{"id":"https://openalex.org/W2957377429","doi":"https://doi.org/10.1109/icc.2019.8761422","title":"A Flexible Poisoning Attack Against Machine Learning","display_name":"A Flexible Poisoning Attack Against Machine Learning","publication_year":2019,"publication_date":"2019-05-01","ids":{"openalex":"https://openalex.org/W2957377429","doi":"https://doi.org/10.1109/icc.2019.8761422","mag":"2957377429"},"language":"en","primary_location":{"id":"doi:10.1109/icc.2019.8761422","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2019.8761422","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2019 - 2019 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066542952","display_name":"Wenbo Jiang","orcid":"https://orcid.org/0000-0002-4592-8094"},"institutions":[{"id":"https://openalex.org/I4210096250","display_name":"Beijing Institute of Big Data Research","ror":"https://ror.org/00s1sz824","country_code":"CN","type":"facility","lineage":["https://openalex.org/I20231570","https://openalex.org/I37796252","https://openalex.org/I4210096250"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Wenbo Jiang","raw_affiliation_strings":["CETC Big Data Research Institute Co., Ltd., Guiyang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CETC Big Data Research Institute Co., Ltd., Guiyang, China","institution_ids":["https://openalex.org/I4210096250"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100325334","display_name":"Hongwei Li","orcid":"https://orcid.org/0000-0002-1961-7946"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hongwei Li","raw_affiliation_strings":["Science and Technology on Communication Security Laboratory, Chengdu, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Science and Technology on Communication Security Laboratory, Chengdu, China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100358497","display_name":"Sen Liu","orcid":"https://orcid.org/0000-0003-2230-7671"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Sen Liu","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032724669","display_name":"Yanzhi Ren","orcid":"https://orcid.org/0000-0002-2286-1384"},"institutions":[{"id":"https://openalex.org/I150229711","display_name":"University of Electronic Science and Technology of China","ror":"https://ror.org/04qr3zq92","country_code":"CN","type":"education","lineage":["https://openalex.org/I150229711"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanzhi Ren","raw_affiliation_strings":["School of Computer Science and Engineering, University of Electronic Science and Technology of China, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, University of Electronic Science and Technology of China, China","institution_ids":["https://openalex.org/I150229711"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100713715","display_name":"Miao He","orcid":"https://orcid.org/0000-0003-3876-8157"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Miao He","raw_affiliation_strings":["Fortinet Technologies (Canada) ULC, Ottawa, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fortinet Technologies (Canada) ULC, Ottawa, ON, Canada","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":22,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9884999990463257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.7986875772476196},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6976186037063599},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6762070059776306},{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.5441284775733948},{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.5084037184715271},{"id":"https://openalex.org/keywords/attack-model","display_name":"Attack model","score":0.47911739349365234},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.45179271697998047},{"id":"https://openalex.org/keywords/order","display_name":"Order (exchange)","score":0.4368632137775421},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.4105972647666931},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.40660378336906433},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.3605618476867676}],"concepts":[{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.7986875772476196},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6976186037063599},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6762070059776306},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.5441284775733948},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.5084037184715271},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.47911739349365234},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.45179271697998047},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.4368632137775421},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.4105972647666931},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40660378336906433},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3605618476867676},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C78458016","wikidata":"https://www.wikidata.org/wiki/Q840400","display_name":"Evolutionary biology","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icc.2019.8761422","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icc.2019.8761422","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ICC 2019 - 2019 IEEE International Conference on Communications (ICC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W290150691","https://openalex.org/W1590456070","https://openalex.org/W1974314988","https://openalex.org/W1993081839","https://openalex.org/W2007562169","https://openalex.org/W2087303942","https://openalex.org/W2089103284","https://openalex.org/W2095577883","https://openalex.org/W2105037940","https://openalex.org/W2112507308","https://openalex.org/W2124659975","https://openalex.org/W2125723038","https://openalex.org/W2144906988","https://openalex.org/W2147096042","https://openalex.org/W2151298633","https://openalex.org/W2167421362","https://openalex.org/W2182055801","https://openalex.org/W2194775991","https://openalex.org/W2224750461","https://openalex.org/W2293844262","https://openalex.org/W2296452361","https://openalex.org/W2402124760","https://openalex.org/W2557044351","https://openalex.org/W2741594031","https://openalex.org/W2962763344","https://openalex.org/W2964043980","https://openalex.org/W3111818035","https://openalex.org/W6610316898","https://openalex.org/W6676935882","https://openalex.org/W6684559340","https://openalex.org/W6685839400","https://openalex.org/W6696889897","https://openalex.org/W6730054736","https://openalex.org/W6743631570"],"related_works":["https://openalex.org/W3048732067","https://openalex.org/W4383468834","https://openalex.org/W4384648009","https://openalex.org/W4303645823","https://openalex.org/W2900159906","https://openalex.org/W4283221438","https://openalex.org/W4287828318","https://openalex.org/W2406556600","https://openalex.org/W2899811703","https://openalex.org/W2957377429"],"abstract_inverted_index":{"Recent":[0],"years":[1],"have":[2],"witnessed":[3],"tremendous":[4],"academic":[5],"efforts":[6],"and":[7,161,171,218],"industry":[8],"growth":[9],"in":[10,60,147,175,179],"machine":[11,16,33,43],"learning.":[12],"The":[13],"security":[14,30],"of":[15,26,73,120,128,131,159,164,201,206,225],"learning":[17,34,44],"has":[18],"become":[19],"increasingly":[20],"prominent.":[21],"Poisoning":[22],"attack":[23,80,85,146,160,170,173],"is":[24,106,151,187],"one":[25],"the":[27,39,47,51,64,71,101,117,121,126,129,157,162,195,199,204,223],"most":[28],"relevant":[29],"threats":[31],"to":[32,62,68,181,221],"which":[35,89,148,193],"focuses":[36],"on":[37,82,115,215],"polluting":[38],"training":[40,48,58],"data":[41,59],"that":[42],"needs":[45],"during":[46],"process.":[49],"Specifically,":[50],"attacker":[52,196],"blends":[53],"crafted":[54],"poisoning":[55,79,145],"samples":[56],"into":[57,189],"order":[61,180],"make":[63],"learned":[65,122],"model":[66,123,143],"beneficial":[67],"him.":[69],"To":[70,133],"best":[72],"our":[74],"knowledge,":[75],"existing":[76,111],"researches":[77],"about":[78],"focused":[81],"either":[83],"integrity":[84,169],"or":[86],"availability":[87,172],"attack,":[88],"did":[90],"not":[91,107],"unify":[92,168],"these":[93,135],"two":[94,154],"attacks":[95],"together.":[96],"Aside":[97],"from":[98,100,153],"that,":[99],"attacker's":[102,104,149,190],"perspective,":[103],"strategy":[105,150],"flexible":[108],"enough.":[109],"Finally,":[110,208],"proposals":[112],"only":[113],"concentrated":[114],"increasing":[116],"test":[118],"error":[119],"but":[124],"ignored":[125],"importance":[127],"concealment":[130,163],"attack.":[132,165,226],"overcome":[134],"issues,":[136],"we":[137,167],"firstly":[138],"present":[139],"a":[140,184],"thorough":[141],"adversarial":[142],"for":[144],"defined":[152],"aspects,":[155],"i.e.,":[156],"effect":[158,202],"Then":[166],"together":[174],"similar":[176],"formulations.":[177],"Furthermore,":[178],"enhance":[182],"flexibility,":[183],"tradeoff":[185],"parameter":[186],"inserted":[188],"objective":[191],"function":[192],"means":[194],"can":[197],"balance":[198],"attraction":[200],"against":[203],"requirement":[205],"concealment.":[207],"as":[209],"examples,":[210],"extensive":[211],"experiments":[212],"are":[213],"conducted":[214],"linear":[216],"regression":[217,220],"logistic":[219],"demonstrate":[222],"effectiveness":[224]},"counts_by_year":[{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
