{"id":"https://openalex.org/W2567026784","doi":null,"title":"Robust Large Margin Approaches for Machine Learning in Adversarial Settings","display_name":"Robust Large Margin Approaches for Machine Learning in Adversarial Settings","publication_year":2016,"publication_date":"2016-11-21","ids":{"openalex":"https://openalex.org/W2567026784","mag":"2567026784"},"language":"en","primary_location":{"id":"pmh:oai:scholarsbank.uoregon.edu:1794/20677","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1794/20677","pdf_url":"http://hdl.handle.net/1794/20677","source":{"id":"https://openalex.org/S4377196436","display_name":"Scholars' Bank (University of Oregon)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I181233156","host_organization_name":"University of Oregon","host_organization_lineage":["https://openalex.org/I181233156"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Electronic Thesis or Dissertation"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"http://hdl.handle.net/1794/20677","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041087068","display_name":"Mohamad Ali Torkamani","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Mohamad Ali Torkamani","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5041087068"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"adversarial learning","score":0.9490000009536743},{"id":"https://openalex.org/keywords/robustness","display_name":"robustness","score":0.5170000195503235},{"id":"https://openalex.org/keywords/large-margin-learning","display_name":"large margin learning","score":0.656000018119812},{"id":"https://openalex.org/keywords/structured-prediction","display_name":"structured prediction","score":0.9559999704360962},{"id":"https://openalex.org/keywords/collective-classification","display_name":"collective classification","score":0.9150000214576721},{"id":"https://openalex.org/keywords/graph-based-classification","display_name":"graph-based classification","score":0.4519999921321869},{"id":"https://openalex.org/keywords/regularization","display_name":"regularization","score":0.7210000157356262},{"id":"https://openalex.org/keywords/convex-quadratic-programming","display_name":"convex quadratic programming","score":0.6159999966621399},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.46000000834465027},{"id":"https://openalex.org/keywords/high-dimensional-data","display_name":"high-dimensional data","score":0.328000009059906},{"id":"https://openalex.org/keywords/high-stakes-decisions","display_name":"high-stakes decisions","score":0.4090000092983246},{"id":"https://openalex.org/keywords/data-integrity","display_name":"data integrity","score":0.35499998927116394},{"id":"https://openalex.org/keywords/privacy-preserving-machine-learning","display_name":"privacy-preserving machine learning","score":0.40799999237060547},{"id":"https://openalex.org/keywords/differential-privacy","display_name":"differential privacy","score":0.37400001287460327},{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.328000009059906}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8088656663894653},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.7594594955444336},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5946473479270935},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5495896339416504},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5227102041244507}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:scholarsbank.uoregon.edu:1794/20677","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1794/20677","pdf_url":"http://hdl.handle.net/1794/20677","source":{"id":"https://openalex.org/S4377196436","display_name":"Scholars' Bank (University of Oregon)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I181233156","host_organization_name":"University of Oregon","host_organization_lineage":["https://openalex.org/I181233156"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Electronic Thesis or Dissertation"},{"id":"mag:2567026784","doi":null,"is_oa":false,"landing_page_url":"https://scholarsbank.uoregon.edu/xmlui/handle/1794/20677","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:scholarsbank.uoregon.edu:1794/20677","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1794/20677","pdf_url":"http://hdl.handle.net/1794/20677","source":{"id":"https://openalex.org/S4377196436","display_name":"Scholars' Bank (University of Oregon)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I181233156","host_organization_name":"University of Oregon","host_organization_lineage":["https://openalex.org/I181233156"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Electronic Thesis or Dissertation"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320338281","display_name":"Army Research Office","ror":"https://ror.org/05epdh915"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2567026784.pdf","grobid_xml":"https://content.openalex.org/works/W2567026784.grobid-xml"},"referenced_works_count":123,"referenced_works":["https://openalex.org/W3805906","https://openalex.org/W25032824","https://openalex.org/W34952362","https://openalex.org/W35527955","https://openalex.org/W65556681","https://openalex.org/W91932901","https://openalex.org/W122856874","https://openalex.org/W167683769","https://openalex.org/W175700287","https://openalex.org/W179314280","https://openalex.org/W853436745","https://openalex.org/W1486890033","https://openalex.org/W1515020792","https://openalex.org/W1533392841","https://openalex.org/W1537309404","https://openalex.org/W1564743226","https://openalex.org/W1569657508","https://openalex.org/W1666347389","https://openalex.org/W1884640145","https://openalex.org/W1892947258","https://openalex.org/W1904365287","https://openalex.org/W1904715515","https://openalex.org/W1931877416","https://openalex.org/W1934019294","https://openalex.org/W1966912382","https://openalex.org/W1967354722","https://openalex.org/W1972950354","https://openalex.org/W1976478782","https://openalex.org/W1992244412","https://openalex.org/W1994485670","https://openalex.org/W1996121497","https://openalex.org/W2003777645","https://openalex.org/W2005299943","https://openalex.org/W2008652694","https://openalex.org/W2010624529","https://openalex.org/W2015585187","https://openalex.org/W2031248101","https://openalex.org/W2052112662","https://openalex.org/W2060895947","https://openalex.org/W2069317438","https://openalex.org/W2077723394","https://openalex.org/W2089103284","https://openalex.org/W2089105401","https://openalex.org/W2095705004","https://openalex.org/W2096006868","https://openalex.org/W2097826433","https://openalex.org/W2097860933","https://openalex.org/W2097895487","https://openalex.org/W2100213115","https://openalex.org/W2101309634","https://openalex.org/W2101705355","https://openalex.org/W2101900221","https://openalex.org/W2101927907","https://openalex.org/W2102426156","https://openalex.org/W2103446323","https://openalex.org/W2103960658","https://openalex.org/W2105636360","https://openalex.org/W2105644991","https://openalex.org/W2105842272","https://openalex.org/W2106122512","https://openalex.org/W2107288260","https://openalex.org/W2107395148","https://openalex.org/W2107961375","https://openalex.org/W2111406701","https://openalex.org/W2112400959","https://openalex.org/W2112507308","https://openalex.org/W2112796928","https://openalex.org/W2113346187","https://openalex.org/W2114296159","https://openalex.org/W2114524997","https://openalex.org/W2117138276","https://openalex.org/W2118578357","https://openalex.org/W2119368257","https://openalex.org/W2121127625","https://openalex.org/W2123729042","https://openalex.org/W2125993116","https://openalex.org/W2128529555","https://openalex.org/W2129658066","https://openalex.org/W2129749009","https://openalex.org/W2131297983","https://openalex.org/W2134612861","https://openalex.org/W2136801552","https://openalex.org/W2137083510","https://openalex.org/W2138302120","https://openalex.org/W2139686264","https://openalex.org/W2142992973","https://openalex.org/W2143309278","https://openalex.org/W2144414190","https://openalex.org/W2144459111","https://openalex.org/W2144902422","https://openalex.org/W2147196093","https://openalex.org/W2147609908","https://openalex.org/W2147880316","https://openalex.org/W2149836368","https://openalex.org/W2150024778","https://openalex.org/W2152284345","https://openalex.org/W2152722485","https://openalex.org/W2152937686","https://openalex.org/W2154053567","https://openalex.org/W2157535873","https://openalex.org/W2158349948","https://openalex.org/W2158542502","https://openalex.org/W2158575505","https://openalex.org/W2158941357","https://openalex.org/W2159080219","https://openalex.org/W2159737176","https://openalex.org/W2161290181","https://openalex.org/W2165702433","https://openalex.org/W2170005069","https://openalex.org/W2171233306","https://openalex.org/W2186819766","https://openalex.org/W2187013920","https://openalex.org/W2250968750","https://openalex.org/W2286978285","https://openalex.org/W2296452361","https://openalex.org/W2398543861","https://openalex.org/W2429914308","https://openalex.org/W2611675901","https://openalex.org/W2951351492","https://openalex.org/W2964190853","https://openalex.org/W3004623877","https://openalex.org/W3022856249","https://openalex.org/W3150021078"],"related_works":["https://openalex.org/W2748370456","https://openalex.org/W131956760","https://openalex.org/W2095577883","https://openalex.org/W3044196966","https://openalex.org/W7043009888","https://openalex.org/W7140276011","https://openalex.org/W6941489678","https://openalex.org/W6986513130","https://openalex.org/W7020656499","https://openalex.org/W2910507727"],"abstract_inverted_index":{"Machine":[0],"learning":[1,24,74,90,122,145,158,172,200,252,322,521],"algorithms":[2,25,75,91,123],"are":[3,20,92,125,509],"invented":[4],"to":[5,10,13,26,30,35,69,71,83,95,118,141,183,224,233,287,310,373,380,417,434,441,446,511,548,554],"learn":[6],"from":[7],"data":[8,12,79,359,377],"and":[9,16,29,42,257,387,572,575],"use":[11],"perform":[14,31],"predictions":[15],"analyses.":[17],"Many":[18],"agencies":[19],"now":[21],"using":[22],"machine":[23,73,89,112,121,144,157,171,199],"present":[27],"services":[28,41],"tasks":[32,43],"that":[33,80,124,180,215,236,268,371,459,545,596],"used":[34],"be":[36,96,174],"done":[37],"by":[38,76],"humans.":[39],"These":[40],"include":[44],"making":[45,453],"high-stake":[46],"decisions.":[47],"Determining":[48],"the":[49,55,58,78,84,108,128,156,178,225,242,245,249,274,278,318,335,338,342,346,355,394,419,431,447,463,528,563,587,601],"right":[50],"decision":[51],"strongly":[52],"relies":[53],"on":[54,197,334,523,603],"correctness":[56],"of":[57,110,130,155,227,244,248,280,320,337,345,376,393,404,452,504,565],"input":[59,448,568,573],"data.":[60,135,229],"This":[61,328,390,456,537],"fact":[62,457],"provides":[63],"a":[64,143,186,193,212,261,402,450,454,481,491,515,541],"tempting":[65],"incentive":[66],"for":[67,201,323,383,397,494,518,567,579],"criminals":[68],"try":[70],"deceive":[72],"manipulating":[77],"is":[81,117,196,231,254,258,294,304,307,378,499,546,590],"fed":[82],"algorithms.":[85],"And":[86],"yet,":[87],"traditional":[88],"not":[93,271,308,412,426],"designed":[94],"safe":[97,120],"when":[98,177],"confronting":[99],"unexpected":[100],"inputs.":[101],"\\n":[102,136,205,297,400,592],"\\nIn":[103,206],"this":[104,191,207,269,367],"dissertation,":[105,192,368],"we":[106,181,210,316,369,461,470,576],"address":[107],"problem":[109,319],"adversarial":[111,198,358,374,468],"learning;":[113],"i.e.,":[114],"our":[115,299,597],"goal":[116],"build":[119],"robust":[126,232,300],"in":[127,241,277,340,449,540,557],"presence":[129,279],"noisy":[131],"or":[132,423],"adversarially":[133],"manipulated":[134],"\\nMany":[137],"complex":[138,151,187],"questions":[139],"--":[140,149],"which":[142],"system":[146],"must":[147],"respond":[148],"have":[150,161,413,427],"answers.":[152],"Such":[153],"outputs":[154],"algorithm":[159,214,276,356],"can":[160,239],"some":[162,381,392],"internal":[163],"structure,":[164],"with":[165,361],"exponentially":[166],"many":[167,443],"possible":[168,534],"values.":[169,536],"Adversarial":[170],"will":[173,471],"more":[175],"challenging":[176],"output":[179],"want":[182],"predict":[184],"has":[185],"structure":[188],"itself.":[189],"In":[190,366],"significant":[194],"focus":[195],"predicting":[202],"structured":[203,312,325,347,385],"outputs.":[204],"thesis,":[208],"first,":[209],"develop":[211],"new":[213],"reliably":[216],"performs":[217],"collective":[218,301],"classification:":[219],"It":[220,230],"jointly":[221],"assigns":[222],"labels":[223],"nodes":[226,247],"graphed":[228],"malicious":[234],"changes":[235,445],"an":[237,281,406],"adversary":[238,339,408],"make":[240],"properties":[243],"different":[246,559,604],"graph.":[250],"The":[251,350,497],"method":[253,303,329,517,526,538],"highly":[255],"efficient":[256,547],"formulated":[259],"as":[260,490],"convex":[262],"quadratic":[263],"program.":[264],"Empirical":[265],"evaluations":[266,594],"confirm":[267],"technique":[270,493],"only":[272],"secures":[273],"prediction":[275,313,326,348],"adversary,":[282],"but":[283],"it":[284,306,424,438],"also":[285],"generalizes":[286],"future":[288],"inputs":[289],"better,":[290],"even":[291,585],"if":[292,460,586],"there":[293],"no":[295],"adversary.":[296],"\\nWhile":[298],"classification":[302],"efficient,":[305],"applicable":[309],"generic":[311],"problems.":[314,399],"Next,":[315],"investigate":[317],"parameter":[321,520],"robust,":[324],"models.":[327],"constructs":[330],"regularization":[331,352,382,492,516,553],"functions":[332],"based":[333,522],"limitations":[336],"altering":[341],"feature":[343,570,583,588],"space":[344,589],"algorithm.":[349],"proposed":[351,489],"techniques":[353,598],"secure":[354],"against":[357,474],"changes,":[360],"little":[362],"additional":[363],"computational":[364,415],"cost.":[365],"prove":[370],"robustness":[372,473],"manipulation":[375],"equivalent":[379],"large-margin":[384,519],"prediction,":[386],"vice":[388],"versa.":[389],"confirms":[391],"previous":[395],"results":[396,539],"simpler":[398],"\\nAs":[401],"matter":[403],"fact,":[405],"ordinary":[407],"regularly":[409],"either":[410],"does":[411,425],"enough":[414],"power":[416],"design":[418],"ultimate":[420],"optimal":[421],"attack,":[422],"sufficient":[428],"information":[429],"about":[430],"learner's":[432],"model":[433],"do":[435],"so.":[436],"Therefore,":[437],"often":[439],"tries":[440],"apply":[442],"random":[444],"hope":[451],"breakthrough.":[455],"implies":[458],"minimize":[462],"expected":[464,529],"loss":[465,530],"function":[466,531,544],"under":[467,532],"noise,":[469],"obtain":[472],"mediocre":[475],"adversaries.":[476],"Dropout":[477,485],"training":[478,486],"resembles":[479],"such":[480],"noise":[482],"injection":[483],"scenario.":[484],"was":[487],"initially":[488],"neural":[495],"networks.":[496],"procedure":[498],"simple:":[500],"At":[501],"each":[502],"iteration":[503],"training,":[505],"randomly":[506],"selected":[507],"features":[508],"set":[510],"zero.":[512],"We":[513,550,561],"derive":[514],"dropout.":[524],"Our":[525],"calculates":[527],"all":[533],"dropout":[535,552,566],"simple":[542],"objective":[543],"optimize.":[549],"extend":[551],"non-linear":[555],"kernels":[556],"several":[558],"directions.":[560],"define":[562],"concept":[564],"space,":[569,571,584],"dimensions,":[574],"introduce":[577],"methods":[578],"approximate":[580],"marginalization":[581],"over":[582],"infinite-dimensional.":[591],"\\nEmpirical":[593],"show":[595],"consistently":[599],"outperform":[600],"baselines":[602],"datasets.":[605]},"counts_by_year":[{"year":2021,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2017-01-06T00:00:00"}