{"id":"https://openalex.org/W4392980052","doi":"https://doi.org/10.1109/tifs.2024.3379829","title":"On the Economics of Adversarial Machine Learning","display_name":"On the Economics of Adversarial Machine Learning","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4392980052","doi":"https://doi.org/10.1109/tifs.2024.3379829"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2024.3379829","is_oa":true,"landing_page_url":"http://dx.doi.org/10.1109/tifs.2024.3379829","pdf_url":"https://ieeexplore.ieee.org/ielx7/10206/4358835/10476499.pdf","source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/10206/4358835/10476499.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061203666","display_name":"Florian Merkle","orcid":"https://orcid.org/0000-0003-3562-5265"},"institutions":[{"id":"https://openalex.org/I190249584","display_name":"Universit\u00e4t Innsbruck","ror":"https://ror.org/054pv6659","country_code":"AT","type":"education","lineage":["https://openalex.org/I190249584"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Florian Merkle","raw_affiliation_strings":["Department of Information Systems, Productions and Logistic, University of Innsbruck, Innsbruck, Austria"],"raw_orcid":"https://orcid.org/0000-0003-3562-5265","affiliations":[{"raw_affiliation_string":"Department of Information Systems, Productions and Logistic, University of Innsbruck, Innsbruck, Austria","institution_ids":["https://openalex.org/I190249584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080652998","display_name":"Maximilian Samsinger","orcid":"https://orcid.org/0000-0002-8521-8142"},"institutions":[{"id":"https://openalex.org/I41073452","display_name":"Management Center Innsbruck","ror":"https://ror.org/021kg9v06","country_code":"AT","type":"education","lineage":["https://openalex.org/I41073452"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Maximilian Samsinger","raw_affiliation_strings":["Department of Digital Business and Software Engineering, MCI Innsbruck, Innsbruck, Austria"],"raw_orcid":"https://orcid.org/0000-0002-8521-8142","affiliations":[{"raw_affiliation_string":"Department of Digital Business and Software Engineering, MCI Innsbruck, Innsbruck, Austria","institution_ids":["https://openalex.org/I41073452"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039542868","display_name":"Pascal Sch\u00f6ttle","orcid":"https://orcid.org/0000-0001-8710-9188"},"institutions":[{"id":"https://openalex.org/I41073452","display_name":"Management Center Innsbruck","ror":"https://ror.org/021kg9v06","country_code":"AT","type":"education","lineage":["https://openalex.org/I41073452"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Pascal Sch\u00f6ttle","raw_affiliation_strings":["Department of Digital Business and Software Engineering, MCI Innsbruck, Innsbruck, Austria"],"raw_orcid":"https://orcid.org/0000-0001-8710-9188","affiliations":[{"raw_affiliation_string":"Department of Digital Business and Software Engineering, MCI Innsbruck, Innsbruck, Austria","institution_ids":["https://openalex.org/I41073452"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5059337672","display_name":"Tom\u00e1\u0161 Pevn\u00fd","orcid":"https://orcid.org/0000-0002-5768-9713"},"institutions":[{"id":"https://openalex.org/I44504214","display_name":"Czech Technical University in Prague","ror":"https://ror.org/03kqpb082","country_code":"CZ","type":"education","lineage":["https://openalex.org/I44504214"]}],"countries":["CZ"],"is_corresponding":false,"raw_author_name":"Tomas Pevny","raw_affiliation_strings":["Department of Computer Science, Czech Technical University in Prague, Prague, Czech Republic"],"raw_orcid":"https://orcid.org/0000-0002-5768-9713","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Czech Technical University in Prague, Prague, Czech Republic","institution_ids":["https://openalex.org/I44504214"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.9497,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.77841329,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"19","issue":null,"first_page":"4670","last_page":"4685"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9624000191688538,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8307497501373291},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.788237988948822},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5339322090148926},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.46471866965293884},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.44754117727279663}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8307497501373291},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.788237988948822},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5339322090148926},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.46471866965293884},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.44754117727279663}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2024.3379829","is_oa":true,"landing_page_url":"http://dx.doi.org/10.1109/tifs.2024.3379829","pdf_url":"https://ieeexplore.ieee.org/ielx7/10206/4358835/10476499.pdf","source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tifs.2024.3379829","is_oa":true,"landing_page_url":"http://dx.doi.org/10.1109/tifs.2024.3379829","pdf_url":"https://ieeexplore.ieee.org/ielx7/10206/4358835/10476499.pdf","source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2497565950","display_name":"Game Over Eva(sion): Securing Deep Learning with Game Theory","funder_award_id":"GF19-29680L","funder_id":"https://openalex.org/F4320321006","funder_display_name":"Grantov\u00e1 Agentura \u010cesk\u00e9 Republiky"},{"id":"https://openalex.org/G2815450301","display_name":"Unsupervised learning from heterogenous structured data","funder_award_id":"GA22-32620S","funder_id":"https://openalex.org/F4320321006","funder_display_name":"Grantov\u00e1 Agentura \u010cesk\u00e9 Republiky"},{"id":"https://openalex.org/G6427747595","display_name":null,"funder_award_id":"I 4057-N31","funder_id":"https://openalex.org/F4320321181","funder_display_name":"Austrian Science Fund"}],"funders":[{"id":"https://openalex.org/F4320321006","display_name":"Grantov\u00e1 Agentura \u010cesk\u00e9 Republiky","ror":"https://ror.org/01pv73b02"},{"id":"https://openalex.org/F4320321181","display_name":"Austrian Science Fund","ror":"https://ror.org/013tf3c58"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4392980052.pdf","grobid_xml":"https://content.openalex.org/works/W4392980052.grobid-xml"},"referenced_works_count":65,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1483280370","https://openalex.org/W1966912382","https://openalex.org/W1967820237","https://openalex.org/W1972771043","https://openalex.org/W2012708568","https://openalex.org/W2022537828","https://openalex.org/W2062493711","https://openalex.org/W2083847133","https://openalex.org/W2097860933","https://openalex.org/W2108598243","https://openalex.org/W2111589951","https://openalex.org/W2114296159","https://openalex.org/W2125908420","https://openalex.org/W2160502705","https://openalex.org/W2243397390","https://openalex.org/W2283907002","https://openalex.org/W2293768274","https://openalex.org/W2302255633","https://openalex.org/W2408141691","https://openalex.org/W2539093944","https://openalex.org/W2543927648","https://openalex.org/W2746600820","https://openalex.org/W2887603965","https://openalex.org/W2913848079","https://openalex.org/W2963054141","https://openalex.org/W2963163009","https://openalex.org/W2963165251","https://openalex.org/W2963366334","https://openalex.org/W2963446712","https://openalex.org/W2963857521","https://openalex.org/W3015625436","https://openalex.org/W3097924569","https://openalex.org/W3103836116","https://openalex.org/W3106412272","https://openalex.org/W3118608800","https://openalex.org/W3175649966","https://openalex.org/W3177469408","https://openalex.org/W3213071857","https://openalex.org/W4234761190","https://openalex.org/W4236402791","https://openalex.org/W4247200422","https://openalex.org/W4289752762","https://openalex.org/W4293846201","https://openalex.org/W4378977274","https://openalex.org/W4382618988","https://openalex.org/W6637162671","https://openalex.org/W6675878407","https://openalex.org/W6676935882","https://openalex.org/W6714069269","https://openalex.org/W6726497184","https://openalex.org/W6746608116","https://openalex.org/W6747473890","https://openalex.org/W6748475379","https://openalex.org/W6753565081","https://openalex.org/W6755494463","https://openalex.org/W6758684365","https://openalex.org/W6758975236","https://openalex.org/W6759129252","https://openalex.org/W6771809012","https://openalex.org/W6774348459","https://openalex.org/W6774549192","https://openalex.org/W6790875542","https://openalex.org/W6853659455","https://openalex.org/W6854507816"],"related_works":["https://openalex.org/W3048732067","https://openalex.org/W4383468834","https://openalex.org/W4384648009","https://openalex.org/W2961085424","https://openalex.org/W4303645823","https://openalex.org/W2900159906","https://openalex.org/W4306674287","https://openalex.org/W4283221438","https://openalex.org/W4287828318","https://openalex.org/W2406556600"],"abstract_inverted_index":{"Given":[0],"the":[1,8,15,24,52,87,110,152,159,175,178,189,201,206,235],"widespread":[2],"deployment":[3],"of":[4,10,17,69,151,177,184,208],"machine":[5,19,43],"learning":[6,20,44],"algorithms,":[7],"security":[9],"these":[11],"algorithms":[12],"and":[13,39,74,79,133,142,155,158,173,243],"thus,":[14],"field":[16],"adversarial":[18,42,135,224],"gained":[21],"popularity":[22],"in":[23,36,51,90,137,146,200],"research":[25],"community.":[26],"In":[27],"this":[28,171],"article,":[29],"we":[30,56,101,237],"loosen":[31],"several":[32],"unrealistic":[33],"restrictions":[34],"found":[35],"prior":[37],"art":[38],"bring":[40],"economical-inspired":[41],"one":[45],"step":[46],"closer":[47],"to":[48,105,250],"being":[49],"applicable":[50],"real":[53],"world.":[54],"First,":[55],"extend":[57],"our":[58,168],"own":[59],"game-theoretical":[60],"framework":[61],"such":[62,204],"that":[63,211,239],"it":[64],"allows":[65],"any":[66,96],"arbitrary":[67,98],"number":[68],"actions":[70],"for":[71,86,127,162,180],"both":[72,92,163],"actors,":[73],"analytically":[75],"determine":[76],"equilibrium":[77],"strategies":[78,83],"conditions":[80],"where":[81],"mixed":[82],"are":[84],"expected":[85],"specific":[88],"case":[89],"which":[91],"actors":[93],"choose":[94],"from":[95,256],"two":[97,130],"actions.":[99],"Then,":[100],"pay":[102],"special":[103],"attention":[104],"an":[106],"adversary\u2019s":[107],"knowledge":[108],"about":[109],"attacked":[111],"system":[112],"by":[113,191],"modeling":[114],"them":[115],"as":[116,140,205,215,252,254],"a":[117,181,245],"white-,":[118],"gray-,":[119],"or":[120,226],"black-box":[121],"adversary.":[122],"We":[123,165,196],"conduct":[124],"extensive":[125],"experiments":[126],"three":[128],"architectures,":[129],"training":[131],"procedures,":[132],"four":[134],"attacks":[136,210,228,242],"different":[138],"variations":[139],"direct":[141],"transfer":[143],"attacks,":[144],"resulting":[145],"300":[147],"data":[148,172],"points":[149],"consisting":[150],"respective":[153],"accuracy":[154],"robustness":[156],"values":[157],"computational":[160],"costs":[161],"actors.":[164],"then":[166],"instantiate":[167],"model":[169],"with":[170],"explore":[174],"structure":[176],"game":[179,186,194],"wide":[182],"range":[183],"each":[185],"parameter,":[187],"overcoming":[188],"complexity":[190],"applying":[192],"algorithmic":[193],"theory.":[195],"discover":[197],"surprising":[198],"properties":[199],"actors\u2019":[202],"strategies,":[203],"feasibility":[207],"cheap":[209],"have":[212],"been":[213],"dismissed":[214],"practically":[216],"irrelevant":[217],"so":[218],"far":[219],"-":[220],"examples":[221],"include":[222],"universal":[223],"perturbations":[225],"(transfer)":[227],"utilizing":[229],"only":[230],"few":[231],"optimization":[232],"steps.":[233],"For":[234],"defender,":[236],"find":[238],"given":[240],"recent":[241],"countermeasures,":[244],"rational":[246],"defender":[247],"would":[248],"try":[249],"hide":[251],"much":[253],"possible":[255],"their":[257],"infrastructure.":[258]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2024,"cited_by_count":1}],"updated_date":"2026-08-08T01:25:22.217667","created_date":"2025-10-10T00:00:00"}