The DOI matches its Crossref record; 50 of the 52 references it cites were found in a registry or an index.
Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning
Open accessAbstract
As machine learning becomes widely used for automated decisions, attackers have strong incentives to manipulate the results and models generated by machine learning algorithms. In this paper, we perform the first systematic study of poisoning attacks and their countermeasures for linear regression models. In poisoning attacks, attackers deliberately influence the training data to manipulate the results of a predictive model. We propose a theoretically-grounded optimization framework specifically designed for linear regression and demonstrate its effectiveness on a range of datasets and models. We also introduce a fast statistical attack that requires limited knowledge of the training process. Finally, we design a new principled defense method that is highly resilient against all poisoning attacks. We provide formal guarantees about its convergence and an upper bound on the effect of poisoning attacks when the defense is deployed. We evaluate extensively our attacks and defenses on three realistic datasets from health care, loan assessment, and real estate domains.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The source backs part of the claim, not all of it — or backs it for a different population, condition or comparison.
In the citing paper
“Persistent, self-modifying memory further introduces risks of silent state corruption, where malicious logic can propagate across future reasoning steps without clear provenance (Jagielski et al., 2018;Li et al., 2022;Steinberger, Peter, 2025b).”
From Open Challenges in Multi-Agent Security: Towards Secure Systems of Interacting AI Agents (2025) · cites this paper as Jagielski et al., 2018
Experimental — accuracy not yet measuredIn the citing paper
“Another detection-based defense mechanism uses euclidean distance to expose any deviation in the model update parameters for each client [90].”
From Vulnerabilities in federated learning (2021) · cites this paper as [90]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
The Elements of Statistical Learning
Hastie, T., Tibshirani, R., & Friedman, J. (2009) · Springer Series in Statistics · doi:10.1007/978-0-387-84858-7 · Cited by 25,970
Fischler, M. A., & Bolles, R. C. (1981) · Communications of the ACM · doi:10.1145/358669.358692 · Cited by 25,893
The Elements of Statistical Learning: Data Mining, Inference, and Prediction
Lu, Z. Q. J. (2010) · Journal of the Royal Statistical Society Series A (Statistics in Society) · doi:10.1111/j.1467-985x.2010.00646_6.x · Cited by 12,916
Explaining and Harnessing Adversarial Examples
Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014) · arXiv · doi:10.48550/arxiv.1412.6572 · Cited by 10,381
Towards Evaluating the Robustness of Neural Networks
Carlini, N., & Wagner, D. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.49 · Cited by 8,859
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Robust estimation of a location parameter
Huber, P. J. (1964) · The Annals of Mathematical Statistics · doi:10.1214/aoms/1177703732 · Cited by 7,228
Robust principal component analysis?
Candès, E. J., Li, X., Ma, Y., & Wright, J. N. (2011) · Journal of the ACM · doi:10.1145/1970392.1970395 · Cited by 7,048
Membership Inference Attacks Against Machine Learning Models
Shokri, R., Stronati, M., Song, C., & Shmatikov, V. (2017) · 2017 IEEE Symposium on Security and Privacy (SP) · doi:10.1109/sp.2017.41 · Cited by 4,754
The Limitations of Deep Learning in Adversarial Settings
Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z. B., & Swami, A. (2016) · 2016 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2016.36 · Cited by 3,993
Flagged first, then by citations
2 of the 52 references couldn’t be matched to a known paper.
Research works printed but not linked: 6
- 0, Kaggle House Prices Advanced Regression Techniques
- kan, 0, Lending Club Loan Data
- hao, 2016, PREDA-TOR: Proactive recognition and elimination of domain abuse at time-of-registration, Proceedings of the 23rd ACM Conference on Computer and Communications Security
- faggella, 2016, Machine learning healthcare applications — 2017 and beyond
- 0, PharmGKB Downloads - IWPC Data
- srndic, 0, Mimicus - Contagio Dataset
Cited by
Sorted by citations
Items 701–800 of 861
Defending Regression Learners Against Poisoning AttacksPreprint
Weerasinghe, S., Erfani, S., Alpcan, T., Leckie, C. A., & Kopacz, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2008.09279 · Cited by 2
A Generative Model based Adversarial Security of Deep Learning and Linear Classifier ModelsPreprint
Sivaslioglu, S., Catak, F. O., & Şahinbaş, K. (2020) · Informatica · doi:10.48550/arxiv.2010.08546 · Cited by 7
Xu, Z. L., Shen, J., Wang, Z., & Dai, Y. (2021) · arXiv (Cornell University) · Cited by 1
FLAP: Federated Learning with Attack and Privacy AwarenessPreprint
Xue, W., Ahmed, N., Masood, R., Hu, W. S., Seneviratne, A. P., & Jha, S. K. (2022) · doi:10.36227/techrxiv.19766023.v1 · Cited by 1
Data Poisoning Attack Against Federated Learning Based Autonomous Driving ModelPreprint
Wang, S., Li, Q., Cui, Z., Hou, J., & Huang, C. (2022) · SSRN Electronic Journal · doi:10.2139/ssrn.4195982 · Cited by 1
Khorramfar, M. (2023) · doi:10.36939/ir.202308301626 · Cited by 1
Oversight of Unsafe Systems via Dynamic Safety EnvelopesPreprint
Manheim, D. (2018) · arXiv (Cornell University) · doi:10.48550/arxiv.1811.09246
Machine learning in physics: the pitfalls of poisoned training sets
Fang, C., Barzeger, A., & Katzgraber, H. G. (2020) · Machine Learning Science and Technology · doi:10.1088/2632-2153/aba821
PoisHygiene: Detecting and Mitigating Poisoning Attacks in Neural NetworksPreprint
Guo, J., Wang, T., & Liu, C. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2003.11110
Self-citationWen, J., Zhao, B. Z. H., Xue, M., & Qian, H. (2020) · arXiv (Cornell University)
Liu, X., Zhao, W., Pan, L., Jiao, S., & Liu, Q. (2019) · IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) · doi:10.1109/infocomwkshps47286.2019.9093771
Timing Attack on Random Forests for Generating Adversarial Examples
Dan, Y., Shibahara, T., & Takahashi, J. (2020) · Lecture notes in computer science · doi:10.1007/978-3-030-58208-1_16
Defending SVMs against Poisoning Attacks: the Hardness and DBSCAN ApproachPreprint
Ding, H., Yang, F., & Huang, J. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2006.07757 · Cited by 1
Bastidas, M., Díaz, H. M., & Quintero, P. S. O. (2020) · Aglala
Adversarial Vulnerability of Active Transfer Learning
Müller, N. M., & Böttinger, K. (2021) · Lecture notes in computer science · doi:10.1007/978-3-030-74251-5_10
Machine learning pipeline for battery state of health estimationPreprint
Roman, D., Saxena, S., Robu, V., PECHT, M. G., & Flynn, D. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2102.00837
Graph Unlearning.Preprint
Chen, M., Zhang, Z., Wang, T., Michael Backes, A., Humbert, M., & Zhang, Y. (2021) · arXiv (Cornell University)
Broadly Applicable Targeted Data Sample Omission AttacksPreprint
Barash, G., Farchi, E., Kraus, S., & Shehory, O. M. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2105.01560
Dai, H., Wu, J., & Zheng, Z. (2021) · Springer eBooks · doi:10.1007/978-981-16-0127-9_7
Nguyen, T., Asghar, H. J., Bhakar, R., Kaafar, D., & Farokhi, F. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2106.09904
Poisoning Online Learning Filters: DDoS Attacks and CountermeasuresPreprint
Tann, W. J.-W., & Chang, E. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2107.12612
Model Extraction in the Context of Audio Classifiers
Bourtoule, L. (2021) · TSpace (University of Toronto)
Integrity and privacy in adversarial machine learning
Jagielski, M. (2021) · Digital Repository Service (Northeastern University) · doi:10.17760/d20413920
Self-citationHaS-Net: A Heal and Select Mechanism to Securely Train DNNs against Backdoor AttacksPreprint
Ali, H. M., Nepal, ., Kanhere, S. S., & Jha, S. K. (2021) · doi:10.36227/techrxiv.16571184.v1
Widen The Backdoor To Let More Attackers InPreprint
Datta, S., Lovisotto, G., Martinović, I., & Shadbolt, N. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2110.04571 · Cited by 1
Maddisetti, L. (2022) · SSRN Electronic Journal · doi:10.2139/ssrn.4094651
FLAP: Federated Learning with Attack and Privacy AwarenessPreprint
Xue, W., Ahmed, N., Masood, R., Hu, W. S., Seneviratne, A. P., & Jha, S. K. (2022) · doi:10.36227/techrxiv.19766023
Applying Machine Learning to use security oracles: a case study in virus and malware detection
Preuveneers, D., Lavens, E., & Joosen, W. (2022) · IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) · doi:10.1109/eurospw55150.2022.00030 · Cited by 1
Adversarial attack application analytics in machine learning
Zhang, H. (2022) · ITM Web of Conferences · doi:10.1051/itmconf/20224701005
Safety in machine learning: Hazards, contradict actions, and assessments
Akarapu, M., Yadav, B. P., Chandhar, K., Danthamala, K. R., & Sreelatha, K. (2022) · AIP conference proceedings · doi:10.1063/5.0086800
Investigation of poisonous attacks against network intrusion detection systems
Nguyen, V. Q. (2022) · Journal of Science and Technique · doi:10.56651/lqdtu.jst.v11.n01.359.ict
Training-time adversarial attacks
Chen, P., & Hsieh, C. (2022) · Elsevier eBooks · doi:10.1016/b978-0-12-824020-5.00014-4
(2022) · Elsevier eBooks · doi:10.1016/b978-0-12-824020-5.00034-x
Backdoor attack based on feature in federated learning
Cao, L., & Li, F. (2022) · International Symposium on Computer Technology and Information Science (ISCTIS) · doi:10.1117/12.2653697
Countermeasure of Polluting Health-Related Dataset for Data Mining
Liu, I., Li, J.-S., Peng, Y.-C., Lee, M.-H., & Liu, C.-G. (2022) · IEEE Eurasia Conference on Biomedical Engineering, Healthcare and Sustainability (ECBIOS) · doi:10.1109/ecbios54627.2022.9945037
Self-citationAn Autonomic Deep Learning Artificial Neural Network based Algorithm for Effective Re-generation
S, R. M., Srivatsa, A., & Kulkarni, S. A. (2022) · International Conference on Computation System and Information Technology for Sustainable Solutions (CSITSS) · doi:10.1109/csitss57437.2022.10026382
Adversarial Machine Learning Problems: Threats and Attacks
(2023) · ISSE National Conference on Systems Approach for Self-Reliance in Advanced Technologies (INAC) · doi:10.37285/bsp.sasat2023.31
Defending deepfake detector against data poisoning attacks
Cutkosky, M. K. (2022) · MOspace Institutional Repository (University of Missouri) · doi:10.32469/10355/95196
Based Attack Detection on Machine Learning Algorithm
Kumar, M. T. S. (2023) · INTERANTIONAL JOURNAL OF SCIENTIFIC RESEARCH IN ENGINEERING AND MANAGEMENT · doi:10.55041/ijsrem25053
Cybersecurity Assessment Construction of Artificial Intelligence
Batess, R., Fellah, Y. E., Errais, R., Bouskri, G., & Baali, E. H. (2023) · Lecture notes on data engineering and communications technologies · doi:10.1007/978-3-031-36258-3_44
Investigation of Layer-wise Feature Analysis for Backdoor Attacks Detection in Deep Neural Networks
Preetha, S., Nalini, M. K., Mahalakshmi, B. S., Dongal, A. R., & Vineetha, K. (2023) · IJARCCE · doi:10.17148/ijarcce.2023.12815
Evaluation of Robustness Metrics for Defense of Machine Learning Systems
DeMarchi, J., Rijken, R., Melrose, J., Madahar, B. K., Fumera, G., Roli, F., Ledda, E., Aktaş, M., Kurth, F., Baggenstoss, P. M., et al. (2023) · International Conference on Military Communications and Information Systems (ICMCIS) · doi:10.1109/icmcis59922.2023.10253593 · Cited by 1
Adapting Detection in Blockchain-enabled Federated Learning for IoT Networks
Lopez, D. L., Farooq, B., & Mallah, R. A. (2023) · International Conference on Electrical, Computer, Communications and Mechatronics Engineering (ICECCME) · doi:10.1109/iceccme57830.2023.10252819 · Cited by 1
Deng, C., Pan, X., Ye, K., Gao, H., & Wang, H. (2023) · International Conference on Control, Robotics and Intelligent System (CCRIS) · doi:10.1145/3622896.3622901
Barros, P. H., Murai, F., & Ramos, H. S. (2023) · Lecture notes in computer science · doi:10.1007/978-3-031-45368-7_29
Articulating the power of reasoning and gathering data for information security and justice
David, P. E., & Anandhakumar, P. (2023) · Advances in computers · doi:10.1016/bs.adcom.2023.08.003
Resilient machine learning methods for cyber-attack detection
Ongun, T. (2023) · doi:10.17760/d20486918 · Cited by 1
Bo, J., & Bexci, M. S. (2023) · International Journal of Applied Science and Engineering · doi:10.6703/ijase.202403_21(1).002
Do Datapoints Argue?: Argumentation for Hierarchical Agreement in Datasets
Bahuguna, A., Haydar, S., Brännström, A., & Nieves, J. C. (2024) · Communications in computer and information science · doi:10.1007/978-3-031-50485-3_31
DaBA: Data-free Backdoor Attack against Federated Learning via Malicious Server
Chen, K., Fang, L., Wang, M., & Yin, C. (2023) · International Conference on Image Processing, Computer Vision and Machine Learning (ICICML) · doi:10.1109/icicml60161.2023.10424802
Li, S., Zhu, H., Wu, W. R., & Shen, X. (2024) · Wireless networks · doi:10.1007/978-3-031-57389-7_1
Does Differential Privacy Prevent Backdoor Attacks in Practice?
Razmi, F., Lou, J., & Xiong, L. (2024) · Lecture notes in computer science · doi:10.1007/978-3-031-65172-4_20 · Cited by 1
Verifiable Privacy-Preserving Federated Learning in Web 3.0
Shen, M., Tang, X., Wang, W., & Zhu, L. (2024) · Digital Privacy and Security · doi:10.1007/978-981-97-5752-7_3
Tang, B., & Li, X. (2024) · Springer optimization and its applications · doi:10.1007/978-3-031-58923-2_2
Credit-Based Client Selection for Resilient Model Aggregation in Federated Learning
Khorramfar, M., Mtawa, Y. A., Abusitta, A. H., & Halabi, T. (2024) · International Conference on Communications · doi:10.1109/icc51166.2024.10622828
Sravanthi, C., & Kumar, B. S. (2024) · Lecture notes in electrical engineering · doi:10.1007/978-981-97-8043-3_145
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.002.0008
Taking a Moral Gambit: Accepting Moral Responsibility for the Actions of Autonomous Weapons Systems
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.003.0007
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.002.0007
Adversarial and Non-kinetic Uses of AI: Conceptual and Ethical Challenges
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.003.0004
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.002.0003
Adversarial and Kinetic Uses of AI: The Definition of Autonomous Weapon Systems
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.003.0006 · Cited by 1
Adversarial and Non-kinetic Uses: The Case of Artificial Intelligence for Cyber Deterrence
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.003.0005
Sustainment and Support Uses of AI in Defence: The Case of AI-Augmented Intelligence Analysis
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.003.0003
Ethical Principles for AI in Defence
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.003.0002
Taddeo, M. (2024) · Oxford University Press eBooks · doi:10.1093/oso/9780197745441.002.0005
Security of Linear Regression Models
Veena, S. T., Hariharan, S., & Girivasan, R. (2024) · Advances in electronic government, digital divide, and regional development book series · doi:10.4018/979-8-3693-7883-0.ch009
Securing ML Models: A Systematic Survey of Poisoning Attacks and Defense Mechanisms
Jasim, M. N., & Allah, H. A. A. A. (2024) · Journal of Al-Qadisiyah for Computer Science and Mathematics · doi:10.29304/jqcsm.2024.16.41776
DefMPA: Defending Model Poisoning Attacks in Federated Learning via Model Update Prediction
Guo, M., Chen, B., Xue, B., & Liu, J. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-80419-9_13
Aspects of Security Challenges and Mechanisms in IoT Network
Antony, E., & Roy, A. K. (2025) · Lecture notes in networks and systems · doi:10.1007/978-981-97-8476-9_25
Backdoor Detection Through Replicated Execution of Outsourced Training
Jia, H., Wyllie, S., Sediq, A. B., Ibrahim, A., & Papernot, N. (2025) · IEEE Conference on Secure and Trustworthy Machine Learning (SaTML) · doi:10.1109/satml64287.2025.00017 · Cited by 1
Secured edge intelligence in smart transportation CPS
Tian, P., Wang, Q., Chen, Y., & Yu, W. (2025) · Elsevier eBooks · doi:10.1016/b978-0-44-326572-3.00023-1
Poisoning Attacks against Quantile L1 Regression in CPS Anomaly Detection Frameworks
Islam, M. J., Meyer, R. T., & Bhattacharjee, S. (2025) · ACM International Workshop on Security and Privacy Analytics (IWSPA) · doi:10.1145/3716815.3729009
Vulnerabilities of AI in Cybersecurity
Shahid, S. (2025) · International Journal of Scientific Engineering and Research · doi:10.70729/se25604130052
On the Two-fold Role of Logic Constraints in Deep Learning
Ciravegna, G. (2025) · Firenze University Press eBooks · doi:10.36253/979-12-215-0680-8
Gu, Z., Wang, L., Zhang, D., & Fang, B. (2025) · Springer eBooks · doi:10.1007/978-981-96-9263-7_5
Jiang, Y., Ma, X., & Wu, Z. (2025) · Elsevier eBooks · doi:10.1016/b978-0-44-324840-5.00011-1
(2025) · Elsevier eBooks · doi:10.1016/b978-0-44-324840-5.00019-6
Hu, A., Zhang, Z., Quan, G., & Yue, X. (2025) · ACM Transactions on Privacy and Security · doi:10.1145/3757916
G-DCAP: Stealthy Adversarial Attacks on Multi-Sensor IoT Systems
Gunawardena, R., Karunanayake, N., Seneviratne, S., Masood, R., & Kanhere, S. S. (2025) · International Conference on Distributed Computing in Smart Systems and the Internet of Things (DCOSS-IoT) · doi:10.1109/dcoss-iot65416.2025.00028 · Cited by 1
Online Reward Poisoning in Reinforcement Learning With Convergence Guarantee
Li, J., Zhang, B., Niu, Y., Wu, S., Ding, K., & Wu, J. (2025) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2025.3595415
KaRe: Towards Flexible and Effective Machine Unlearning with Knowledge Alignment and Repair
Chai, Z., Liu, Q., Hu, Q., & Li, P. (2025) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-031-93251-9_16
Defending Against Beta Poisoning Attacks in Machine Learning Models
Gulciftci, N., & Gürsoy, M. E. (2025) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr64739.2025.11130050
Cybersecurity Challenges in Open Data and AI Systems for Sustainable Local Development
Grönman, J., Pohjola, T., & Haukioja, T. (2025) · International Convention on Information and Communication Technology, Electronics and Microelectronics · doi:10.1109/mipro65660.2025.11132045
Gul, M., Ali, S., Ali, S., Rehman, A., Qasim, M., Naveed, H., Asiri, M., Phelan, J. E., Clark, T. G., Campino, S. G., et al. (2025) · Research Square · doi:10.21203/rs.3.rs-7142035/v1
Luna, J. A., Siman, C. F. S., Pereira, L. G., de Oliveira, T. L., Sanhá, E. T. D. S., & Guimarães, F. G. (2025) · Simpósio Brasileiro de Cibersegurança (SBSeg) · doi:10.5753/sbseg.2025.9805
A Hybrid TRIM and N-LID Defense Against Poisoning Attacks
Arab, M., & Mazri, T. (2025) · Lecture notes in networks and systems · doi:10.1007/978-3-032-01536-5_50
A Color-Based Data Poisoning Backdoor Approach for Misleading Adversarial Privacy Prediction
Rizwan, M., Xingfu, W., Ke, Y., Hawbani, A., Shrivastava, S., Angın, P., & Han, Z. (2025) · Communications in computer and information science · doi:10.1007/978-981-95-0172-4_17
Trustworthy Machine Learning with Adversarial Examples
Han, B., & Liu, T. (2025) · Springer eBooks · doi:10.1007/978-981-96-9396-2_3
Counter-adversarial training data distribution validation
Indyk, I., & Zabarankin, M. (2025) · Optimization Letters · doi:10.1007/s11590-025-02253-x
Adopting LLMs in Internet of Cloud Ecosystems: Identifying the Key Privacy Challenges
Tsouplaki, A., Kalloniatis, C., & Mikros, G. K. (2025) · IFIP advances in information and communication technology · doi:10.1007/978-3-032-02504-3_21
α-SAV: Generalized Weighted Input Verification for Secure Aggregation in Federated Learning
Lu, Z. G., Long, Y., Zhou, Q., Zou, M., Cai, W., & Lu, S. (2025) · IEEE International Conference on Multimedia and Expo (ICME) · doi:10.1109/icme59968.2025.11209419
Neeko: Model Hijacking Attacks Against Generative Adversarial Networks
Chu, J., Liu, Y., He, X., Michael Backes, A., Zhang, Y., & Salem, A. (2025) · IEEE International Conference on Multimedia and Expo (ICME) · doi:10.1109/icme59968.2025.11209436
ASPARaGUS: Blockchain-Based Efficient Framework for Neural Network Poisoning Mitigation
Day, A., Smith, J., Dagher, G. G., & Andersen, T. (2025) · International Conference on Blockchain Computing and Applications (BCCA) · doi:10.1109/bcca66705.2025.11229654
ARMBench: Benchmarking Adversarial Robustness of Multitask Perception in Autonomous Driving
Li, Y., Liu, Y., & Xu, L. (2025) · ACM/IEEE Symposium on Edge Computing (SEC) · doi:10.1145/3769102.3770607
A Per-Bag Suspicion-Based Bagging Strategy for Fighting Poisoning Attacks in Classification
Akasukpe, A., Adeyemi, T., Madani, P., Yang, L., & Martín, M. V. (2025) · Conference on Privacy, Security and Trust · doi:10.1109/pst65910.2025.11268872
Metadata
- Authors
- Jagielski, M., Oprea, A., Biggio, B., Liu, C., Nita-Rotaru, C., & Li, B.
- Affiliations
- Northeastern University (US)
- University of Cagliari (IT)
- University of California, Berkeley (US)
- Venue
- 2018 IEEE Symposium on Security and Privacy (SP)
- Publisher
- IEEE
- Published
- 2018-05
- Pages
- 19-35
- ISSN
- 1081-6011 (ISSN-L)
- OpenAlex
- W2962763344
- Cited by
- 861
- References
- 52
- Citations by year
- 2026: 50 · 2025: 114 · 2024: 133 · 2023: 146 · 2022: 120 · 2021: 132 · 2020: 98 · 2019: 54 · 2018: 14
- FWCI
- 30.43
- Type
- conference paper
- Language
- en
- Open access
- bronze
- doi.org
- Locations
- IEEE Symposium on Security and Privacy (S&P) (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- UNICA IRIS Institutional Research Information System (University of Cagliari) (submittedVersion, public-domain)
- arXiv (Cornell University)
- Funders
- National Science Foundation (1238962, 1238959, 1239054, 1239166)
- European Commission (780788, EU-H2020, HORIZON2020, H2020)
- Defense Advanced Research Projects Agency (FA8750-17-2-0091, FA8750)
- Horizon 2020 Framework Programme (EU‐H2020, 780788)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Artificial Intelligence › Privacy-Preserving Technologies in Data
- Physical Sciences › Computer Science › Hardware and Architecture › Security and Verification in Computing
- Keywords
- poisoning attacks, linear regression, adversarial learning, statistical attacks, optimization framework, convergence guarantees, health care, loan assessment, real estate
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
