{"id":"https://openalex.org/W7118194786","doi":"https://doi.org/10.1109/aiccsa66935.2025.11315288","title":"A Multi-Phase Resilient Machine Learning Architecture Against Data Poisoning Attacks","display_name":"A Multi-Phase Resilient Machine Learning Architecture Against Data Poisoning Attacks","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W7118194786","doi":"https://doi.org/10.1109/aiccsa66935.2025.11315288"},"language":null,"primary_location":{"id":"doi:10.1109/aiccsa66935.2025.11315288","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa66935.2025.11315288","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACS 22nd International Conference on Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121937095","display_name":"Gizem Altintarla","orcid":null},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gizem Altintarla","raw_affiliation_strings":["Electrical and Computer Engineering the University of Arizona,Tucson,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering the University of Arizona,Tucson,USA","institution_ids":["https://openalex.org/I138006243"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086250008","display_name":"S. Hariri","orcid":null},"institutions":[{"id":"https://openalex.org/I138006243","display_name":"University of Arizona","ror":"https://ror.org/03m2x1q45","country_code":"US","type":"education","lineage":["https://openalex.org/I138006243"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Salim Hariri","raw_affiliation_strings":["Electrical and Computer Engineering the University of Arizona,Tucson,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electrical and Computer Engineering the University of Arizona,Tucson,USA","institution_ids":["https://openalex.org/I138006243"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I138006243"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.949999988079071,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.949999988079071,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.01979999989271164,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.005100000184029341,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.6510000228881836},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5582000017166138},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.5238999724388123},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5213000178337097},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.48240000009536743},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4814000129699707},{"id":"https://openalex.org/keywords/trojan","display_name":"Trojan","score":0.42320001125335693},{"id":"https://openalex.org/keywords/hash-function","display_name":"Hash function","score":0.39579999446868896}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7533000111579895},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.6510000228881836},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5582000017166138},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5238999724388123},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5213000178337097},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5169000029563904},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5087000131607056},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4927999973297119},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.48240000009536743},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4814000129699707},{"id":"https://openalex.org/C174333608","wikidata":"https://www.wikidata.org/wiki/Q19635","display_name":"Trojan","level":2,"score":0.42320001125335693},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.39579999446868896},{"id":"https://openalex.org/C33762810","wikidata":"https://www.wikidata.org/wiki/Q461671","display_name":"Data integrity","level":2,"score":0.38769999146461487},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3230000138282776},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.32170000672340393},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.3052999973297119},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.3052999973297119},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.28630000352859497},{"id":"https://openalex.org/C2775960376","wikidata":"https://www.wikidata.org/wiki/Q1435859","display_name":"Grippers","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.27000001072883606},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.2639999985694885},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.26080000400543213},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.2538999915122986},{"id":"https://openalex.org/C133320665","wikidata":"https://www.wikidata.org/wiki/Q179299","display_name":"RAID","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/aiccsa66935.2025.11315288","is_oa":false,"landing_page_url":"https://doi.org/10.1109/aiccsa66935.2025.11315288","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE/ACS 22nd International Conference on Computer Systems and Applications (AICCSA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5589655637741089,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2758789527","https://openalex.org/W2800264764","https://openalex.org/W2962972208","https://openalex.org/W3011654198","https://openalex.org/W3090319628","https://openalex.org/W3097615084","https://openalex.org/W3128652783","https://openalex.org/W3130279822","https://openalex.org/W3138570739","https://openalex.org/W3163222347","https://openalex.org/W3194840020","https://openalex.org/W3200567911","https://openalex.org/W3209238442","https://openalex.org/W3216657397","https://openalex.org/W4230928526","https://openalex.org/W4285404754","https://openalex.org/W4290996582","https://openalex.org/W4385443998","https://openalex.org/W4389610334","https://openalex.org/W4392945485","https://openalex.org/W4393656110","https://openalex.org/W4400355554","https://openalex.org/W4401508260"],"related_works":[],"abstract_inverted_index":{"Machine":[0],"Learning":[1],"(ML)":[2],"systems":[3],"are":[4,153],"increasingly":[5],"vulnerable":[6],"to":[7,38,90],"data":[8,150],"poisoning":[9,42],"attacks,":[10],"which":[11],"compromise":[12],"reliability":[13],"in":[14],"critical":[15],"infrastructures":[16],"such":[17],"as":[18],"healthcare,":[19],"electric":[20],"grids,":[21],"utility":[22],"networks,":[23],"and":[24,49,68,87,113,126,138,151],"autonomous":[25],"systems.":[26],"Existing":[27],"defenses":[28],"largely":[29],"focus":[30],"on":[31],"inference-time":[32],"adversarial":[33,92],"examples,":[34],"yet":[35],"remain":[36],"insufficient":[37],"detect":[39],"or":[40],"mitigate":[41],"attack":[43,168],"that":[44,63,163],"corrupts":[45],"the":[46,121,133,156,164],"training":[47,71],"dataset":[48],"long-term":[50],"decision-making":[51],"process.":[52],"To":[53],"address":[54],"this":[55],"gap,":[56],"we":[57],"present":[58],"a":[59,99],"zero-trust,":[60],"multi-phase":[61],"architecture":[62,74,165],"secures":[64],"both":[65],"static":[66],"(offline)":[67],"dynamic":[69],"(online)":[70],"workflows.":[72],"The":[73],"integrates":[75],"asymmetric":[76],"encryption,":[77],"secret-sharing,":[78],"diversity,":[79],"redundancy,":[80],"Moving":[81],"Target":[82],"Defense":[83],"(MTD),":[84],"decoy":[85],"datasets,":[86],"fingerprint":[88],"anonymization":[89],"reduce":[91],"influence.":[93],"Dataset":[94],"integrity":[95],"is":[96],"ensured":[97],"through":[98,128],"robust":[100],"Proof":[101],"of":[102],"Integrity":[103],"(PoI)":[104],"mechanism":[105],"combining":[106],"hash":[107],"chaining,":[108],"rabin":[109],"fingerprints,":[110],"bloom":[111],"filters,":[112],"digital":[114],"signatures.":[115],"A":[116],"dual-controller":[117],"design":[118],"strengthens":[119],"resilience:":[120],"Training-Phase":[122],"Controller":[123,135],"validates":[124],"datasets":[125],"models":[127,137,152],"PoI":[129],"before":[130],"training,":[131],"while":[132,171],"Operational-Phase":[134],"re-validates":[136],"applies":[139],"majority":[140],"voting":[141],"during":[142],"inference.":[143],"Together,":[144],"these":[145],"mechanisms":[146],"ensure":[147],"only":[148],"integrity-verified":[149],"used":[154],"throughout":[155],"ML":[157],"workflow.":[158],"Analytical":[159],"resilience":[160],"modeling":[161],"shows":[162],"significantly":[166],"reduces":[167],"success":[169],"rates":[170],"maintaining":[172],"efficiency.":[173]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-01-05T00:00:00"}