{"id":"https://openalex.org/W4312337604","doi":"https://doi.org/10.1109/dsc55868.2022.00014","title":"A Survey on Data Poisoning Attacks and Defenses","display_name":"A Survey on Data Poisoning Attacks and Defenses","publication_year":2022,"publication_date":"2022-07-01","ids":{"openalex":"https://openalex.org/W4312337604","doi":"https://doi.org/10.1109/dsc55868.2022.00014"},"language":"en","primary_location":{"id":"doi:10.1109/dsc55868.2022.00014","doi":"https://doi.org/10.1109/dsc55868.2022.00014","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsc55868.2022.00014","pdf_url":null,"source":{"id":"https://openalex.org/S4306422623","display_name":"IEEE International Conference on Data Science in Cyberspace","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 7th IEEE International Conference on Data Science in Cyberspace (DSC)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009715446","display_name":"Jiaxin Fan","orcid":"https://orcid.org/0009-0001-5204-5425","observed_orcids":["https://orcid.org/0009-0001-5204-5425"]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiaxin Fan","raw_affiliation_strings":["Guangzhou University,Cyberspace Institute of Advance Technology,Guangzhou,China","Cyberspace Institute of Advance Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University,Cyberspace Institute of Advance Technology,Guangzhou,China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Cyberspace Institute of Advance Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100683124","display_name":"Qi Yan","orcid":"https://orcid.org/0000-0002-1633-2320","observed_orcids":["https://orcid.org/0000-0002-1633-2320"]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qi Yan","raw_affiliation_strings":["Guangzhou University,Cyberspace Institute of Advance Technology,Guangzhou,China","Cyberspace Institute of Advance Technology, Guangzhou University, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University,Cyberspace Institute of Advance Technology,Guangzhou,China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Cyberspace Institute of Advance Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100716223","display_name":"Mohan Li","orcid":"https://orcid.org/0000-0002-2290-046X","observed_orcids":["https://orcid.org/0000-0002-2290-046X","https://orcid.org/0009-0002-7128-3442"]},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mohan Li","raw_affiliation_strings":["Guangzhou University,Cyberspace Institute of Advance Technology,Guangzhou,China","Cyberspace Institute of Advance Technology, Guangzhou University, Guangzhou, China","Peng Cheng Laboratory, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Guangzhou University,Cyberspace Institute of Advance Technology,Guangzhou,China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Cyberspace Institute of Advance Technology, Guangzhou University, Guangzhou, China","institution_ids":["https://openalex.org/I37987034"]},{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009839989","display_name":"Guanqun Qu","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Guanqun Qu","raw_affiliation_strings":["GDCERT/CC, Guangzhou, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"GDCERT/CC, Guangzhou, China","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100442777","display_name":"Xiao Yang","orcid":"https://orcid.org/0009-0004-7793-9072","observed_orcids":["https://orcid.org/0009-0004-7793-9072","https://orcid.org/0009-0009-6191-1522","https://orcid.org/0009-0005-8635-8891"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yang Xiao","raw_affiliation_strings":["Shenzhen Broadton Intellegent Technology Co., Ltd, Shenzhen, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Shenzhen Broadton Intellegent Technology Co., Ltd, Shenzhen, China","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.9798,"has_fulltext":false,"cited_by_count":75,"citation_normalized_percentile":{"value":0.97463189,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"48","last_page":"55"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/data-poisoning-attacks","display_name":"data poisoning","score":1.0},{"id":"https://openalex.org/keywords/machine-learning-security","display_name":"machine learning security","score":0.7749999761581421},{"id":"https://openalex.org/keywords/training-data-integrity","display_name":"training data integrity","score":0.6230000257492065},{"id":"https://openalex.org/keywords/low-quality-data","display_name":"low-quality data","score":0.7139999866485596},{"id":"https://openalex.org/keywords/attack-classification","display_name":"attack classification","score":0.7080000042915344},{"id":"https://openalex.org/keywords/defense-methods","display_name":"defense methods","score":0.7549999952316284},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"adversarial learning","score":0.6389999985694885}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7585432529449463},{"id":"https://openalex.org/C24756922","wikidata":"https://www.wikidata.org/wiki/Q1757694","display_name":"Data quality","level":3,"score":0.7349955439567566},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7124506235122681},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.7061712741851807},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6737775802612305},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.6342875957489014},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.55970698595047},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5364542603492737},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.5299369096755981},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.4608781635761261},{"id":"https://openalex.org/C133462117","wikidata":"https://www.wikidata.org/wiki/Q4929239","display_name":"Data collection","level":2,"score":0.4459533989429474},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.42093709111213684},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.32990026473999023},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.137813001871109},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.13252320885658264},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dsc55868.2022.00014","doi":"https://doi.org/10.1109/dsc55868.2022.00014","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsc55868.2022.00014","pdf_url":null,"source":{"id":"https://openalex.org/S4306422623","display_name":"IEEE International Conference on Data Science in Cyberspace","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 7th IEEE International Conference on Data Science in Cyberspace (DSC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320330193","display_name":"Chinese Academy of Engineering","ror":"https://ror.org/00z3yke57"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W1901616594","https://openalex.org/W2293844262","https://openalex.org/W2410999050","https://openalex.org/W2557044351","https://openalex.org/W2767632622","https://openalex.org/W2788102893","https://openalex.org/W2809622771","https://openalex.org/W2884430236","https://openalex.org/W2885770726","https://openalex.org/W2901312569","https://openalex.org/W2928556547","https://openalex.org/W2931991156","https://openalex.org/W2962763344","https://openalex.org/W2965653989","https://openalex.org/W2982648698","https://openalex.org/W2997357271","https://openalex.org/W3009498583","https://openalex.org/W3012846134","https://openalex.org/W3033623677","https://openalex.org/W3037974410","https://openalex.org/W3040644383","https://openalex.org/W3099410841","https://openalex.org/W3117572899","https://openalex.org/W3154572656","https://openalex.org/W3159347054","https://openalex.org/W3175734114","https://openalex.org/W3204814846","https://openalex.org/W3217417806"],"related_works":["https://openalex.org/W4322736917","https://openalex.org/W4394831571","https://openalex.org/W4206683875","https://openalex.org/W4221158766","https://openalex.org/W7136811450","https://openalex.org/W4409177447","https://openalex.org/W4386393757","https://openalex.org/W4281486913","https://openalex.org/W4287212653","https://openalex.org/W4399486156"],"abstract_inverted_index":{"With":[0],"the":[1,7,24,31,56,61,81,90,102,109,121,126],"widespread":[2],"deployment":[3],"of":[4,26,55,64,104,112],"data-driven":[5],"services,":[6],"demand":[8],"for":[9],"data":[10,27,33,36,45,68,78,94,113],"volumes":[11],"continues":[12],"to":[13,79],"grow.":[14],"At":[15],"present,":[16],"many":[17],"applications":[18],"lack":[19],"reliable":[20],"human":[21],"supervision":[22],"in":[23,60,97,125],"process":[25],"collection,":[28],"which":[29,71],"makes":[30],"collected":[32],"contain":[34],"low-quality":[35,42],"or":[37,43,85],"even":[38],"malicious":[39,44],"data.":[40],"This":[41,87],"make":[46,80],"AI":[47],"systems":[48],"potentially":[49],"face":[50],"much":[51],"security":[52,58],"challenges.":[53],"One":[54],"main":[57],"threats":[59],"training":[62,77],"phase":[63],"machine":[65],"learning":[66],"is":[67,106],"poisoning":[69,95,114],"attacks,":[70],"compromise":[72],"model":[73,83],"integrity":[74],"by":[75],"contaminating":[76],"resulting":[82],"skewed":[84],"unusable.":[86],"paper":[88],"reviews":[89],"relevant":[91],"researches":[92],"on":[93],"attacks":[96,105,115],"various":[98],"task":[99],"environments:":[100],"first,":[101],"classification":[103],"summarized,":[107],"then":[108],"defense":[110],"methods":[111],"are":[116],"sorted":[117],"out,":[118],"and":[119],"finally,":[120],"possible":[122],"research":[123],"directions":[124],"prospect.":[127]},"counts_by_year":[{"year":2026,"cited_by_count":19},{"year":2025,"cited_by_count":35},{"year":2024,"cited_by_count":15},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2023-01-04T00:00:00"}