{"id":"https://openalex.org/W7133340902","doi":"https://doi.org/10.48550/arxiv.2603.00537","title":"Mathematical Foundations of Poisoning Attacks on Linear Regression over Cumulative Distribution Functions","display_name":"Mathematical Foundations of Poisoning Attacks on Linear Regression over Cumulative Distribution Functions","publication_year":2026,"publication_date":"2026-02-28","ids":{"openalex":"https://openalex.org/W7133340902","doi":"https://doi.org/10.48550/arxiv.2603.00537"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.00537","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00537","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.00537","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5127927864","display_name":"Atsuki Sato","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Sato, Atsuki","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5104365461","display_name":"Martin Dr.rer.nat. Aum\u00fcller","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aum\u00fcller, Martin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5127923173","display_name":"Yusuke Matsui","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Matsui, Yusuke","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.19470000267028809,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.19470000267028809,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.18559999763965607,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.08860000222921371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/linear-regression","display_name":"Linear regression","score":0.5051000118255615},{"id":"https://openalex.org/keywords/regression","display_name":"Regression","score":0.4984999895095825},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4480000138282776},{"id":"https://openalex.org/keywords/function","display_name":"Function (biology)","score":0.4408999979496002},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.43299999833106995},{"id":"https://openalex.org/keywords/regression-analysis","display_name":"Regression analysis","score":0.42010000348091125},{"id":"https://openalex.org/keywords/index","display_name":"Index (typography)","score":0.40939998626708984},{"id":"https://openalex.org/keywords/greedy-algorithm","display_name":"Greedy algorithm","score":0.40860000252723694}],"concepts":[{"id":"https://openalex.org/C48921125","wikidata":"https://www.wikidata.org/wiki/Q10861030","display_name":"Linear regression","level":2,"score":0.5051000118255615},{"id":"https://openalex.org/C83546350","wikidata":"https://www.wikidata.org/wiki/Q1139051","display_name":"Regression","level":2,"score":0.4984999895095825},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4480000138282776},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.4408999979496002},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.43299999833106995},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.429500013589859},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.4250999987125397},{"id":"https://openalex.org/C152877465","wikidata":"https://www.wikidata.org/wiki/Q208042","display_name":"Regression analysis","level":2,"score":0.42010000348091125},{"id":"https://openalex.org/C2777382242","wikidata":"https://www.wikidata.org/wiki/Q6017816","display_name":"Index (typography)","level":2,"score":0.40939998626708984},{"id":"https://openalex.org/C51823790","wikidata":"https://www.wikidata.org/wiki/Q504353","display_name":"Greedy algorithm","level":2,"score":0.40860000252723694},{"id":"https://openalex.org/C163175372","wikidata":"https://www.wikidata.org/wiki/Q3339222","display_name":"Linear model","level":2,"score":0.3955000042915344},{"id":"https://openalex.org/C2776502983","wikidata":"https://www.wikidata.org/wiki/Q690182","display_name":"Contrast (vision)","level":2,"score":0.3944999873638153},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3855000138282776},{"id":"https://openalex.org/C41587187","wikidata":"https://www.wikidata.org/wiki/Q1501882","display_name":"Generalized linear model","level":2,"score":0.36079999804496765},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.3483999967575073},{"id":"https://openalex.org/C149629883","wikidata":"https://www.wikidata.org/wiki/Q660926","display_name":"Fraction (chemistry)","level":2,"score":0.3271999955177307},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.3269999921321869},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.3122999966144562},{"id":"https://openalex.org/C103784038","wikidata":"https://www.wikidata.org/wiki/Q386228","display_name":"Cumulative distribution function","level":3,"score":0.30140000581741333},{"id":"https://openalex.org/C2164484","wikidata":"https://www.wikidata.org/wiki/Q5170150","display_name":"Core (optical fiber)","level":2,"score":0.27709999680519104},{"id":"https://openalex.org/C32224588","wikidata":"https://www.wikidata.org/wiki/Q7250175","display_name":"Proper linear model","level":4,"score":0.27469998598098755},{"id":"https://openalex.org/C76969082","wikidata":"https://www.wikidata.org/wiki/Q486902","display_name":"Mathematical model","level":2,"score":0.2596000134944916}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.00537","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00537","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.00537","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00537","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.43213117122650146,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Learned":[0],"indexes":[1,35],"are":[2,36,102],"a":[3,43,71,92,108,158,204],"class":[4],"of":[5,46,75,85,165,193,210],"index":[6,60],"data":[7,52],"structures":[8],"that":[9,33,119,130,149,174],"enable":[10],"fast":[11],"search":[12],"by":[13],"approximating":[14],"the":[15,50,86,112,120,124,134,146,166,175,178,190,207],"cumulative":[16],"distribution":[17],"function":[18],"(CDF)":[19],"using":[20],"machine":[21],"learning":[22],"models":[23,81,90,199],"(Kraska":[24],"et":[25,63],"al.,":[26,64],"SIGMOD'18).":[27],"However,":[28],"recent":[29],"studies":[30],"have":[31],"shown":[32],"learned":[34,97,215],"vulnerable":[37],"to":[38,160,184],"poisoning":[39,76,115,168],"attacks,":[40,133],"where":[41],"injecting":[42],"small":[44],"number":[45],"poison":[47],"keys":[48],"into":[49],"training":[51],"can":[53],"significantly":[54],"degrade":[55],"model":[56],"accuracy":[57],"and":[58,91,117,142,171,202,212],"reduce":[59],"performance":[61],"(Kornaropoulos":[62],"SIGMOD'22).":[65],"In":[66],"this":[67,185],"work,":[68],"we":[69,143],"provide":[70],"rigorous":[72],"theoretical":[73,109,191,208],"analysis":[74],"attacks":[77,211],"targeting":[78],"linear":[79,197],"regression":[80,89,198],"over":[82],"CDFs,":[83],"one":[84],"most":[87],"basic":[88],"core":[93],"component":[94],"in":[95,131],"many":[96],"indexes.":[98,216],"Our":[99,187],"main":[100],"contributions":[101],"as":[103],"follows:":[104],"(i)":[105],"We":[106,128,156],"present":[107],"proof":[110],"characterizing":[111],"optimal":[113,125,151],"single-point":[114],"attack":[116,152,194],"show":[118,129],"existing":[121,135],"method":[122,159],"yields":[123],"attack.":[126],"(ii)":[127],"multi-point":[132,167],"greedy":[136,179],"approach":[137,180],"is":[138,181],"not":[139],"always":[140],"optimal,":[141],"rigorously":[144],"derive":[145],"key":[147],"properties":[148],"an":[150,162],"should":[153],"satisfy.":[154],"(iii)":[155],"propose":[157],"compute":[161],"upper":[163],"bound":[164],"attack's":[169],"impact":[170],"empirically":[172],"demonstrate":[173],"loss":[176],"under":[177],"often":[182],"close":[183],"bound.":[186],"study":[188],"deepens":[189],"understanding":[192],"strategies":[195],"against":[196],"on":[200,214],"CDFs":[201],"provides":[203],"foundation":[205],"for":[206],"evaluation":[209],"defenses":[213]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-04T00:00:00"}
