{"id":"https://openalex.org/W4306317473","doi":"https://doi.org/10.1145/3511808.3557687","title":"Robustness of Sketched Linear Classifiers to Adversarial Attacks","display_name":"Robustness of Sketched Linear Classifiers to Adversarial Attacks","publication_year":2022,"publication_date":"2022-10-16","ids":{"openalex":"https://openalex.org/W4306317473","doi":"https://doi.org/10.1145/3511808.3557687"},"language":"en","primary_location":{"id":"doi:10.1145/3511808.3557687","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3511808.3557687","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3511808.3557687","source":{"id":"https://openalex.org/S4363608762","display_name":"Proceedings of the 31st ACM International Conference on Information & Knowledge Management","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM International Conference on Information & Knowledge Management","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3511808.3557687","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5075832299","display_name":"Ananth Mahadevan","orcid":"https://orcid.org/0000-0001-5401-5716"},"institutions":[{"id":"https://openalex.org/I133731052","display_name":"University of Helsinki","ror":"https://ror.org/040af2s02","country_code":"FI","type":"education","lineage":["https://openalex.org/I133731052"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Ananth Mahadevan","raw_affiliation_strings":["University of Helsinki, Helsinki, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Helsinki, Helsinki, Finland","institution_ids":["https://openalex.org/I133731052"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038632957","display_name":"Arpit Merchant","orcid":"https://orcid.org/0000-0001-8143-1539"},"institutions":[{"id":"https://openalex.org/I133731052","display_name":"University of Helsinki","ror":"https://ror.org/040af2s02","country_code":"FI","type":"education","lineage":["https://openalex.org/I133731052"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Arpit Merchant","raw_affiliation_strings":["University of Helsinki, Helsinki, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Helsinki, Helsinki, Finland","institution_ids":["https://openalex.org/I133731052"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065488679","display_name":"Yanhao Wang","orcid":"https://orcid.org/0000-0002-7661-3917"},"institutions":[{"id":"https://openalex.org/I66867065","display_name":"East China Normal University","ror":"https://ror.org/02n96ep67","country_code":"CN","type":"education","lineage":["https://openalex.org/I66867065"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yanhao Wang","raw_affiliation_strings":["East China Normal University, Shanghai, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"East China Normal University, Shanghai, China","institution_ids":["https://openalex.org/I66867065"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5077299582","display_name":"Michael Mathioudakis","orcid":"https://orcid.org/0000-0003-0074-3966"},"institutions":[{"id":"https://openalex.org/I133731052","display_name":"University of Helsinki","ror":"https://ror.org/040af2s02","country_code":"FI","type":"education","lineage":["https://openalex.org/I133731052"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Michael Mathioudakis","raw_affiliation_strings":["University of Helsinki, Helsinki, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Helsinki, Helsinki, Finland","institution_ids":["https://openalex.org/I133731052"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.11683011,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4319","last_page":"4323"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12535","display_name":"Machine Learning and Data Classification","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7751239538192749},{"id":"https://openalex.org/keywords/mnist-database","display_name":"MNIST database","score":0.7734532356262207},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6992106437683105},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5563819408416748},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47639790177345276},{"id":"https://openalex.org/keywords/memory-footprint","display_name":"Memory footprint","score":0.4365176558494568},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.41733062267303467},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3361850380897522},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.1899913251399994}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7751239538192749},{"id":"https://openalex.org/C190502265","wikidata":"https://www.wikidata.org/wiki/Q17069496","display_name":"MNIST database","level":3,"score":0.7734532356262207},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6992106437683105},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5563819408416748},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47639790177345276},{"id":"https://openalex.org/C74912251","wikidata":"https://www.wikidata.org/wiki/Q6815727","display_name":"Memory footprint","level":2,"score":0.4365176558494568},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.41733062267303467},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3361850380897522},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.1899913251399994},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3511808.3557687","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3511808.3557687","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3511808.3557687","source":{"id":"https://openalex.org/S4363608762","display_name":"Proceedings of the 31st ACM International Conference on Information & Knowledge Management","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM International Conference on Information & Knowledge Management","raw_type":"proceedings-article"},{"id":"pmh:oai:helda.helsinki.fi:10138/350007","is_oa":true,"landing_page_url":"http://hdl.handle.net/10138/350007","pdf_url":null,"source":{"id":"https://openalex.org/S4210213322","display_name":"Ty\u00f6v\u00e4entutkimus Vuosikirja","issn_l":"0784-1272","issn":["0784-1272","1459-7780"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference contribution"}],"best_oa_location":{"id":"doi:10.1145/3511808.3557687","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3511808.3557687","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3511808.3557687","source":{"id":"https://openalex.org/S4363608762","display_name":"Proceedings of the 31st ACM International Conference on Information & Knowledge Management","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 31st ACM International Conference on Information & Knowledge Management","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7187631110","display_name":null,"funder_award_id":"MLDB (322046), HPC-HD (347747)","funder_id":"https://openalex.org/F4320321108","funder_display_name":"Academy of Finland"}],"funders":[{"id":"https://openalex.org/F4320310086","display_name":"Helsingin Yliopisto","ror":"https://ror.org/040af2s02"},{"id":"https://openalex.org/F4320321108","display_name":"Academy of Finland","ror":"https://ror.org/05k73zm37"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4306317473.pdf","grobid_xml":"https://content.openalex.org/works/W4306317473.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W1493892051","https://openalex.org/W2007339694","https://openalex.org/W2007448134","https://openalex.org/W2080234606","https://openalex.org/W2130873644","https://openalex.org/W2150593711","https://openalex.org/W2293829681","https://openalex.org/W2612690371","https://openalex.org/W2747329762","https://openalex.org/W2795767639","https://openalex.org/W2981446616","https://openalex.org/W2990138404","https://openalex.org/W3031693517","https://openalex.org/W3210990451"],"related_works":["https://openalex.org/W2950475743","https://openalex.org/W4386603768","https://openalex.org/W2886711096","https://openalex.org/W4380078352","https://openalex.org/W3046591097","https://openalex.org/W2590796488","https://openalex.org/W4389249638","https://openalex.org/W2734358244","https://openalex.org/W2750384547","https://openalex.org/W2809732489"],"abstract_inverted_index":{"Linear":[0],"classifiers":[1,68,109],"are":[2,19,110],"well-known":[3],"to":[4,7,78,90,124],"be":[5],"vulnerable":[6],"adversarial":[8,125],"attacks:":[9],"they":[10],"may":[11],"predict":[12],"incorrect":[13],"labels":[14],"for":[15,53,66],"input":[16,115],"data":[17],"that":[18],"adversarially":[20],"modified":[21],"with":[22,76],"small":[23],"perturbations.":[24],"However,":[25],"this":[26,57],"phenomenon":[27],"has":[28],"not":[29],"been":[30],"properly":[31],"understood":[32],"in":[33,42,69,104,128],"the":[34,51,87,105],"context":[35],"of":[36,50,97],"sketch-based":[37],"linear":[38],"classifiers,":[39],"typically":[40],"used":[41],"memory-constrained":[43],"paradigms,":[44],"which":[45],"rely":[46],"on":[47,86,113],"random":[48],"projections":[49],"features":[52],"model":[54],"compression.":[55],"In":[56],"paper,":[58],"we":[59],"propose":[60],"novel":[61],"Fast-Gradient-Sign":[62],"Method":[63],"(FGSM)":[64],"attacks":[65],"sketched":[67],"full,":[70],"partial,":[71],"and":[72,132],"black-box":[73,133],"information":[74,134],"settings":[75],"regards":[77],"their":[79,92,117],"internal":[80],"parameters.":[81],"We":[82],"perform":[83],"extensive":[84],"experiments":[85],"MNIST":[88],"dataset":[89],"characterize":[91],"robustness":[93,138],"as":[94,122],"a":[95],"function":[96],"perturbation":[98],"budget.":[99],"Our":[100],"results":[101],"suggest":[102],"that,":[103],"full-information":[106],"setting,":[107],"these":[108],"less":[111],"accurate":[112],"unaltered":[114],"than":[116],"uncompressed":[118],"counterparts":[119],"but":[120],"just":[121],"susceptible":[123],"attacks.":[126],"But":[127],"more":[129],"realistic":[130],"partial":[131],"settings,":[135],"sketching":[136],"improves":[137],"while":[139],"having":[140],"lower":[141],"memory":[142],"footprint.":[143]},"counts_by_year":[],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}