{"id":"https://openalex.org/W3016892025","doi":"https://doi.org/10.1109/tkde.2020.2987299","title":"Using Randomness to Improve Robustness of Tree-Based Models Against Evasion Attacks","display_name":"Using Randomness to Improve Robustness of Tree-Based Models Against Evasion Attacks","publication_year":2020,"publication_date":"2020-04-15","ids":{"openalex":"https://openalex.org/W3016892025","doi":"https://doi.org/10.1109/tkde.2020.2987299","mag":"3016892025"},"language":"en","primary_location":{"id":"doi:10.1109/tkde.2020.2987299","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2020.2987299","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101858187","display_name":"Fan Yang","orcid":"https://orcid.org/0000-0002-4113-764X"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fan Yang","raw_affiliation_strings":["Department of Information Systems, University of Maryland Baltimore County, Baltimore, MD, USA"],"raw_orcid":"https://orcid.org/0000-0002-4113-764X","affiliations":[{"raw_affiliation_string":"Department of Information Systems, University of Maryland Baltimore County, Baltimore, MD, USA","institution_ids":["https://openalex.org/I79272384"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100438515","display_name":"Zhiyuan Chen","orcid":"https://orcid.org/0000-0002-6984-7248"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhiyuan Chen","raw_affiliation_strings":["Department of Information Systems, University of Maryland Baltimore County, Baltimore, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, University of Maryland Baltimore County, Baltimore, MD, USA","institution_ids":["https://openalex.org/I79272384"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051208435","display_name":"Aryya Gangopadhyay","orcid":"https://orcid.org/0000-0002-7553-7932"},"institutions":[{"id":"https://openalex.org/I79272384","display_name":"University of Maryland, Baltimore County","ror":"https://ror.org/02qskvh78","country_code":"US","type":"education","lineage":["https://openalex.org/I79272384"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aryya Gangopadhyay","raw_affiliation_strings":["Department of Information Systems, University of Maryland Baltimore County, Baltimore, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Systems, University of Maryland Baltimore County, Baltimore, MD, USA","institution_ids":["https://openalex.org/I79272384"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I79272384"],"apc_list":null,"apc_paid":null,"fwci":0.9383,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.80600313,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"34","issue":"2","first_page":"969","last_page":"982"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8156083822250366},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.698177695274353},{"id":"https://openalex.org/keywords/randomness","display_name":"Randomness","score":0.6314065456390381},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5333777666091919},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.5040163397789001},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.500927209854126},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45006904006004333},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1111840307712555}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8156083822250366},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.698177695274353},{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.6314065456390381},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5333777666091919},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.5040163397789001},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.500927209854126},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45006904006004333},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1111840307712555},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tkde.2020.2987299","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tkde.2020.2987299","pdf_url":null,"source":{"id":"https://openalex.org/S30698027","display_name":"IEEE Transactions on Knowledge and Data Engineering","issn_l":"1041-4347","issn":["1041-4347","1558-2191","2326-3865"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Knowledge and Data Engineering","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3435801518","display_name":null,"funder_award_id":"N00014-18-1-2452","funder_id":"https://openalex.org/F4320337345","funder_display_name":"Office of Naval Research"}],"funders":[{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":55,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1484010841","https://openalex.org/W1585588639","https://openalex.org/W1884606608","https://openalex.org/W1965052658","https://openalex.org/W1966912382","https://openalex.org/W1968998685","https://openalex.org/W2008224380","https://openalex.org/W2015585187","https://openalex.org/W2047237187","https://openalex.org/W2077742958","https://openalex.org/W2084812512","https://openalex.org/W2097860933","https://openalex.org/W2109300365","https://openalex.org/W2109857912","https://openalex.org/W2114296159","https://openalex.org/W2122646361","https://openalex.org/W2141029621","https://openalex.org/W2144083192","https://openalex.org/W2145901875","https://openalex.org/W2146211964","https://openalex.org/W2150973844","https://openalex.org/W2151298633","https://openalex.org/W2151773168","https://openalex.org/W2161470437","https://openalex.org/W2162275200","https://openalex.org/W2167731287","https://openalex.org/W2180612164","https://openalex.org/W2293768274","https://openalex.org/W2296452361","https://openalex.org/W2432142698","https://openalex.org/W2461943168","https://openalex.org/W2535873859","https://openalex.org/W2611675901","https://openalex.org/W2748789698","https://openalex.org/W2962700793","https://openalex.org/W2964082701","https://openalex.org/W3103836116","https://openalex.org/W3123545922","https://openalex.org/W4282975758","https://openalex.org/W4297970707","https://openalex.org/W4383466480","https://openalex.org/W6634531175","https://openalex.org/W6640425456","https://openalex.org/W6680744341","https://openalex.org/W6681652963","https://openalex.org/W6682371931","https://openalex.org/W6683235873","https://openalex.org/W6695159855","https://openalex.org/W6696022951","https://openalex.org/W6717848421","https://openalex.org/W6737043114","https://openalex.org/W6742759968","https://openalex.org/W6743581629","https://openalex.org/W7024225124"],"related_works":["https://openalex.org/W3034924094","https://openalex.org/W3094954546","https://openalex.org/W1488708774","https://openalex.org/W1982811510","https://openalex.org/W4391100477","https://openalex.org/W2402189625","https://openalex.org/W4327779705","https://openalex.org/W4310560702","https://openalex.org/W1513698804","https://openalex.org/W4394984040"],"abstract_inverted_index":{"Machine":[0],"learning":[1,31],"models":[2,32,53,60,89,154],"have":[3,63],"been":[4,25],"widely":[5],"used":[6,112],"in":[7],"security":[8],"applications.":[9],"However,":[10,38],"it":[11],"is":[12,111],"well-known":[13],"that":[14,189],"adversaries":[15],"can":[16],"adapt":[17],"their":[18],"attacks":[19],"to":[20,35,75,84,113,121,140,150,159,172],"evade":[21],"detection.":[22],"There":[23],"has":[24,130],"some":[26],"work":[27],"on":[28,52,181],"making":[29],"machine":[30],"more":[33,152],"robust":[34,142,153],"such":[36,64],"attacks.":[37,92],"one":[39],"simple":[40],"but":[41,67,136],"promising":[42],"approach":[43,83,95,120,191],"calledrandomizationis":[44],"under-explored.":[45],"In":[46],"addition,":[47],"most":[48],"existing":[49,125],"works":[50],"focus":[51],"with":[54],"differentiable":[55],"error":[56,65],"functions":[57,66],"while":[58],"tree-based":[59,88],"do":[61],"not":[62],"are":[68,73],"quite":[69],"popular":[70],"because":[71],"they":[72],"easy":[74],"interpret.":[76],"This":[77],"paper":[78],"proposes":[79],"a":[80,146,156,169,174],"novel":[81,147],"randomization-based":[82],"improve":[85],"robustness":[86,194],"of":[87,195],"against":[90],"evasion":[91],"The":[93],"proposed":[94,145,168],"incorporates":[96],"randomization":[97],"into":[98],"both":[99],"model":[100,104,110,163],"training":[101,134],"time":[102,106,135],"and":[103,155,184],"application":[105,164],"(meaning":[107],"when":[108],"the":[109],"detect":[114],"attacks).":[115],"We":[116,144,166],"also":[117,167],"apply":[118],"this":[119],"random":[122],"forest,":[123],"an":[124],"ML":[126],"method":[127,149,158],"which":[128],"already":[129],"incorporated":[131],"randomness":[132,161],"at":[133,162],"still":[137],"often":[138],"fails":[139],"generate":[141,151],"models.":[143],"weighted-random-forest":[148],"clustering":[157],"add":[160],"time.":[165],"theoretical":[170],"framework":[171],"provide":[173],"lower":[175],"bound":[176],"for":[177],"adversaries\u2019":[178],"effort.":[179],"Experiments":[180],"intrusion":[182],"detection":[183],"spam":[185],"filtering":[186],"data":[187],"show":[188],"our":[190],"further":[192],"improves":[193],"random-forest":[196],"method.":[197]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}