{"id":"https://openalex.org/W7166807459","doi":"https://doi.org/10.1109/sp63933.2026.00043","title":"Ensemble Conformal Predictor (EnCP): A New Conformal Predictor with Robustness Guarantees Against Data Poisoning Attacks","display_name":"Ensemble Conformal Predictor (EnCP): A New Conformal Predictor with Robustness Guarantees Against Data Poisoning Attacks","publication_year":2026,"publication_date":"2026-05-18","ids":{"openalex":"https://openalex.org/W7166807459","doi":"https://doi.org/10.1109/sp63933.2026.00043"},"language":"en","primary_location":{"id":"doi:10.1109/sp63933.2026.00043","doi":"https://doi.org/10.1109/sp63933.2026.00043","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00043","pdf_url":null,"source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/sp63933.2026.00043","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000074603","display_name":"Yi Yang","orcid":"https://orcid.org/0000-0002-4091-8532","observed_orcids":["https://orcid.org/0000-0002-4091-8532","https://orcid.org/0000-0003-3703-2527","https://orcid.org/0000-0002-4225-5226","https://orcid.org/0000-0001-9467-0942","https://orcid.org/0000-0002-1438-9307","https://orcid.org/0000-0002-4310-1966","https://orcid.org/0000-0001-6180-676X","https://orcid.org/0000-0002-4040-2448","https://orcid.org/0000-0002-5662-4600","https://orcid.org/0000-0002-6287-1640","https://orcid.org/0000-0002-6636-8831","https://orcid.org/0000-0003-1015-8998","https://orcid.org/0000-0003-2089-186X","https://orcid.org/0000-0001-6051-4992","https://orcid.org/0000-0001-9386-5027","https://orcid.org/0000-0002-0754-935X","https://orcid.org/0000-0002-0947-3475","https://orcid.org/0000-0002-1364-8653","https://orcid.org/0000-0002-3144-8604","https://orcid.org/0000-0002-5276-4518","https://orcid.org/0000-0002-5598-6925","https://orcid.org/0000-0002-6134-6094","https://orcid.org/0000-0002-6972-8708","https://orcid.org/0000-0002-7825-0494","https://orcid.org/0000-0002-8209-2898","https://orcid.org/0000-0003-1048-7994","https://orcid.org/0000-0003-3964-2433","https://orcid.org/0000-0003-4431-2279","https://orcid.org/0000-0003-4674-4059","https://orcid.org/0009-0000-6572-6898","https://orcid.org/0009-0000-7907-9388","https://orcid.org/0009-0001-5752-0264","https://orcid.org/0009-0006-0540-4938","https://orcid.org/0009-0006-3953-305X","https://orcid.org/0009-0008-1843-5519","https://orcid.org/0000-0001-5065-2769","https://orcid.org/0000-0001-5604-5505","https://orcid.org/0000-0001-5988-1998","https://orcid.org/0000-0001-6489-286X","https://orcid.org/0000-0001-6682-6006","https://orcid.org/0000-0001-6772-5776","https://orcid.org/0000-0001-6868-5438","https://orcid.org/0000-0001-8495-6103","https://orcid.org/0000-0001-8623-0453","https://orcid.org/0000-0001-8687-4427","https://orcid.org/0000-0001-8785-2692","https://orcid.org/0000-0001-9807-6844","https://orcid.org/0000-0002-0005-7619","https://orcid.org/0000-0002-0130-9785","https://orcid.org/0000-0002-0491-8295","https://orcid.org/0000-0002-0815-2776","https://orcid.org/0000-0002-0864-9029","https://orcid.org/0000-0002-1488-4762","https://orcid.org/0000-0002-1490-6802","https://orcid.org/0000-0002-2135-5076","https://orcid.org/0000-0002-2971-7828","https://orcid.org/0000-0002-3362-7155","https://orcid.org/0000-0002-3530-3525","https://orcid.org/0000-0002-3537-1253","https://orcid.org/0000-0002-3860-8463","https://orcid.org/0000-0002-3872-5336","https://orcid.org/0000-0002-3931-4096","https://orcid.org/0000-0002-3968-7992","https://orcid.org/0000-0002-4186-3799","https://orcid.org/0000-0002-4495-0636","https://orcid.org/0000-0002-5070-4511","https://orcid.org/0000-0002-5241-5203","https://orcid.org/0000-0002-6278-4061","https://orcid.org/0000-0002-6489-4459","https://orcid.org/0000-0002-6561-9109","https://orcid.org/0000-0002-7132-5860","https://orcid.org/0000-0002-7378-8260","https://orcid.org/0000-0002-7540-892X","https://orcid.org/0000-0002-7669-768X","https://orcid.org/0000-0002-7680-1731","https://orcid.org/0000-0002-8071-629X","https://orcid.org/0000-0002-9266-8600","https://orcid.org/0000-0002-9477-2313","https://orcid.org/0000-0002-9609-6865","https://orcid.org/0000-0002-9799-3293","https://orcid.org/0000-0002-9831-8783","https://orcid.org/0000-0003-0566-4802","https://orcid.org/0000-0003-0633-8355","https://orcid.org/0000-0003-1033-8737","https://orcid.org/0000-0003-1995-7219","https://orcid.org/0000-0003-2266-6682","https://orcid.org/0000-0003-3526-560X","https://orcid.org/0000-0003-3689-6964","https://orcid.org/0000-0003-4250-3805","https://orcid.org/0000-0003-4271-3554","https://orcid.org/0009-0000-0235-1371","https://orcid.org/0009-0000-2097-9373","https://orcid.org/0009-0000-2610-7680","https://orcid.org/0009-0000-3730-6861","https://orcid.org/0009-0000-4637-4639","https://orcid.org/0009-0000-5296-5523","https://orcid.org/0009-0000-6509-5694","https://orcid.org/0009-0000-7131-1832","https://orcid.org/0009-0000-8564-9228","https://orcid.org/0009-0001-0338-8528","https://orcid.org/0009-0001-0383-126X","https://orcid.org/0009-0001-0703-8445","https://orcid.org/0009-0001-1212-3660","https://orcid.org/0009-0001-2852-6608","https://orcid.org/0009-0001-3206-6667","https://orcid.org/0009-0001-4443-0243","https://orcid.org/0009-0001-6723-4456","https://orcid.org/0009-0001-7156-743X","https://orcid.org/0009-0001-8004-8703","https://orcid.org/0009-0002-0806-4087","https://orcid.org/0009-0002-1771-3763","https://orcid.org/0009-0002-2959-4095","https://orcid.org/0009-0002-3110-8594","https://orcid.org/0009-0002-3999-0569","https://orcid.org/0009-0002-4946-5813","https://orcid.org/0009-0002-5125-5014","https://orcid.org/0009-0002-6785-8485","https://orcid.org/0009-0002-7667-6632","https://orcid.org/0009-0002-7856-1804","https://orcid.org/0009-0002-9567-1263","https://orcid.org/0009-0003-0192-6112","https://orcid.org/0009-0003-1350-7767","https://orcid.org/0009-0003-2133-4691","https://orcid.org/0009-0003-3358-4495","https://orcid.org/0009-0003-3395-2059","https://orcid.org/0009-0003-4252-2288","https://orcid.org/0009-0003-5606-5954","https://orcid.org/0009-0003-6026-0226","https://orcid.org/0009-0003-6306-9611","https://orcid.org/0009-0003-7714-0060","https://orcid.org/0009-0003-9738-4484","https://orcid.org/0009-0004-0953-5631","https://orcid.org/0009-0004-2597-460X","https://orcid.org/0009-0004-3989-5507","https://orcid.org/0009-0004-4464-6396","https://orcid.org/0009-0004-6178-6294","https://orcid.org/0009-0004-6249-7152","https://orcid.org/0009-0004-6732-8104","https://orcid.org/0009-0004-7233-8227","https://orcid.org/0009-0005-1496-9183","https://orcid.org/0009-0005-2539-6851","https://orcid.org/0009-0005-3453-9842","https://orcid.org/0009-0005-4380-9808","https://orcid.org/0009-0005-4913-5904","https://orcid.org/0009-0005-4922-8502","https://orcid.org/0009-0005-6609-3371","https://orcid.org/0009-0005-7123-9056","https://orcid.org/0009-0006-1342-3020","https://orcid.org/0009-0006-1836-0823","https://orcid.org/0009-0006-5733-8258","https://orcid.org/0009-0006-7931-8661","https://orcid.org/0009-0006-9458-9267","https://orcid.org/0009-0006-9629-7639","https://orcid.org/0009-0007-0195-0816","https://orcid.org/0009-0007-1120-2045","https://orcid.org/0009-0007-1342-272X","https://orcid.org/0009-0007-3011-530X","https://orcid.org/0009-0007-3259-798X","https://orcid.org/0009-0007-5621-8219","https://orcid.org/0009-0007-5894-4724","https://orcid.org/0009-0007-6119-6034","https://orcid.org/0009-0007-6270-7086","https://orcid.org/0009-0007-9873-799X","https://orcid.org/0009-0008-1257-9933","https://orcid.org/0009-0008-2210-3664","https://orcid.org/0009-0008-2458-4932","https://orcid.org/0009-0008-3637-7922","https://orcid.org/0009-0008-3789-3136","https://orcid.org/0009-0008-4576-9477","https://orcid.org/0009-0008-4640-5333","https://orcid.org/0009-0008-9069-1162","https://orcid.org/0009-0008-9817-1612","https://orcid.org/0009-0009-0547-0873","https://orcid.org/0009-0009-0688-5966","https://orcid.org/0009-0009-1012-801X","https://orcid.org/0009-0009-1925-9518","https://orcid.org/0009-0009-2931-9246","https://orcid.org/0009-0009-3980-9564","https://orcid.org/0009-0009-4389-583X","https://orcid.org/0009-0009-6469-9053","https://orcid.org/0009-0009-6668-2554","https://orcid.org/0009-0009-6915-6912","https://orcid.org/0009-0009-8140-7710","https://orcid.org/0009-0009-9094-6046"]},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxin Yang","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5157587563","display_name":"Qiang Li","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Qiang Li","raw_affiliation_strings":["College of Computer Science and Technology, Jilin University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology, Jilin University","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083780769","display_name":"Runyang Feng","orcid":"https://orcid.org/0000-0002-4912-6646","observed_orcids":["https://orcid.org/0000-0002-4912-6646"]},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Runyang Feng","raw_affiliation_strings":["School of Artificial Intelligence, Jilin University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Artificial Intelligence, Jilin University","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045187487","display_name":"Liren Shan","orcid":"https://orcid.org/0000-0002-4273-3005","observed_orcids":["https://orcid.org/0000-0002-4273-3005"]},"institutions":[{"id":"https://openalex.org/I160992636","display_name":"Toyota Technological Institute at Chicago","ror":"https://ror.org/02sn5gb64","country_code":"US","type":"education","lineage":["https://openalex.org/I160992636"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Liren Shan","raw_affiliation_strings":["Toyota Technological Institute at Chicago"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Toyota Technological Institute at Chicago","institution_ids":["https://openalex.org/I160992636"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5139833215","display_name":"Binghui Wang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I180949307","display_name":"Illinois Institute of Technology","ror":"https://ror.org/037t3ry66","country_code":"US","type":"education","lineage":["https://openalex.org/I180949307"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Binghui Wang","raw_affiliation_strings":["Illinois Institute of Technology,Department of Computer Science"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Illinois Institute of Technology,Department of Computer Science","institution_ids":["https://openalex.org/I180949307"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.3951515,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"156","last_page":"174"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9916999936103821,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/conformal-prediction","display_name":"conformal prediction","score":0.7940000295639038},{"id":"https://openalex.org/keywords/data-poisoning-attacks","display_name":"data poisoning","score":0.9700000286102295},{"id":"https://openalex.org/keywords/robustness-guarantees","display_name":"robustness guarantees","score":0.9269999861717224},{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.7400000095367432},{"id":"https://openalex.org/keywords/uncertainty-estimation","display_name":"uncertainty estimation","score":0.4659999907016754},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"ensemble learning","score":0.4580000042915344}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7836999893188477},{"id":"https://openalex.org/C98214594","wikidata":"https://www.wikidata.org/wiki/Q850275","display_name":"Conformal map","level":2,"score":0.6011000275611877},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5630000233650208},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.454800009727478},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33079999685287476},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31940001249313354},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.28040000796318054},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.27390000224113464},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.26429998874664307},{"id":"https://openalex.org/C119898033","wikidata":"https://www.wikidata.org/wiki/Q3433888","display_name":"Ensemble forecasting","level":2,"score":0.25189998745918274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/sp63933.2026.00043","doi":"https://doi.org/10.1109/sp63933.2026.00043","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00043","pdf_url":null,"source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1109/sp63933.2026.00043","doi":"https://doi.org/10.1109/sp63933.2026.00043","is_oa":true,"landing_page_url":"https://doi.org/10.1109/sp63933.2026.00043","pdf_url":null,"source":{"id":"https://openalex.org/S4210233669","display_name":"IEEE Symposium on Security and Privacy (S&P)","issn_l":"1081-6011","issn":["1081-6011","2375-1207"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","norway-2"],"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G1243688806","display_name":"Institute for Data, Econometrics, Algorithms and Learning (IDEAL)","funder_award_id":"2216926","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1499689786","https://openalex.org/W1534477342","https://openalex.org/W1553101044","https://openalex.org/W2085828897","https://openalex.org/W2108598243","https://openalex.org/W2194775991","https://openalex.org/W2514278201","https://openalex.org/W2516574342","https://openalex.org/W2794609696","https://openalex.org/W2883108656","https://openalex.org/W2962763344","https://openalex.org/W3048759177","https://openalex.org/W3118640283","https://openalex.org/W4380490520","https://openalex.org/W4401043055","https://openalex.org/W4402264369","https://openalex.org/W4405170795","https://openalex.org/W4406261316","https://openalex.org/W4413146559","https://openalex.org/W4415796151","https://openalex.org/W4415796875","https://openalex.org/W4415798987","https://openalex.org/W7133184685"],"related_works":["https://openalex.org/W4417332453","https://openalex.org/W7212169937","https://openalex.org/W7134189183","https://openalex.org/W6902571826","https://openalex.org/W7166837104","https://openalex.org/W4400577177","https://openalex.org/W7196974810","https://openalex.org/W7166888654","https://openalex.org/W7080052802","https://openalex.org/W4412031390"],"abstract_inverted_index":{"Conformal":[0],"Prediction":[1],"(CP)":[2],"is":[3,68,158,225],"a":[4,30,112],"popular":[5],"statistical":[6],"framework":[7,116],"for":[8,204],"uncertainty":[9],"quantification":[10],"by":[11,123,160],"producing":[12],"prediction":[13,150,176,187,217],"sets":[14,218],"with":[15,29],"valid":[16,146],"coverage":[17,147,174,184,214],"guarantees":[18],"(e.g.,":[19,50,59],"ensuring":[20],"the":[21,26,75,94,107,128,131,141,154,167,182],"true":[22],"label":[23],"falls":[24],"within":[25],"predicted":[27],"set":[28,151,188],"user-defined":[31],"confidence":[32],"level":[33],"such":[34],"as":[35],"95":[36],"%).":[37],"It":[38],"has":[39],"recently":[40],"gained":[41],"popularity":[42],"in":[43,73,83],"both":[44,74,145,198,212],"classical":[45],"machine":[46],"learning":[47,76,162],"(ML)":[48],"tasks":[49],"image":[51,199],"classification)":[52],"and":[53,77,134,140,148,163,175,185,202,215],"large":[54],"language":[55],"model":[56,133],"(LLM)":[57],"applications":[58],"toxic":[60],"content":[61],"classification).":[62],"However,":[63],"recent":[64],"works":[65],"show":[66],"CP":[67,115],"vulnerable":[69],"to":[70,137,180],"adversarial":[71],"attacks":[72,101],"inference":[78],"phases,":[79],"affecting":[80],"its":[81],"reliability":[82],"real-world":[84],"applications.":[85],"While":[86],"several":[87],"studies":[88],"investigated":[89],"defenses":[90],"against":[91,119],"inference-phase":[92],"attacks,":[93,122],"threat":[95],"of":[96,130,143,169,195],"learning-phase":[97],"(particularly":[98],"data":[99,120,139,220],"poisoning)":[100],"remains":[102],"largely":[103],"under-explored.":[104],"We":[105],"take":[106],"first":[108],"step":[109],"towards":[110],"developing":[111],"provably":[113],"robust":[114],"(called":[117],"EnCP)":[118],"poisoning":[121,221],"addressing":[124],"critical":[125],"challenges":[126],"including":[127],"sensitivity":[129],"ML":[132],"conformal":[135],"predictor":[136],"poisoned":[138,170],"difficulty":[142],"maintaining":[144],"moderate":[149],"size":[152],"under":[153,219],"attack.":[155],"Our":[156,190],"EnCP":[157,196,210],"inspired":[159],"ensemble":[161],"can":[164],"inherently":[165],"bound":[166],"effect":[168],"samples":[171],"on":[172,197],"CP's":[173],"set,":[177],"enabling":[178],"us":[179],"derive":[181],"certified":[183,186],"size.":[189],"results":[191],"demonstrate":[192],"strong":[193],"robustness":[194],"classification":[200],"benchmarks":[201],"LLM":[203],"toxicity":[205],"text":[206],"classification,":[207],"showing":[208],"that":[209],"preserves":[211],"high":[213],"compact":[216],"attacks.":[222],"Source":[223],"code":[224],"available":[226],"at:":[227],"https://github.com/Yuxin104/EnCP.":[228]},"counts_by_year":[],"updated_date":"2026-11-06T12:05:46.655746","created_date":"2026-07-02T00:00:00"}