{"id":"https://openalex.org/W4383503685","doi":"https://doi.org/10.1109/tsusc.2023.3293269","title":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","display_name":"On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach","publication_year":2023,"publication_date":"2023-07-07","ids":{"openalex":"https://openalex.org/W4383503685","doi":"https://doi.org/10.1109/tsusc.2023.3293269"},"language":"en","primary_location":{"id":"doi:10.1109/tsusc.2023.3293269","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsusc.2023.3293269","pdf_url":null,"source":{"id":"https://openalex.org/S4210221417","display_name":"IEEE Transactions on Sustainable Computing","issn_l":"2377-3782","issn":["2377-3782","2377-3790"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Sustainable Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://air.unimi.it/bitstream/2434/1022268/2/AABBDY.TSUSC2023.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090344140","display_name":"Marco Anisetti","orcid":"https://orcid.org/0000-0002-5438-9467"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Marco Anisetti","raw_affiliation_strings":["Department of Computer Science, Università degli Studi di Milano, Milan, Italy"],"raw_orcid":"https://orcid.org/0000-0002-5438-9467","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Università degli Studi di Milano, Milan, Italy","institution_ids":["https://openalex.org/I189158943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058453558","display_name":"Claudio A. Ardagna","orcid":"https://orcid.org/0000-0001-7426-4795"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Claudio A. Ardagna","raw_affiliation_strings":["Department of Computer Science, Università degli Studi di Milano, Milan, Italy"],"raw_orcid":"https://orcid.org/0000-0001-7426-4795","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Università degli Studi di Milano, Milan, Italy","institution_ids":["https://openalex.org/I189158943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047779677","display_name":"Alessandro Balestrucci","orcid":"https://orcid.org/0000-0002-4674-983X"},"institutions":[{"id":"https://openalex.org/I4210152452","display_name":"Consorzio Interuniversitario Nazionale per l'Informatica","ror":"https://ror.org/03v8v5y65","country_code":"IT","type":"facility","lineage":["https://openalex.org/I4210152452"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alessandro Balestrucci","raw_affiliation_strings":["Consorzio Interuniversitario per l’Informatica, Rome, Italy"],"raw_orcid":"https://orcid.org/0000-0002-4674-983X","affiliations":[{"raw_affiliation_string":"Consorzio Interuniversitario per l’Informatica, Rome, Italy","institution_ids":["https://openalex.org/I4210152452"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046305434","display_name":"Nicola Bena","orcid":"https://orcid.org/0000-0003-4909-9892"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Nicola Bena","raw_affiliation_strings":["Department of Computer Science, Università degli Studi di Milano, Milan, Italy"],"raw_orcid":"https://orcid.org/0000-0003-4909-9892","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Università degli Studi di Milano, Milan, Italy","institution_ids":["https://openalex.org/I189158943"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075830877","display_name":"Ernesto Damiani","orcid":"https://orcid.org/0000-0002-9557-6496"},"institutions":[{"id":"https://openalex.org/I189158943","display_name":"University of Milan","ror":"https://ror.org/00wjc7c48","country_code":"IT","type":"education","lineage":["https://openalex.org/I189158943"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Ernesto Damiani","raw_affiliation_strings":["Department of Computer Science, Università degli Studi di Milano, Milan, Italy"],"raw_orcid":"https://orcid.org/0000-0002-9557-6496","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Università degli Studi di Milano, Milan, Italy","institution_ids":["https://openalex.org/I189158943"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044552714","display_name":"Chan Yeob Yeun","orcid":"https://orcid.org/0000-0002-1398-952X"},"institutions":[{"id":"https://openalex.org/I176601375","display_name":"Khalifa University of Science and Technology","ror":"https://ror.org/05hffr360","country_code":"AE","type":"education","lineage":["https://openalex.org/I176601375"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Chan Yeob Yeun","raw_affiliation_strings":["Khalifa University of Science and Technology, Abu Dhabi, UAE"],"raw_orcid":"https://orcid.org/0000-0002-1398-952X","affiliations":[{"raw_affiliation_string":"Khalifa University of Science and Technology, Abu Dhabi, UAE","institution_ids":["https://openalex.org/I176601375"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.6484,"has_fulltext":true,"cited_by_count":23,"citation_normalized_percentile":{"value":0.94006882,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"8","issue":"4","first_page":"540","last_page":"554"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9850000143051147,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.8397672176361084},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7781938314437866},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7001693248748779},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.6716270446777344},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.641905665397644},{"id":"https://openalex.org/keywords/ensemble-forecasting","display_name":"Ensemble forecasting","score":0.6224799156188965},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5791270732879639},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.5450612902641296},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.5275549292564392},{"id":"https://openalex.org/keywords/gradient-boosting","display_name":"Gradient boosting","score":0.5232226252555847},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.47043487429618835}],"concepts":[{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.8397672176361084},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7781938314437866},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7001693248748779},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.6716270446777344},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.641905665397644},{"id":"https://openalex.org/C119898033","wikidata":"https://www.wikidata.org/wiki/Q3433888","display_name":"Ensemble forecasting","level":2,"score":0.6224799156188965},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5791270732879639},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.5450612902641296},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.5275549292564392},{"id":"https://openalex.org/C70153297","wikidata":"https://www.wikidata.org/wiki/Q5591907","display_name":"Gradient boosting","level":3,"score":0.5232226252555847},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.47043487429618835},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tsusc.2023.3293269","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsusc.2023.3293269","pdf_url":null,"source":{"id":"https://openalex.org/S4210221417","display_name":"IEEE Transactions on Sustainable Computing","issn_l":"2377-3782","issn":["2377-3782","2377-3790"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Sustainable Computing","raw_type":"journal-article"},{"id":"pmh:oai:air.unimi.it:2434/1022268","is_oa":true,"landing_page_url":"https://hdl.handle.net/2434/1022268","pdf_url":"https://air.unimi.it/bitstream/2434/1022268/2/AABBDY.TSUSC2023.pdf","source":{"id":"https://openalex.org/S4306400516","display_name":"Archivio Istituzionale della Ricerca (Universita Degli Studi Di Milano)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I189158943","host_organization_name":"University of Milan","host_organization_lineage":["https://openalex.org/I189158943"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:air.unimi.it:2434/1022268","is_oa":true,"landing_page_url":"https://hdl.handle.net/2434/1022268","pdf_url":"https://air.unimi.it/bitstream/2434/1022268/2/AABBDY.TSUSC2023.pdf","source":{"id":"https://openalex.org/S4306400516","display_name":"Archivio Istituzionale della Ricerca (Universita Degli Studi Di Milano)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I189158943","host_organization_name":"University of Milan","host_organization_lineage":["https://openalex.org/I189158943"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1704175309","display_name":null,"funder_award_id":"ECS00000037","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G507880695","display_name":null,"funder_award_id":"PE00000014","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4383503685.pdf"},"referenced_works_count":71,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1968264118","https://openalex.org/W1968411139","https://openalex.org/W1969496006","https://openalex.org/W2051808336","https://openalex.org/W2088422930","https://openalex.org/W2103154003","https://openalex.org/W2111547563","https://openalex.org/W2125908420","https://openalex.org/W2133990480","https://openalex.org/W2149033360","https://openalex.org/W2282821441","https://openalex.org/W2566079294","https://openalex.org/W2774423163","https://openalex.org/W2785509559","https://openalex.org/W2808724436","https://openalex.org/W2914057541","https://openalex.org/W2925214247","https://openalex.org/W2963292722","https://openalex.org/W2963618920","https://openalex.org/W2965721472","https://openalex.org/W2967236168","https://openalex.org/W2994949492","https://openalex.org/W2999144473","https://openalex.org/W3003677821","https://openalex.org/W3007358161","https://openalex.org/W3011235318","https://openalex.org/W3017335724","https://openalex.org/W3037369538","https://openalex.org/W3040626233","https://openalex.org/W3048339221","https://openalex.org/W3048759177","https://openalex.org/W3048817558","https://openalex.org/W3103836116","https://openalex.org/W3109652301","https://openalex.org/W3120740533","https://openalex.org/W3120847116","https://openalex.org/W3128839796","https://openalex.org/W3163715127","https://openalex.org/W3175052831","https://openalex.org/W3176008422","https://openalex.org/W3203271554","https://openalex.org/W3203751129","https://openalex.org/W3217417806","https://openalex.org/W4200470330","https://openalex.org/W4205569013","https://openalex.org/W4236137412","https://openalex.org/W4285404754","https://openalex.org/W4308085182","https://openalex.org/W4308641598","https://openalex.org/W4312457553","https://openalex.org/W4318148078","https://openalex.org/W4318603230","https://openalex.org/W4322736917","https://openalex.org/W4384302771","https://openalex.org/W6600061700","https://openalex.org/W6634505722","https://openalex.org/W6637162671","https://openalex.org/W6679546096","https://openalex.org/W6686674283","https://openalex.org/W6746897123","https://openalex.org/W6748233343","https://openalex.org/W6748556508","https://openalex.org/W6750462152","https://openalex.org/W6773640337","https://openalex.org/W6774177702","https://openalex.org/W6780120029","https://openalex.org/W6789206308","https://openalex.org/W6810206781","https://openalex.org/W6838493852","https://openalex.org/W7006806681"],"related_works":["https://openalex.org/W2967733078","https://openalex.org/W3204430031","https://openalex.org/W3137904399","https://openalex.org/W4310492845","https://openalex.org/W2885778889","https://openalex.org/W2766514146","https://openalex.org/W2885516856","https://openalex.org/W4289703016","https://openalex.org/W4310224730","https://openalex.org/W4296079469"],"abstract_inverted_index":{"Machine":[0],"learning":[1,10],"is":[2],"becoming":[3],"ubiquitous.":[4],"From":[5],"finance":[6],"to":[7,75,80,136,150],"medicine,":[8],"machine":[9,85],"models":[11,42,93],"are":[12,94,105],"boosting":[13],"decision/making":[14],"processes":[15],"and":[16,43,65,102,157,198,200,219],"even":[17],"outperforming":[18],"humans":[19],"in":[20,26,37,70,146,152,193],"some":[21],"tasks.":[22],"This":[23],"huge":[24],"progress":[25],"terms":[27,194],"of":[28,40,48,50,84,98,115,140,180,186,195],"prediction":[29],"quality":[30],"does":[31],"not":[32,124,133],"however":[33],"find":[34],"a":[35,116,159,184,204],"counterpart":[36],"the":[38,51,58,71,82,99,113,129,138,178],"security":[39],"such":[41],"corresponding":[44],"predictions,":[45],"where":[46,91],"perturbations":[47],"fractions":[49],"training":[52,100],"set":[53,101],"(poisoning)":[54],"can":[55],"seriously":[56],"undermine":[57],"model":[59,207],"accuracy.":[60],"Research":[61],"on":[62,96,128,209],"poisoning":[63,171,225],"attacks":[64],"defenses":[66,226],"received":[67],"increasing":[68],"attention":[69],"last":[72],"decade,":[73],"leading":[74],"several":[76],"promising":[77],"solutions":[78],"aiming":[79],"increase":[81,137],"robustness":[83,139],"learning.":[86],"Among":[87],"them,":[88],"ensemble-based":[89,120],"defenses,":[90,121],"different":[92],"trained":[95],"portions":[97],"their":[103],"predictions":[104],"then":[106],"aggregated,":[107],"provide":[108],"strong":[109],"theoretical":[110],"guarantees":[111],"at":[112],"price":[114],"linear":[117],"overhead.":[118],"Surprisingly,":[119],"which":[122],"do":[123],"pose":[125],"any":[126],"restrictions":[127],"base":[130],"model,":[131],"have":[132],"been":[134],"applied":[135],"random":[141,166,170,210,228],"forest":[142,167],"models.":[143],"The":[144],"work":[145],"this":[147,153],"paper":[148],"aims":[149],"fill":[151],"gap":[154],"by":[155],"designing":[156],"implementing":[158],"novel":[160],"hash-based":[161],"ensemble":[162],"approach":[163,182,222],"that":[164],"protects":[165],"against":[168,183],"untargeted,":[169],"attacks.":[172],"An":[173],"extensive":[174],"experimental":[175],"evaluation":[176],"measures":[177],"performance":[179],"our":[181,216,221],"variety":[185],"attacks,":[187],"as":[188,190],"well":[189],"its":[191],"sustainability":[192],"resource":[196],"consumption":[197],"performance,":[199],"compares":[201,220],"it":[202],"with":[203,223],"traditional":[205],"monolithic":[206],"based":[208],"forest.":[211],"A":[212],"final":[213],"discussion":[214],"presents":[215],"main":[217],"findings":[218],"existing":[224],"targeting":[227],"forests.":[229]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":11}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}