{"id":"https://openalex.org/W4385665118","doi":"https://doi.org/10.1145/3613244","title":"Fraud Detection under Siege: Practical Poisoning Attacks and Defense Strategies","display_name":"Fraud Detection under Siege: Practical Poisoning Attacks and Defense Strategies","publication_year":2023,"publication_date":"2023-08-08","ids":{"openalex":"https://openalex.org/W4385665118","doi":"https://doi.org/10.1145/3613244"},"language":"en","primary_location":{"id":"doi:10.1145/3613244","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3613244","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3613244","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3613244","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092218076","display_name":"Tommaso Paladini","orcid":"https://orcid.org/0000-0003-2570-1957"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Tommaso Paladini","raw_affiliation_strings":["Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy"],"raw_orcid":"https://orcid.org/0000-0003-2570-1957","affiliations":[{"raw_affiliation_string":"Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018574532","display_name":"Francesco Monti","orcid":"https://orcid.org/0009-0002-6466-0115"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesco Monti","raw_affiliation_strings":["Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy"],"raw_orcid":"https://orcid.org/0009-0002-6466-0115","affiliations":[{"raw_affiliation_string":"Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054840981","display_name":"Mario Polino","orcid":"https://orcid.org/0000-0002-0925-2306"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mario Polino","raw_affiliation_strings":["Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy"],"raw_orcid":"https://orcid.org/0000-0002-0925-2306","affiliations":[{"raw_affiliation_string":"Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048211949","display_name":"Michele Carminati","orcid":"https://orcid.org/0000-0001-8284-6074"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Michele Carminati","raw_affiliation_strings":["Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy"],"raw_orcid":"https://orcid.org/0000-0001-8284-6074","affiliations":[{"raw_affiliation_string":"Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy","institution_ids":["https://openalex.org/I93860229"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046604572","display_name":"Stefano Zanero","orcid":"https://orcid.org/0000-0003-4710-5283"},"institutions":[{"id":"https://openalex.org/I93860229","display_name":"Politecnico di Milano","ror":"https://ror.org/01nffqt88","country_code":"IT","type":"education","lineage":["https://openalex.org/I93860229"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Stefano Zanero","raw_affiliation_strings":["Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy"],"raw_orcid":"https://orcid.org/0000-0003-4710-5283","affiliations":[{"raw_affiliation_string":"Dipartimento di Elettronica, Informazione e Bioingegneria (DEIB), Politecnico di Milano, Italy","institution_ids":["https://openalex.org/I93860229"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I93860229"],"apc_list":null,"apc_paid":null,"fwci":1.5863,"has_fulltext":true,"cited_by_count":10,"citation_normalized_percentile":{"value":0.85849396,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"26","issue":"4","first_page":"1","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.9912999868392944,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9822999835014343,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8026494979858398},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6943696737289429},{"id":"https://openalex.org/keywords/oracle","display_name":"Oracle","score":0.6920087933540344},{"id":"https://openalex.org/keywords/adversarial-machine-learning","display_name":"Adversarial machine learning","score":0.6782280802726746},{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.6419321298599243},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.5760152339935303},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.562247633934021},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5208983421325684},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.469107449054718},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.45787614583969116},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4235111176967621},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09620407223701477}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8026494979858398},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6943696737289429},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.6920087933540344},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.6782280802726746},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.6419321298599243},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.5760152339935303},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.562247633934021},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5208983421325684},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.469107449054718},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.45787614583969116},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4235111176967621},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09620407223701477},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3613244","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3613244","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3613244","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},{"id":"pmh:oai:re.public.polimi.it:11311/1247877","is_oa":true,"landing_page_url":"https://dl.acm.org/doi/10.1145/3613244","pdf_url":"https://re.public.polimi.it/bitstream/11311/1247877/1/3613244.pdf","source":{"id":"https://openalex.org/S4306400312","display_name":"Virtual Community of Pathological Anatomy (University of Castilla La Mancha)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I79189158","host_organization_name":"University of Castilla-La Mancha","host_organization_lineage":["https://openalex.org/I79189158"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1145/3613244","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3613244","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3613244","source":{"id":"https://openalex.org/S4210174050","display_name":"ACM Transactions on Privacy and Security","issn_l":"2471-2566","issn":["2471-2566","2471-2574"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Privacy and Security","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.8100000023841858,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4385665118.pdf","grobid_xml":"https://content.openalex.org/works/W4385665118.grobid-xml"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W9657784","https://openalex.org/W1966493433","https://openalex.org/W1999587872","https://openalex.org/W2030553727","https://openalex.org/W2045049630","https://openalex.org/W2085548088","https://openalex.org/W2095577883","https://openalex.org/W2105809068","https://openalex.org/W2131809848","https://openalex.org/W2131906261","https://openalex.org/W2144906988","https://openalex.org/W2151298633","https://openalex.org/W2153245338","https://openalex.org/W2161742217","https://openalex.org/W2230049528","https://openalex.org/W2301299651","https://openalex.org/W2466206609","https://openalex.org/W2533835508","https://openalex.org/W2604652676","https://openalex.org/W2618530766","https://openalex.org/W2621044306","https://openalex.org/W2752929869","https://openalex.org/W2782061114","https://openalex.org/W2791319131","https://openalex.org/W2801308643","https://openalex.org/W2803577513","https://openalex.org/W2805441749","https://openalex.org/W2962763344","https://openalex.org/W2963178695","https://openalex.org/W2963384482","https://openalex.org/W2963618920","https://openalex.org/W2990986232","https://openalex.org/W2991368766","https://openalex.org/W3006306959","https://openalex.org/W3015481738","https://openalex.org/W3032089910","https://openalex.org/W3103836116","https://openalex.org/W3127735052","https://openalex.org/W3159916456","https://openalex.org/W3191453585","https://openalex.org/W4226380481","https://openalex.org/W4247200422","https://openalex.org/W4297573953","https://openalex.org/W6733645847"],"related_works":["https://openalex.org/W3048732067","https://openalex.org/W4383468834","https://openalex.org/W4384648009","https://openalex.org/W4303645823","https://openalex.org/W4285263558","https://openalex.org/W2900159906","https://openalex.org/W4287828318","https://openalex.org/W2406556600","https://openalex.org/W4283221438","https://openalex.org/W2899811703"],"abstract_inverted_index":{"Machine":[0],"learning":[1,9],"(ML)":[2],"models":[3],"are":[4,99],"vulnerable":[5],"to":[6,40,129,170,245],"adversarial":[7,126,235],"machine":[8,80],"(AML)":[10],"attacks.":[11],"Unlike":[12],"other":[13],"contexts,":[14],"the":[15,35,41,65,86,103,125,134,138,156,160,185,217,223,230,239],"fraud":[16,42,66,88,190],"detection":[17,43,67,89,105,139,191],"domain":[18],"is":[19],"characterized":[20],"by":[21,45,145,193,237],"inherent":[22],"challenges":[23],"that":[24,63,123,211,229],"make":[25],"conventional":[26],"approaches":[27],"hardly":[28],"applicable.":[29],"In":[30],"this":[31],"article,":[32],"we":[33,54,118,141,152,166,183,227],"extend":[34],"application":[36],"of":[37,137,187,201,222,242],"AML":[38,131],"techniques":[39],"task":[44],"studying":[46],"poisoning":[47,61,109,196],"attacks":[48,62,236],"and":[49,75,112,204],"their":[50],"possible":[51],"countermeasures.":[52],"First,":[53],"present":[55],"a":[56,79,120],"novel":[57,121],"approach":[58,122],"for":[59],"performing":[60],"overcomes":[64],"domain-specific":[68],"constraints.":[69],"It":[70],"generates":[71],"fraudulent":[72,96],"candidate":[73,97],"transactions":[74,98,173],"tests":[76],"them":[77,154],"against":[78],"learning-based":[81],"Oracle":[82],",":[83],"which":[84],"simulates":[85],"target":[87,104,224],"system":[90],"aiming":[91],"at":[92],"evading":[93],"it.":[94],"Misclassified":[95],"then":[100],"integrated":[101],"into":[102],"system\u2019s":[106],"training":[107,127,135,157],"set,":[108],"its":[110,114],"model":[111,169],"shifting":[113],"decision":[115],"boundary.":[116],"Second,":[117],"propose":[119],"extends":[124],"technique":[128],"mitigate":[130,234],"attacks:":[132],"During":[133],"phase":[136],"system,":[140],"generate":[142],"artificial":[143],"frauds":[144],"modifying":[146],"random":[147],"original":[148],"legitimate":[149],"transactions;":[150],"then,":[151],"include":[153],"in":[155],"set":[158],"with":[159,198],"correct":[161],"label.":[162],"By":[163],"doing":[164],"so,":[165],"instruct":[167],"our":[168,195,212],"recognize":[171],"evasive":[172],"before":[174],"an":[175],"attack":[176,197,213],"occurs.":[177],"Using":[178],"two":[179],"real":[180],"bank":[181],"datasets,":[182],"evaluate":[184],"security":[186],"several":[188],"state-of-the-art":[189],"systems":[192],"deploying":[194],"different":[199],"degrees":[200],"attacker\u2019s":[202],"knowledge":[203,221],"attacking":[205],"strategies.":[206],"The":[207],"experimental":[208],"results":[209],"show":[210],"works":[214],"even":[215],"when":[216],"attacker":[218],"has":[219],"minimal":[220],"system.":[225],"Then,":[226],"demonstrate":[228],"proposed":[231],"countermeasure":[232],"can":[233],"reducing":[238],"stolen":[240],"amount":[241],"money":[243],"up":[244],"100%.":[246]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}