortifying the Future: Defending Machine Learning Systems from AI-Powered Cyberattacks
Atluri, G. (2025) · Journal of Computer Science and Technology Studies · doi:10.32996/jcsts.2025.7.4.11 · Cited by 1
Sharma, D. P., Lashkari, A. H., Firoozjaei, M. D., Mahdavifar, S., & Xiong, P. (2025) · Progress in IS · doi:10.1007/978-3-031-91524-6_8 · Cited by 1
Nurega, B. A., Zaki, A., & Riyadi, S. (2025) · AIP conference proceedings · doi:10.1063/5.0286909 · Cited by 1
Adversarial Robustness of Machine Learning-Based Access Control
Llamas, J. M., Hoof, M. V., Preuveneers, D., & Joosen, W. (2025) · Lecture notes in computer science · doi:10.1007/978-3-032-00630-1_6 · Cited by 1
Learner-Independent Targeted Data Omission Attacks
Barash, G., Shehory, O. M., Kraus, S., & Farchi, E. (2020) · Communications in computer and information science · doi:10.1007/978-3-030-62144-5_3 · Cited by 1
The Role of Data Geometry in Adversarial Machine Learning
Bhagoji, A. N. (2020) · Cited by 1
On the Effectiveness of Poisoning against Unsupervised Domain Adaptation
Mehra, A., Kailkhura, B., Chen, P., & Hamm, J. (2021) · International Conference on Machine Learning · Cited by 1
Research Progress and Challenges of Membership Inference Attacks in Machine Learning
高, 婷. (2022) · Operations Research and Fuzziology · doi:10.12677/orf.2022.121001 · Cited by 1
Federated Learning-Based IDS Against Poisoning Attacks
Xu, M., & Li, X. (2022) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-030-96791-8_25 · Cited by 1
A top-down survey on securing IoT with machine learning: goals, recent advances and challenges
Iqbal, S., & Qureshi, S. (2022) · International Journal of Wireless and Mobile Computing · doi:10.1504/ijwmc.2022.10046719 · Cited by 3
TrustlessNAS: Towards Trustless Network Architecture Search
Bathen, L. A. D., & Jadav, D. (2022) · IEEE International Symposium on Service-Oriented System Engineering (SOSE) · doi:10.1109/sose55356.2022.00020 · Cited by 1
Khalid, F., Hanif, M. A., Rehman, S., & Shafique, M. (2018) · arXiv (Cornell University) · Cited by 2
On the Adversarial Robustness of Multivariate Robust EstimationPreprint
Bayraktar, E., & Lai, L. (2019) · arXiv (Cornell University) · doi:10.48550/arxiv.1903.11220 · Cited by 1
Kravchik, M., & Shabtai, A. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2002.02741 · Cited by 1
Learning From Context-Agnostic Synthetic Data.Preprint
Jin, C., & Rinard, M. (2020) · arXiv (Cornell University) · Cited by 1
Metadata
- Authors
- Jagielski, M., Oprea, A., Biggio, B., Liu, C., Nita-Rotaru, C., & Li, B.
- Affiliations
- Northeastern University (US)
- University of Cagliari (IT)
- University of California, Berkeley (US)
- Venue
- 2018 IEEE Symposium on Security and Privacy (SP)
- Publisher
- IEEE
- Published
- 2018-05
- Pages
- 19-35
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W2962763344
- Cited by
- 861
- References
- 52
- Citations by year
- 2026: 50 · 2025: 114 · 2024: 133 · 2023: 146 · 2022: 120 · 2021: 132 · 2020: 98 · 2019: 54 · 2018: 14
- FWCI
- 30.43
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- UNICA IRIS Institutional Research Information System (University of Cagliari) (submittedVersion, public-domain)
- arXiv (Cornell University)
- Funders
- National Science Foundation (1238962, 1238959, 1239054, 1239166)
- European Commission (780788, EU-H2020, HORIZON2020, H2020)
- Defense Advanced Research Projects Agency (FA8750-17-2-0091, FA8750)
- Horizon 2020 Framework Programme (EU‐H2020, 780788)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Keywords
- poisoning attacks, linear regression, adversarial learning, statistical attacks, optimization framework, convergence guarantees, health care, loan assessment, real estate
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
