{"id":"https://openalex.org/W4393180323","doi":"https://doi.org/10.1145/3639292","title":"PACE: Poisoning Attacks on Learned Cardinality Estimation","display_name":"PACE: Poisoning Attacks on Learned Cardinality Estimation","publication_year":2024,"publication_date":"2024-03-12","ids":{"openalex":"https://openalex.org/W4393180323","doi":"https://doi.org/10.1145/3639292"},"language":"en","primary_location":{"id":"doi:10.1145/3639292","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639292","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639292","source":{"id":"https://openalex.org/S4387289859","display_name":"Proceedings of the ACM on Management of Data","issn_l":"2836-6573","issn":["2836-6573"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Management of Data","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3639292","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062437180","display_name":"Jintao Zhang","orcid":"https://orcid.org/0009-0001-6114-9429"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Jintao Zhang","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063675054","display_name":"Chao Zhang","orcid":"https://orcid.org/0000-0002-8924-7629"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chao Zhang","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100451576","display_name":"Guoliang Li","orcid":"https://orcid.org/0000-0002-1398-0621"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guoliang Li","raw_affiliation_strings":["Tsinghua University, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101797040","display_name":"Chengliang Chai","orcid":"https://orcid.org/0000-0001-8080-5594"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chengliang Chai","raw_affiliation_strings":["Beijing Institute of Technology, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5062437180"],"corresponding_institution_ids":["https://openalex.org/I99065089"],"apc_list":null,"apc_paid":null,"fwci":2.6844,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.90805456,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"2","issue":"1","first_page":"1","last_page":"27"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.9966999888420105,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.756890058517456},{"id":"https://openalex.org/keywords/cardinality","display_name":"Cardinality (data modeling)","score":0.6084609031677246},{"id":"https://openalex.org/keywords/workload","display_name":"Workload","score":0.5591861605644226},{"id":"https://openalex.org/keywords/pace","display_name":"Pace","score":0.48351624608039856},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.43738460540771484},{"id":"https://openalex.org/keywords/bivariate-analysis","display_name":"Bivariate analysis","score":0.4344463050365448},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.396650493144989},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.31456440687179565},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.31323879957199097},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.2987670302391052}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.756890058517456},{"id":"https://openalex.org/C87117476","wikidata":"https://www.wikidata.org/wiki/Q362383","display_name":"Cardinality (data modeling)","level":2,"score":0.6084609031677246},{"id":"https://openalex.org/C2778476105","wikidata":"https://www.wikidata.org/wiki/Q628539","display_name":"Workload","level":2,"score":0.5591861605644226},{"id":"https://openalex.org/C2777526511","wikidata":"https://www.wikidata.org/wiki/Q691543","display_name":"Pace","level":2,"score":0.48351624608039856},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.43738460540771484},{"id":"https://openalex.org/C64341305","wikidata":"https://www.wikidata.org/wiki/Q4919225","display_name":"Bivariate analysis","level":2,"score":0.4344463050365448},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.396650493144989},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31456440687179565},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31323879957199097},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2987670302391052},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3639292","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639292","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639292","source":{"id":"https://openalex.org/S4387289859","display_name":"Proceedings of the ACM on Management of Data","issn_l":"2836-6573","issn":["2836-6573"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Management of Data","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3639292","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3639292","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3639292","source":{"id":"https://openalex.org/S4387289859","display_name":"Proceedings of the ACM on Management of Data","issn_l":"2836-6573","issn":["2836-6573"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the ACM on Management of Data","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.6100000143051147}],"awards":[{"id":"https://openalex.org/G1121271761","display_name":null,"funder_award_id":"Program","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2087396116","display_name":null,"funder_award_id":"China","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3317480652","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G391238517","display_name":null,"funder_award_id":", and","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5725260554","display_name":null,"funder_award_id":"62232009","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5939423041","display_name":null,"funder_award_id":"Technology","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7169141996","display_name":null,"funder_award_id":"62102215","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G831406350","display_name":null,"funder_award_id":"61925205","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G848032724","display_name":null,"funder_award_id":"Science","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G962252204","display_name":null,"funder_award_id":"61925205, 62232009, 62102215","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G990739032","display_name":null,"funder_award_id":"2023YFB4503600","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320316125","display_name":"China Railway","ror":"https://ror.org/044wv3489"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320329777","display_name":"Beijing National Research Center For Information Science And Technology","ror":null},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4393180323.pdf","grobid_xml":"https://content.openalex.org/works/W4393180323.grobid-xml"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W1622676895","https://openalex.org/W2045812729","https://openalex.org/W2125908420","https://openalex.org/W2132823934","https://openalex.org/W2162552722","https://openalex.org/W2396309311","https://openalex.org/W2612448920","https://openalex.org/W2885195348","https://openalex.org/W2911540814","https://openalex.org/W2911731033","https://openalex.org/W2955798121","https://openalex.org/W2991530444","https://openalex.org/W2993529020","https://openalex.org/W3013555795","https://openalex.org/W3020531607","https://openalex.org/W3034451759","https://openalex.org/W3045108149","https://openalex.org/W3046734944","https://openalex.org/W3093749643","https://openalex.org/W3096831136","https://openalex.org/W3097225903","https://openalex.org/W3111141572","https://openalex.org/W3124277639","https://openalex.org/W3153872861","https://openalex.org/W3173850788","https://openalex.org/W3174465898","https://openalex.org/W3196849431","https://openalex.org/W4205381461","https://openalex.org/W4206064074","https://openalex.org/W4206830372","https://openalex.org/W4282542689","https://openalex.org/W4282546806","https://openalex.org/W4282570649","https://openalex.org/W4289533887","https://openalex.org/W4312274205","https://openalex.org/W4317641620","https://openalex.org/W4379382789","https://openalex.org/W4380433150","https://openalex.org/W4380433180","https://openalex.org/W4381621971","https://openalex.org/W7016021835"],"related_works":["https://openalex.org/W2386723501","https://openalex.org/W2387879414","https://openalex.org/W2390304029","https://openalex.org/W2354923724","https://openalex.org/W2146830340","https://openalex.org/W2377101853","https://openalex.org/W2362180844","https://openalex.org/W2000785801","https://openalex.org/W986318368","https://openalex.org/W2378405797"],"abstract_inverted_index":{"Cardinality":[0],"estimation":[1],"(CE)":[2],"plays":[3],"a":[4,41,47,56,97,107,149,163,191,199,215,221,230,244,270,305],"crucial":[5],"role":[6],"in":[7,92,106,124,308],"database":[8],"optimizer.":[9],"We":[10,197],"have":[11],"witnessed":[12],"the":[13,52,74,88,115,119,125,133,136,145,153,157,210,226,235,240,260,280,294,297,309,313],"emergence":[14],"of":[15,81,100,118,217,296,312],"numerous":[16],"learned":[17,32,43,57,93,104,298],"CE":[18,44,94,105,120,138,299],"models":[19,33,300],"recently":[20],"which":[21,65,224],"can":[22],"outperform":[23],"traditional":[24],"methods":[25],"such":[26],"as":[27,162,243],"histograms":[28],"and":[29,71,95,167,219,248,252],"samplings.":[30],"However,":[31],"also":[34],"bring":[35],"many":[36],"security":[37,90],"risks.":[38],"For":[39],"example,":[40],"query-driven":[42],"model":[45,58,121,239],"learns":[46],"query-to-cardinality":[48],"mapping":[49],"based":[50],"on":[51,103],"historical":[53,75,195,287],"workload.":[54,196,288],"Such":[55],"could":[59],"be":[60,142,160],"attacked":[61,137],"by":[62,68,173,301],"poisoning":[63,101,146,187,200,241,271,281],"queries,":[64,147],"are":[66,111,122],"crafted":[67],"malicious":[69],"attackers":[70],"woven":[72],"into":[73,229],"workload,":[76],"leading":[77,303],"to":[78,131,171,178,185,194,204,255,268,286,304],"performance":[79,311],"degradation":[80],"CE.":[82],"In":[83],"this":[84],"paper,":[85],"we":[86,213,238,263],"explore":[87],"potential":[89],"risks":[91],"study":[96],"new":[98],"problem":[99,158,166,242],"attacks":[102],"black-box":[108,126,227],"setting.":[109],"There":[110],"three":[112],"challenges.":[113,207],"First,":[114],"interior":[116],"details":[117],"hidden":[123],"setting,":[127],"making":[128],"it":[129,183],"difficult":[130],"attack":[132,201,228],"model.":[134],"Second,":[135],"model's":[139],"parameters":[140],"will":[141],"updated":[143],"with":[144,152],"i.e.,":[148],"variable":[150],"varying":[151],"optimization":[154,165,246],"variable,":[155],"so":[156],"cannot":[159],"modeled":[161],"univariate":[164],"thus":[168],"is":[169],"hard":[170],"solve":[172,256],"an":[174,180,250,265,275],"efficient":[175,253],"algorithm.":[176],"Third,":[177],"make":[179],"imperceptible":[181],"attack,":[182],"requires":[184],"generate":[186],"queries":[188,282],"that":[189,279,291],"follow":[190,283],"similar":[192,284],"distribution":[193,285],"propose":[198,214,264],"system,":[202],"PACE,":[203],"address":[205,234],"these":[206],"To":[208,233,258],"tackle":[209],"first":[211],"challenge,":[212,237,262],"method":[216],"speculating":[218],"training":[220],"surrogate":[222],"model,":[223],"transforms":[225],"near-white-box":[231],"attack.":[232],"second":[236],"bivariate":[245],"problem,":[247],"design":[249],"effective":[251],"algorithm":[254],"it.":[257],"overcome":[259],"third":[261],"adversarial":[266],"approach":[267],"train":[269],"query":[272],"generator":[273],"alongside":[274],"anomaly":[276],"detector,":[277],"ensuring":[278],"Experiments":[289],"show":[290],"PACE":[292],"reduces":[293],"accuracy":[295],"178\u00d7,":[302],"10\u00d7":[306],"decrease":[307],"end-to-end":[310],"target":[314],"database.":[315]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":1}],"updated_date":"2026-04-18T07:56:08.524223","created_date":"2025-10-10T00:00:00"}