{"id":"https://openalex.org/W2953653416","doi":"https://doi.org/10.1145/3375395.3387643","title":"The Adversarial Robustness of Sampling","display_name":"The Adversarial Robustness of Sampling","publication_year":2020,"publication_date":"2020-05-29","ids":{"openalex":"https://openalex.org/W2953653416","doi":"https://doi.org/10.1145/3375395.3387643","mag":"2953653416"},"language":"en","primary_location":{"id":"doi:10.1145/3375395.3387643","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3375395.3387643","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th ACM SIGMOD-SIGACT-SIGAI Symposium on Principles of Database Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1906.11327","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5044142637","display_name":"Omri Ben\u2010Eliezer","orcid":"https://orcid.org/0000-0001-6366-5964"},"institutions":[{"id":"https://openalex.org/I16391192","display_name":"Tel Aviv University","ror":"https://ror.org/04mhzgx49","country_code":"IL","type":"education","lineage":["https://openalex.org/I16391192"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Omri Ben-Eliezer","raw_affiliation_strings":["Tel Aviv University, Tel Aviv, Israel","Tel Aviv University, Tel-Aviv, Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Tel Aviv University, Tel Aviv, Israel","institution_ids":["https://openalex.org/I16391192"]},{"raw_affiliation_string":"Tel Aviv University, Tel-Aviv, Israel","institution_ids":["https://openalex.org/I16391192"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5048056525","display_name":"Eylon Yogev","orcid":"https://orcid.org/0000-0001-8599-2472"},"institutions":[{"id":"https://openalex.org/I174306211","display_name":"Technion \u2013 Israel Institute of Technology","ror":"https://ror.org/03qryx823","country_code":"IL","type":"education","lineage":["https://openalex.org/I174306211"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Eylon Yogev","raw_affiliation_strings":["Technion - Israel Institute of Technology, Haifa, Israel","Technion\u2014Israel Institute of Technology, Haifa,  Israel"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technion - Israel Institute of Technology, Haifa, Israel","institution_ids":["https://openalex.org/I174306211"]},{"raw_affiliation_string":"Technion\u2014Israel Institute of Technology, Haifa,  Israel","institution_ids":["https://openalex.org/I174306211"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"2019","issue":null,"first_page":"49","last_page":"62"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6386491060256958},{"id":"https://openalex.org/keywords/sample-size-determination","display_name":"Sample size determination","score":0.5091645121574402},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5035104155540466},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4972088634967804},{"id":"https://openalex.org/keywords/adaptive-sampling","display_name":"Adaptive sampling","score":0.4855620563030243},{"id":"https://openalex.org/keywords/sample-space","display_name":"Sample space","score":0.4587131142616272},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.45836055278778076},{"id":"https://openalex.org/keywords/sampling","display_name":"Sampling (signal processing)","score":0.4425155818462372},{"id":"https://openalex.org/keywords/streaming-algorithm","display_name":"Streaming algorithm","score":0.44017383456230164},{"id":"https://openalex.org/keywords/dimension","display_name":"Dimension (graph theory)","score":0.433468759059906},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.42970606684684753},{"id":"https://openalex.org/keywords/data-stream","display_name":"Data stream","score":0.4270494878292084},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.4251840114593506},{"id":"https://openalex.org/keywords/upper-and-lower-bounds","display_name":"Upper and lower bounds","score":0.37916308641433716},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3520806133747101},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.26393482089042664},{"id":"https://openalex.org/keywords/combinatorics","display_name":"Combinatorics","score":0.21729731559753418},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.18591412901878357}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6386491060256958},{"id":"https://openalex.org/C129848803","wikidata":"https://www.wikidata.org/wiki/Q2564360","display_name":"Sample size determination","level":2,"score":0.5091645121574402},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5035104155540466},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4972088634967804},{"id":"https://openalex.org/C2781395549","wikidata":"https://www.wikidata.org/wiki/Q4680762","display_name":"Adaptive sampling","level":3,"score":0.4855620563030243},{"id":"https://openalex.org/C100279318","wikidata":"https://www.wikidata.org/wiki/Q467440","display_name":"Sample space","level":2,"score":0.4587131142616272},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.45836055278778076},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.4425155818462372},{"id":"https://openalex.org/C187166803","wikidata":"https://www.wikidata.org/wiki/Q2835831","display_name":"Streaming algorithm","level":3,"score":0.44017383456230164},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.433468759059906},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.42970606684684753},{"id":"https://openalex.org/C2778484313","wikidata":"https://www.wikidata.org/wiki/Q1172540","display_name":"Data stream","level":2,"score":0.4270494878292084},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.4251840114593506},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.37916308641433716},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3520806133747101},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.26393482089042664},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.21729731559753418},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.18591412901878357},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.0},{"id":"https://openalex.org/C19499675","wikidata":"https://www.wikidata.org/wiki/Q232207","display_name":"Monte Carlo method","level":2,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1145/3375395.3387643","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3375395.3387643","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 39th ACM SIGMOD-SIGACT-SIGAI Symposium on Principles of Database Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1906.11327","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1906.11327","pdf_url":"https://arxiv.org/pdf/1906.11327","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},{"id":"mag:2953653416","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/1906.11327v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"mag:2964760527","is_oa":false,"landing_page_url":"https://eprint.iacr.org/2019/764.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S2764847869","display_name":"IACR Cryptology ePrint Archive","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":["https://openalex.org/P4322614454"],"host_organization_lineage_names":["Cryptology ePrint Archive"],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IACR Cryptology ePrint Archive","raw_type":null},{"id":"doi:10.48550/arxiv.1906.11327","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1906.11327","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1906.11327","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1906.11327","pdf_url":"https://arxiv.org/pdf/1906.11327","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2953653416.pdf","grobid_xml":"https://content.openalex.org/works/W2953653416.grobid-xml"},"referenced_works_count":72,"referenced_works":["https://openalex.org/W89074110","https://openalex.org/W201721620","https://openalex.org/W1502629466","https://openalex.org/W1555759181","https://openalex.org/W1571664355","https://openalex.org/W1599814229","https://openalex.org/W1963394116","https://openalex.org/W1971361630","https://openalex.org/W1981663184","https://openalex.org/W1982682305","https://openalex.org/W1988355221","https://openalex.org/W1991417304","https://openalex.org/W2002240881","https://openalex.org/W2015926116","https://openalex.org/W2019363670","https://openalex.org/W2020913456","https://openalex.org/W2022942700","https://openalex.org/W2029538739","https://openalex.org/W2034417563","https://openalex.org/W2042024619","https://openalex.org/W2042587503","https://openalex.org/W2049127440","https://openalex.org/W2052800956","https://openalex.org/W2058097145","https://openalex.org/W2068871408","https://openalex.org/W2077723394","https://openalex.org/W2083100635","https://openalex.org/W2083459869","https://openalex.org/W2093750351","https://openalex.org/W2094835873","https://openalex.org/W2107443258","https://openalex.org/W2112452856","https://openalex.org/W2114944618","https://openalex.org/W2119885577","https://openalex.org/W2124430127","https://openalex.org/W2129160848","https://openalex.org/W2131688413","https://openalex.org/W2139076222","https://openalex.org/W2166505687","https://openalex.org/W2346474025","https://openalex.org/W2488946552","https://openalex.org/W2513180554","https://openalex.org/W2525159801","https://openalex.org/W2603766943","https://openalex.org/W2622263826","https://openalex.org/W2773446523","https://openalex.org/W2794925984","https://openalex.org/W2807192154","https://openalex.org/W2809895662","https://openalex.org/W2886462939","https://openalex.org/W2895435412","https://openalex.org/W2934975900","https://openalex.org/W2963274201","https://openalex.org/W2963291907","https://openalex.org/W2963702144","https://openalex.org/W2963727676","https://openalex.org/W2963903516","https://openalex.org/W2964153729","https://openalex.org/W2964188247","https://openalex.org/W2964556751","https://openalex.org/W3004286518","https://openalex.org/W3013820469","https://openalex.org/W3031693517","https://openalex.org/W3103836116","https://openalex.org/W3121225887","https://openalex.org/W3137191742","https://openalex.org/W3137304074","https://openalex.org/W4205841652","https://openalex.org/W4238284510","https://openalex.org/W4238893454","https://openalex.org/W4247200422","https://openalex.org/W4292022450"],"related_works":["https://openalex.org/W2964760527","https://openalex.org/W2162317237","https://openalex.org/W3046765352","https://openalex.org/W2793015305","https://openalex.org/W197041428","https://openalex.org/W2953725754","https://openalex.org/W240751027","https://openalex.org/W3014428963","https://openalex.org/W1564309918","https://openalex.org/W2490463106","https://openalex.org/W2950873345","https://openalex.org/W3032830280","https://openalex.org/W2569988392","https://openalex.org/W2150792012","https://openalex.org/W2551518464","https://openalex.org/W2033027791","https://openalex.org/W1798941275","https://openalex.org/W2886974017","https://openalex.org/W2736629386","https://openalex.org/W3092262909"],"abstract_inverted_index":{"Random":[0],"sampling":[1,36,58,62,262,295],"is":[2,82,129,141,153,177,217,233,250,271],"a":[3,15,20,42,48,53,57,135,182,186,192,225,252,303],"fundamental":[4],"primitive":[5],"in":[6,41,85,113,119,131,197,220,245,257,279,313],"modern":[7],"algorithms,":[8],"statistics,":[9],"and":[10,104,227,293],"machine":[11],"learning,":[12],"used":[13],"as":[14,211,213],"generic":[16],"method":[17],"to":[18,56,109,191,241,259,273],"obtain":[19],"small":[21],"yet":[22,201],"\"representative\"":[23],"subset":[24],"of":[25,35,50,69,75,94,138,144,156,194,306,316],"the":[26,33,67,71,76,86,91,95,102,120,126,145,154,157,198,207,214,221,237,246,261,268,275,280,284,291,307,314,323,327],"data.":[27],"In":[28],"this":[29,164,231],"work,":[30],"we":[31],"investigate":[32],"robustness":[34,169],"against":[37,170,265],"adaptive":[38,84,172,203,266,318],"adversarial":[39],"attacks":[40],"streaming":[43],"setting:":[44],"An":[45],"adversary":[46,81,204],"sends":[47],"stream":[49,128,222,247,308],"elements":[51],"from":[52],"universe":[54],"U":[55],"algorithm":[59,263],"(e.g.,":[60],"Bernoulli":[61,292],"or":[63],"reservoir":[64,294],"sampling),":[65],"with":[66,148,283,297,309],"goal":[68],"making":[70],"sample":[72,96,137,165,188,208,215,281,298,305],"\"very":[73],"unrepresentative\"":[74],"underlying":[77,158],"data":[78,147],"stream.":[79],"The":[80,174],"fully":[83],"sense":[87],"that":[88,124,256],"it":[89],"knows":[90],"exact":[92],"content":[93],"at":[97],"any":[98],"given":[99],"point":[100],"along":[101],"stream,":[103],"can":[105,205],"choose":[106],"which":[107],"element":[108],"send":[110],"next":[111],"accordingly,":[112],"an":[114,142,171,202,317],"online":[115],"manner.":[116],"Well-known":[117],"results":[118],"static":[121,199],"setting":[122],"indicate":[123],"if":[125],"full":[127,146],"chosen":[130],"advance":[132],"(non-adaptively),":[133],"then":[134],"random":[136],"size":[139,166,189,216,240,282,299],"\u03a9(d/\u03b52)":[140],"\u03b5-approximation":[143],"good":[149,310],"probability,":[150,311],"where":[151,185],"d":[152,278],"VC-dimension":[155,193,276],"set":[159,183,238],"system":[160,184,239],"(U,":[161],"R).":[162],"Does":[163],"suffice":[167],"for":[168],"adversary?":[173],"simplistic":[175],"answer":[176],"negative":[178],":":[179],"We":[180,254],"demonstrate":[181],"constant":[187],"(corresponding":[190],"1)":[195],"suffices":[196],"setting,":[200],"make":[206,260],"very":[209],"unrepresentative,":[210],"long":[212],"(strongly)":[218],"sublinear":[219],"length,":[223],"using":[224],"simple":[226],"easy-to-implement":[228],"attack.":[229,328],"However,":[230],"attack":[232],"\"theoretical":[234],"only\",":[235],"requiring":[236],"(essentially)":[242],"be":[243],"exponential":[244],"length.":[248],"This":[249,320],"not":[251],"coincidence:":[253],"show":[255],"order":[258],"robust":[264],"adversaries,":[267],"modification":[269],"required":[270],"solely":[272],"replace":[274],"term":[277,286],"cardinality":[285],"log":[287],"|R|.":[288],"That":[289],"is,":[290],"algorithms":[296],"\u03a9(log":[300],"|R|/\u03b52)":[301],"output":[302],"representative":[304],"even":[312],"presence":[315],"adversary.":[319],"nearly":[321],"matches":[322],"bound":[324],"imposed":[325],"by":[326]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-20T07:56:41.581041","created_date":"2025-10-10T00:00:00"}