{"id":"https://openalex.org/W3135687813","doi":"https://doi.org/10.1145/3453158","title":"Adversarial Machine Learning Attacks and Defense Methods in the Cyber Security Domain","display_name":"Adversarial Machine Learning Attacks and Defense Methods in the Cyber Security Domain","publication_year":2021,"publication_date":"2021-05-25","ids":{"openalex":"https://openalex.org/W3135687813","doi":"https://doi.org/10.1145/3453158","mag":"3135687813"},"language":"en","primary_location":{"id":"doi:10.1145/3453158","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3453158","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},"type":"preprint","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2007.02407","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009941129","display_name":"Ihai Rosenberg","orcid":null},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":true,"raw_author_name":"Ishai Rosenberg","raw_affiliation_strings":["Ben-Gurion University of the Negev","Ben\u2010Gurion University of the Negev"],"affiliations":[{"raw_affiliation_string":"Ben-Gurion University of the Negev","institution_ids":["https://openalex.org/I124227911"]},{"raw_affiliation_string":"Ben\u2010Gurion University of the Negev","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002391103","display_name":"Asaf Shabtai","orcid":"https://orcid.org/0000-0003-0630-4059"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Asaf Shabtai","raw_affiliation_strings":["Ben-Gurion University of the Negev","Ben\u2010Gurion University of the Negev"],"affiliations":[{"raw_affiliation_string":"Ben-Gurion University of the Negev","institution_ids":["https://openalex.org/I124227911"]},{"raw_affiliation_string":"Ben\u2010Gurion University of the Negev","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072913672","display_name":"Yuval Elovici","orcid":"https://orcid.org/0000-0002-9641-128X"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Yuval Elovici","raw_affiliation_strings":["Ben-Gurion University of the Negev","Ben\u2010Gurion University of the Negev"],"affiliations":[{"raw_affiliation_string":"Ben-Gurion University of the Negev","institution_ids":["https://openalex.org/I124227911"]},{"raw_affiliation_string":"Ben\u2010Gurion University of the Negev","institution_ids":["https://openalex.org/I124227911"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5012622155","display_name":"Lior Rokach","orcid":"https://orcid.org/0000-0002-6956-3341"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]}],"countries":["IL"],"is_corresponding":false,"raw_author_name":"Lior Rokach","raw_affiliation_strings":["Ben-Gurion University of the Negev","Ben\u2010Gurion University of the Negev"],"affiliations":[{"raw_affiliation_string":"Ben-Gurion University of the Negev","institution_ids":["https://openalex.org/I124227911"]},{"raw_affiliation_string":"Ben\u2010Gurion University of the Negev","institution_ids":["https://openalex.org/I124227911"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5009941129"],"corresponding_institution_ids":["https://openalex.org/I124227911"],"apc_list":null,"apc_paid":null,"fwci":1.6774,"has_fulltext":true,"cited_by_count":15,"citation_normalized_percentile":{"value":0.86589139,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"54","issue":"5","first_page":"1","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9925000071525574,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.9294488430023193},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7470236420631409},{"id":"https://openalex.org/keywords/security-domain","display_name":"Security domain","score":0.7346727848052979},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7234318256378174},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.7157333493232727},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7095080018043518},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.6268492341041565},{"id":"https://openalex.org/keywords/categorization","display_name":"Categorization","score":0.6251158714294434},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5203151702880859},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.49111053347587585},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4084659516811371}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.9294488430023193},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7470236420631409},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.7346727848052979},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7234318256378174},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.7157333493232727},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7095080018043518},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.6268492341041565},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.6251158714294434},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5203151702880859},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.49111053347587585},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4084659516811371},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3453158","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3453158","pdf_url":null,"source":{"id":"https://openalex.org/S157921468","display_name":"ACM Computing Surveys","issn_l":"0360-0300","issn":["0360-0300","1557-7341"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Computing Surveys","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2007.02407","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2007.02407","pdf_url":"https://arxiv.org/pdf/2007.02407","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:3135687813","is_oa":true,"landing_page_url":"https://arxiv.org/pdf/2007.02407.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.2007.02407","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2007.02407","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2007.02407","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2007.02407","pdf_url":"https://arxiv.org/pdf/2007.02407","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3135687813.pdf","grobid_xml":"https://content.openalex.org/works/W3135687813.grobid-xml"},"referenced_works_count":170,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W17316494","https://openalex.org/W1531333757","https://openalex.org/W1561983441","https://openalex.org/W1605925311","https://openalex.org/W1851403712","https://openalex.org/W1893133781","https://openalex.org/W1956767865","https://openalex.org/W1981294881","https://openalex.org/W1989957782","https://openalex.org/W1998808035","https://openalex.org/W2038296020","https://openalex.org/W2064675550","https://openalex.org/W2095577883","https://openalex.org/W2097860933","https://openalex.org/W2099471712","https://openalex.org/W2099940443","https://openalex.org/W2105497548","https://openalex.org/W2122672392","https://openalex.org/W2125908420","https://openalex.org/W2131774270","https://openalex.org/W2136495567","https://openalex.org/W2144906988","https://openalex.org/W2146334809","https://openalex.org/W2162552722","https://openalex.org/W2180612164","https://openalex.org/W2243397390","https://openalex.org/W2296719434","https://openalex.org/W2325939864","https://openalex.org/W2400599487","https://openalex.org/W2408141691","https://openalex.org/W2432142698","https://openalex.org/W2460937040","https://openalex.org/W2466719777","https://openalex.org/W2478866800","https://openalex.org/W2528572867","https://openalex.org/W2535873859","https://openalex.org/W2550538157","https://openalex.org/W2570685808","https://openalex.org/W2571710472","https://openalex.org/W2574797807","https://openalex.org/W2591788621","https://openalex.org/W2594877703","https://openalex.org/W2603766943","https://openalex.org/W2603775267","https://openalex.org/W2607219512","https://openalex.org/W2618219509","https://openalex.org/W2625935159","https://openalex.org/W2728257130","https://openalex.org/W2744095836","https://openalex.org/W2746600820","https://openalex.org/W2748690817","https://openalex.org/W2749572357","https://openalex.org/W2753542656","https://openalex.org/W2753783305","https://openalex.org/W2757858076","https://openalex.org/W2758551931","https://openalex.org/W2767951891","https://openalex.org/W2773446523","https://openalex.org/W2774423163","https://openalex.org/W2776884785","https://openalex.org/W2778624544","https://openalex.org/W2780484784","https://openalex.org/W2782892391","https://openalex.org/W2784452215","https://openalex.org/W2785699986","https://openalex.org/W2785844809","https://openalex.org/W2787708942","https://openalex.org/W2787957674","https://openalex.org/W2789828921","https://openalex.org/W2798159728","https://openalex.org/W2798302089","https://openalex.org/W2799137713","https://openalex.org/W2799420851","https://openalex.org/W2803697594","https://openalex.org/W2809523935","https://openalex.org/W2853623529","https://openalex.org/W2883743354","https://openalex.org/W2888940765","https://openalex.org/W2889645991","https://openalex.org/W2889836475","https://openalex.org/W2891412341","https://openalex.org/W2892399533","https://openalex.org/W2896370767","https://openalex.org/W2896732478","https://openalex.org/W2898761242","https://openalex.org/W2902758299","https://openalex.org/W2902901209","https://openalex.org/W2906869444","https://openalex.org/W2908403421","https://openalex.org/W2909023102","https://openalex.org/W2911377781","https://openalex.org/W2911919851","https://openalex.org/W2913301826","https://openalex.org/W2913694443","https://openalex.org/W2915004960","https://openalex.org/W2917948814","https://openalex.org/W2919491917","https://openalex.org/W2923778952","https://openalex.org/W2925281733","https://openalex.org/W2929803724","https://openalex.org/W2934843808","https://openalex.org/W2942091739","https://openalex.org/W2942630857","https://openalex.org/W2951298793","https://openalex.org/W2951312444","https://openalex.org/W2952620224","https://openalex.org/W2953822176","https://openalex.org/W2954088888","https://openalex.org/W2954298218","https://openalex.org/W2958749653","https://openalex.org/W2962700793","https://openalex.org/W2962718684","https://openalex.org/W2962747881","https://openalex.org/W2962756933","https://openalex.org/W2962818281","https://openalex.org/W2963106521","https://openalex.org/W2963165251","https://openalex.org/W2963197901","https://openalex.org/W2963207607","https://openalex.org/W2963219110","https://openalex.org/W2963231286","https://openalex.org/W2963416329","https://openalex.org/W2963431851","https://openalex.org/W2963454111","https://openalex.org/W2963461515","https://openalex.org/W2963539830","https://openalex.org/W2963564844","https://openalex.org/W2963612069","https://openalex.org/W2963684088","https://openalex.org/W2963777610","https://openalex.org/W2963834268","https://openalex.org/W2963844355","https://openalex.org/W2963857521","https://openalex.org/W2964040431","https://openalex.org/W2964043980","https://openalex.org/W2964082701","https://openalex.org/W2964153729","https://openalex.org/W2964199361","https://openalex.org/W2964253222","https://openalex.org/W2964268978","https://openalex.org/W2964318098","https://openalex.org/W2965448195","https://openalex.org/W2965565691","https://openalex.org/W2968455244","https://openalex.org/W2969422184","https://openalex.org/W2982596671","https://openalex.org/W2989093880","https://openalex.org/W2990270730","https://openalex.org/W3009195050","https://openalex.org/W3010216895","https://openalex.org/W3011678299","https://openalex.org/W3012459057","https://openalex.org/W3015800793","https://openalex.org/W3033311119","https://openalex.org/W3034795015","https://openalex.org/W3083508630","https://openalex.org/W3085382268","https://openalex.org/W3090952333","https://openalex.org/W3091163785","https://openalex.org/W3098447523","https://openalex.org/W3103177978","https://openalex.org/W3103340107","https://openalex.org/W3104158743","https://openalex.org/W3111411071","https://openalex.org/W3213748123","https://openalex.org/W4289367668","https://openalex.org/W4301880089","https://openalex.org/W6636283022","https://openalex.org/W6767150162"],"related_works":["https://openalex.org/W3163963286","https://openalex.org/W3038968573","https://openalex.org/W2989079566","https://openalex.org/W2962061624","https://openalex.org/W2973082090","https://openalex.org/W2969184416","https://openalex.org/W3214547528","https://openalex.org/W2844602024","https://openalex.org/W3179018710","https://openalex.org/W3090459527","https://openalex.org/W3019963807","https://openalex.org/W3007679991","https://openalex.org/W3015720943","https://openalex.org/W2997532515","https://openalex.org/W2099140842","https://openalex.org/W2536441385","https://openalex.org/W2997990748","https://openalex.org/W3176065393","https://openalex.org/W3123862714","https://openalex.org/W2959933522"],"abstract_inverted_index":{"In":[0],"recent":[1,124,131],"years,":[2],"machine":[3,23,37,72],"learning":[4,10,24,73,136],"algorithms,":[5,11],"and":[6,31,75,94,99,109,126,179],"more":[7],"specifically":[8],"deep":[9],"have":[12],"been":[13],"widely":[14],"used":[15],"in":[16,40,112,123,133,142,168,175],"many":[17],"fields,":[18],"including":[19],"cyber":[20,47,114,144,170],"security.":[21],"However,":[22],"systems":[25],"are":[26,86],"vulnerable":[27],"to":[28,158,183],"adversarial":[29,42,65,83,107,135,166],"attacks,":[30],"this":[32,153],"limits":[33],"the":[34,46,61,77,82,95,104,113,128,143,148,156,160,169,181],"application":[35],"of":[36,92,106,130,150,163],"learning,":[38],"especially":[39],"non-stationary,":[41],"environments,":[43],"such":[44],"as":[45],"security":[48,68,115,145,171],"domain,":[49,172],"where":[50],"actual":[51],"adversaries":[52],"(e.g.,":[53],"malware":[54],"developers)":[55],"exist.":[56],"This":[57],"article":[58],"comprehensively":[59],"summarizes":[60],"latest":[62],"research":[63,125,140,186],"on":[64,71,89,138],"attacks":[66,167],"against":[67],"solutions":[69],"based":[70,88],"techniques":[74],"illuminates":[76],"risks":[78],"they":[79],"pose.":[80],"First,":[81],"attack":[84,108],"methods":[85,111],"characterized":[87],"their":[90],"stage":[91],"occurrence,":[93],"attacker\u2019":[96],"s":[97],"goals":[98],"capabilities.":[100],"Then,":[101],"we":[102,118],"categorize":[103],"applications":[105],"defense":[110],"domain.":[116,146],"Finally,":[117],"highlight":[119,184],"some":[120],"characteristics":[121],"identified":[122],"discuss":[127,159],"impact":[129],"advancements":[132],"other":[134],"domains":[137],"future":[139,185],"directions":[141],"To":[147],"best":[149],"our":[151],"knowledge,":[152],"work":[154],"is":[155],"first":[157],"unique":[161],"challenges":[162],"implementing":[164],"end-to-end":[165],"map":[173],"them":[174],"a":[176],"unified":[177],"taxonomy,":[178],"use":[180],"taxonomy":[182],"directions.":[187]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":1}],"updated_date":"2026-03-11T14:59:36.786465","created_date":"2022-07-26T00:00:00"}