{"id":"https://openalex.org/W2890689004","doi":"https://doi.org/10.1609/aaai.v33i01.33014536","title":"The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure","display_name":"The Curse of Concentration in Robust Learning: Evasion and Poisoning Attacks from Concentration of Measure","publication_year":2019,"publication_date":"2019-07-17","ids":{"openalex":"https://openalex.org/W2890689004","doi":"https://doi.org/10.1609/aaai.v33i01.33014536","mag":"2890689004"},"language":"en","primary_location":{"id":"doi:10.1609/aaai.v33i01.33014536","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v33i01.33014536","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1609/aaai.v33i01.33014536","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049153799","display_name":"Saeed Mahloujifar","orcid":"https://orcid.org/0000-0001-6586-8378"},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saeed Mahloujifar","raw_affiliation_strings":["University of Virginia","UNIVERSITY OF VIRGINIA;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Virginia","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"UNIVERSITY OF VIRGINIA;","institution_ids":["https://openalex.org/I51556381"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074847249","display_name":"Dimitrios I. Diochnos","orcid":"https://orcid.org/0000-0002-2934-606X"},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dimitrios I. Diochnos","raw_affiliation_strings":["University of Virginia","UNIVERSITY OF VIRGINIA;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Virginia","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"UNIVERSITY OF VIRGINIA;","institution_ids":["https://openalex.org/I51556381"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5070147229","display_name":"Mohammad Mahmoody","orcid":"https://orcid.org/0000-0002-6839-4697"},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammad Mahmoody","raw_affiliation_strings":["University of Virginia","UNIVERSITY OF VIRGINIA;"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Virginia","institution_ids":["https://openalex.org/I51556381"]},{"raw_affiliation_string":"UNIVERSITY OF VIRGINIA;","institution_ids":["https://openalex.org/I51556381"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I51556381"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":13,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"33","issue":"01","first_page":"4536","last_page":"4543"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12072","display_name":"Machine Learning and Algorithms","score":0.9325000047683716,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9269000291824341,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/concentration-of-measure","display_name":"Concentration of measure","score":0.614205539226532},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6104791164398193},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5391159057617188},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.5219661593437195},{"id":"https://openalex.org/keywords/measure","display_name":"Measure (data warehouse)","score":0.5193449258804321},{"id":"https://openalex.org/keywords/curse-of-dimensionality","display_name":"Curse of dimensionality","score":0.4832533001899719},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.4724426865577698},{"id":"https://openalex.org/keywords/risk-measure","display_name":"Risk measure","score":0.4637131690979004},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.44356557726860046},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.41916725039482117},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4085811376571655},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.38574427366256714},{"id":"https://openalex.org/keywords/discrete-mathematics","display_name":"Discrete mathematics","score":0.32527458667755127},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.2057533860206604},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.15720334649085999}],"concepts":[{"id":"https://openalex.org/C84498859","wikidata":"https://www.wikidata.org/wiki/Q5158327","display_name":"Concentration of measure","level":2,"score":0.614205539226532},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6104791164398193},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5391159057617188},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.5219661593437195},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.5193449258804321},{"id":"https://openalex.org/C111030470","wikidata":"https://www.wikidata.org/wiki/Q1430460","display_name":"Curse of dimensionality","level":2,"score":0.4832533001899719},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.4724426865577698},{"id":"https://openalex.org/C2781472820","wikidata":"https://www.wikidata.org/wiki/Q2154759","display_name":"Risk measure","level":3,"score":0.4637131690979004},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.44356557726860046},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.41916725039482117},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4085811376571655},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38574427366256714},{"id":"https://openalex.org/C118615104","wikidata":"https://www.wikidata.org/wiki/Q121416","display_name":"Discrete mathematics","level":1,"score":0.32527458667755127},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.2057533860206604},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.15720334649085999},{"id":"https://openalex.org/C2780821815","wikidata":"https://www.wikidata.org/wiki/Q5340806","display_name":"Portfolio","level":2,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.0},{"id":"https://openalex.org/C106159729","wikidata":"https://www.wikidata.org/wiki/Q2294553","display_name":"Financial economics","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1609/aaai.v33i01.33014536","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v33i01.33014536","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:1809.03063","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1809.03063","pdf_url":"https://arxiv.org/pdf/1809.03063","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"mag:2890689004","is_oa":true,"landing_page_url":"http://export.arxiv.org/abs/1809.03063","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"arXiv (Cornell University)","raw_type":null},{"id":"doi:10.48550/arxiv.1809.03063","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.1809.03063","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1609/aaai.v33i01.33014536","is_oa":true,"landing_page_url":"https://doi.org/10.1609/aaai.v33i01.33014536","pdf_url":null,"source":{"id":"https://openalex.org/S4210191458","display_name":"Proceedings of the AAAI Conference on Artificial Intelligence","issn_l":"2159-5399","issn":["2159-5399","2374-3468"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320058","host_organization_name":"Association for the Advancement of Artificial Intelligence","host_organization_lineage":["https://openalex.org/P4310320058"],"host_organization_lineage_names":["Association for the Advancement of Artificial Intelligence"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the AAAI Conference on Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.4099999964237213,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G3732967472","display_name":"CAREER: Separations in Cryptography","funder_award_id":"1350939","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G3752130938","display_name":null,"funder_award_id":"CCF-1350939","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6671297155","display_name":null,"funder_award_id":"CAREER","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W1148694266","https://openalex.org/W1539609250","https://openalex.org/W1573820523","https://openalex.org/W1905905554","https://openalex.org/W1968998685","https://openalex.org/W1973286131","https://openalex.org/W1990770240","https://openalex.org/W1993111701","https://openalex.org/W2007562169","https://openalex.org/W2007657822","https://openalex.org/W2010161771","https://openalex.org/W2081052144","https://openalex.org/W2083908346","https://openalex.org/W2112507308","https://openalex.org/W2139338362","https://openalex.org/W2144906988","https://openalex.org/W2336954923","https://openalex.org/W2516574342","https://openalex.org/W2554864439","https://openalex.org/W2559840118","https://openalex.org/W2567351292","https://openalex.org/W2592318711","https://openalex.org/W2597603852","https://openalex.org/W2607219512","https://openalex.org/W2640329709","https://openalex.org/W2765913967","https://openalex.org/W2769621893","https://openalex.org/W2789019405","https://openalex.org/W2799032899","https://openalex.org/W2803732607","https://openalex.org/W2806473647","https://openalex.org/W2809895662","https://openalex.org/W2888975495","https://openalex.org/W2894553193","https://openalex.org/W2898446864","https://openalex.org/W2949506549","https://openalex.org/W2962797544","https://openalex.org/W2963207607","https://openalex.org/W2964153729","https://openalex.org/W2964288084","https://openalex.org/W3103940881","https://openalex.org/W6627441560","https://openalex.org/W6634225129","https://openalex.org/W6637162671","https://openalex.org/W6642469955","https://openalex.org/W6686316499","https://openalex.org/W6719547251","https://openalex.org/W6729933166","https://openalex.org/W6745621080","https://openalex.org/W6750689634","https://openalex.org/W6752034395","https://openalex.org/W7034108470"],"related_works":["https://openalex.org/W2964153729","https://openalex.org/W2898446864","https://openalex.org/W3141848572","https://openalex.org/W2898193427","https://openalex.org/W3036912439","https://openalex.org/W2803450634","https://openalex.org/W2900946294","https://openalex.org/W3035345420","https://openalex.org/W2991301933","https://openalex.org/W2889210204","https://openalex.org/W2970273067","https://openalex.org/W3174683813","https://openalex.org/W2952228821","https://openalex.org/W3157186308","https://openalex.org/W2939794355","https://openalex.org/W2995386306","https://openalex.org/W2970449623","https://openalex.org/W3133942988","https://openalex.org/W2983774054","https://openalex.org/W3184000894"],"abstract_inverted_index":{"Many":[0],"modern":[1],"machine":[2],"learning":[3,228],"classifiers":[4,25,47],"are":[5,97,165],"shown":[6],"to":[7,10,52,88,115,124,261],"be":[8],"vulnerable":[9,87],"adversarial":[11,42,89,158,183],"perturbations":[12],"of":[13,20,46,56,58,72,92,149,157,185,192,200,202,217,244,268],"the":[14,27,41,53,68,73,98,117,131,150,155,171,198,207,211,215,219,242,269],"instances.":[15],"Despite":[16],"a":[17,36,50,251],"massive":[18],"amount":[19],"work":[21],"focusing":[22],"on":[23,250],"making":[24],"robust,":[26],"task":[28],"seems":[29],"quite":[30],"challenging.":[31],"In":[32,107,221],"this":[33,108],"work,":[34],"through":[35],"theoretical":[37],"study,":[38],"we":[39,142,176,188,223],"investigate":[40],"risk":[43],"and":[44,48],"robustness":[45],"draw":[49],"connection":[51],"well-known":[54],"phenomenon":[55],"\u201cconcentration":[57],"measure\u201d":[59],"in":[60,205],"metric":[61,69,94],"measure":[62,193],"spaces.":[63],"We":[64],"show":[65,189,224],"that":[66,102,181,190,225,230,255],"if":[67],"probability":[70,95,243,260],"space":[71],"test":[74,118,253],"instance":[75,119,140],"is":[76,85,130,236],"concentrated,":[77],"any":[78,227,245],"classifier":[79],"with":[80,210,214,258,271],"some":[81,148],"initial":[82],"constant":[83],"error":[84],"inherently":[86],"perturbations.One":[90],"class":[91],"concentrated":[93],"spaces":[96,196],"so-called":[99],"L\u00e9vy":[100,139,163],"families":[101,164],"include":[103],"many":[104,161],"natural":[105],"distributions.":[106],"special":[109,146],"case,":[110],"our":[111,135],"attacks":[112,180,204],"only":[113,266],"need":[114],"perturb":[116],"by":[120,264],"at":[121],"most":[122],"O(\u221an)":[123],"make":[125],"it":[126],"misclassified,":[127],"where":[128],"n":[129],"data":[132,213],"dimension.":[133],"Using":[134],"general":[136],"result":[137],"about":[138,154],"spaces,":[141],"first":[143],"recover":[144],"as":[145],"case":[147],"previously":[151],"proved":[152],"results":[153],"existence":[156,199],"examples.":[159,276],"However,":[160],"more":[162],"known":[166],"(e.g.,":[167,248],"product":[168,195],"distribution":[169],"under":[170],"Hamming":[172],"distance)":[173],"for":[174,194,226],"which":[175,206],"immediately":[177],"obtain":[178],"new":[179],"find":[182],"examples":[184,270],"distance":[186],"O(\u221an).Finally,":[187],"concentration":[191],"implies":[197],"forms":[201],"\u201cpoisoning\u201d":[203],"adversary":[208,238],"tampers":[209],"training":[212,233],"goal":[216],"degrading":[218],"classifier.":[220],"particular,":[222],"algorithm":[229],"uses":[231],"m":[232],"examples,":[234],"there":[235],"an":[237],"who":[239],"can":[240],"increase":[241],"\u201cbad":[246],"property\u201d":[247],"failing":[249],"particular":[252],"instance)":[254],"initially":[256],"happens":[257],"non-negligible":[259],"\u2248":[262],"1":[263],"substituting":[265],"\u00d5e(\u221am)":[267],"other":[272],"(still":[273],"correctly":[274],"labeled)":[275]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}