{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,11]],"date-time":"2024-09-11T13:41:59Z","timestamp":1726062119055},"publisher-location":"Cham","reference-count":32,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030369378"},{"type":"electronic","value":"9783030369385"}],"license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019]]},"DOI":"10.1007\/978-3-030-36938-5_39","type":"book-chapter","created":{"date-parts":[[2019,12,10]],"date-time":"2019-12-10T00:04:11Z","timestamp":1575936251000},"page":"632-645","update-policy":"http:\/\/dx.doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Keyed Non-parametric Hypothesis Tests"],"prefix":"10.1007","author":[{"given":"Yao","family":"Cheng","sequence":"first","affiliation":[]},{"given":"Cheng-Kang","family":"Chu","sequence":"additional","affiliation":[]},{"given":"Hsiao-Ying","family":"Lin","sequence":"additional","affiliation":[]},{"given":"Marius","family":"Lombard-Platet","sequence":"additional","affiliation":[]},{"given":"David","family":"Naccache","sequence":"additional","affiliation":[]}],"member":"297","published-online":{"date-parts":[[2019,12,10]]},"reference":[{"key":"39_CR1","unstructured":"Albrecht, M.R., Massimo, J., Paterson, K.G., Somorovsky, J.: Prime and prejudice: primality testing under adversarial conditions. Cryptology ePrint Archive, Report 2018\/749 (2018). https:\/\/eprint.iacr.org\/2018\/749"},{"issue":"2","key":"39_CR2","doi-asserted-by":"publisher","first-page":"121","DOI":"10.1007\/s10994-010-5188-5","volume":"81","author":"M Barreno","year":"2010","unstructured":"Barreno, M., Nelson, B., Joseph, A.D., Tygar, J.: The security of machine learning. Mach. Learn. 81(2), 121\u2013148 (2010)","journal-title":"Mach. Learn."},{"key":"39_CR3","unstructured":"Biggio, B., Nelson, B., Laskov, P.: Support vector machines under adversarial label noise. In: Hsu, C.N., Lee, W.S. (eds.) Proceedings of the Asian Conference on Machine Learning. Proceedings of Machine Learning Research, PMLR, Taoyuan, 14\u201315 November 2011, vol. 20, pp. 97\u2013112 (2011)"},{"key":"39_CR4","unstructured":"Biggio, B., Nelson, B., Laskov, P.: Poisoning attacks against support vector machines. In: Proceedings of the 29th International Conference on Machine Learning, ICML 2012, Omnipress, Madison, pp. 1467\u20131474 (2012)"},{"key":"39_CR5","doi-asserted-by":"publisher","first-page":"317","DOI":"10.1016\/j.patcog.2018.07.023","volume":"84","author":"B Biggio","year":"2018","unstructured":"Biggio, B., Roli, F.: Wild patterns: ten years after the rise of adversarial machine learning. Pattern Recogn. 84, 317\u2013331 (2018)","journal-title":"Pattern Recogn."},{"issue":"4","key":"39_CR6","doi-asserted-by":"publisher","first-page":"987","DOI":"10.2307\/2529826","volume":"31","author":"M Brown","year":"1975","unstructured":"Brown, M.: A method for combining non-independent, one-sided tests of significance. Biometrics 31(4), 987\u2013992 (1975)","journal-title":"Biometrics"},{"key":"39_CR7","doi-asserted-by":"crossref","unstructured":"Burkard, C., Lagesse, B.: Analysis of causative attacks against SVMs learning from data streams. In: Proceedings of the 3rd ACM on International Workshop on Security and Privacy Analytics, IWSPA 2017, pp. 31\u201336. ACM, New York (2017)","DOI":"10.1145\/3041008.3041012"},{"key":"39_CR8","doi-asserted-by":"crossref","unstructured":"Cretu, G.F., Stavrou, A., Locasto, M.E., Stolfo, S.J., Keromytis, A.D.: Casting out demons: sanitizing training data for anomaly sensors. In: 2008 IEEE Symposium on Security and Privacy (SP 2008), pp. 81\u201395, May 2008","DOI":"10.1109\/SP.2008.11"},{"key":"39_CR9","doi-asserted-by":"crossref","unstructured":"G\u00e9raud, R., Lombard-Platet, M., Naccache, D.: Quotient hash tables - efficiently detecting duplicates in streaming data. CoRR abs\/1901.04358 (2019)","DOI":"10.1145\/3297280.3297335"},{"key":"39_CR10","unstructured":"Goodfellow, I., et al.: Generative adversarial nets. In: Advances in Neural Information Processing Systems, pp. 2672\u20132680 (2014)"},{"issue":"1","key":"39_CR11","doi-asserted-by":"publisher","first-page":"239","DOI":"10.1093\/biomet\/asx076","volume":"105","author":"NA Heard","year":"2018","unstructured":"Heard, N.A., Rubin-Delanchy, P.: Choosing between methods of combining-values. Biometrika 105(1), 239\u2013246 (2018)","journal-title":"Biometrika"},{"key":"39_CR12","doi-asserted-by":"crossref","unstructured":"Kearns, M., Li, M.: Learning in the presence of malicious errors. In: Proceedings of the Twentieth Annual ACM Symposium on Theory of Computing, STOC 1988, pp. 267\u2013280. ACM, New York (1988)","DOI":"10.1145\/62212.62238"},{"key":"39_CR13","first-page":"5","volume":"IX","author":"A Kerckhoffs","year":"1883","unstructured":"Kerckhoffs, A.: La cryptographie militaire. J. Sci. Mil. IX, 5\u201338 (1883)","journal-title":"J. Sci. Mil."},{"key":"39_CR14","unstructured":"Kloft, M., Laskov, P.: Online anomaly detection under adversarial impact. In: Teh, Y.W., Titterington, M. (eds.) Proceedings of the Thirteenth International Conference on Artificial Intelligence and Statistics. Proceedings of Machine Learning Research, PMLR, Sardinia, 13\u201315 May 2010, vol. 9, pp. 405\u2013412 (2010)"},{"key":"39_CR15","unstructured":"Koh, P.W., Liang, P.: Understanding black-box predictions via influence functions. In: Proceedings of the 34th International Conference on Machine Learning, ICML 2017, vol. 70, pp. 1885\u20131894. JMLR.org (2017)"},{"issue":"2","key":"39_CR16","doi-asserted-by":"publisher","first-page":"183","DOI":"10.1016\/S0167-7152(02)00310-3","volume":"60","author":"JT Kost","year":"2002","unstructured":"Kost, J.T., McDermott, M.P.: Combining dependent $$p$$-values. Stat. Probab. Lett. 60(2), 183\u2013190 (2002)","journal-title":"Stat. Probab. Lett."},{"key":"39_CR17","unstructured":"Laishram, R., Phoha, V.V.: Curie: a method for protecting SVM classifier from poisoning attack. arXiv abs\/1606.01584 (2016)"},{"key":"39_CR18","doi-asserted-by":"crossref","unstructured":"Mei, S., Zhu, X.: Using machine teaching to identify optimal training-set attacks on machine learners. In: Proceedings of the Twenty-Ninth AAAI Conference on Artificial Intelligence, AAAI 2015, pp. 2871\u20132877. AAAI Press (2015)","DOI":"10.1609\/aaai.v29i1.9569"},{"key":"39_CR19","unstructured":"Naor, M., Yogev, E.: Bloom filters in adversarial environments. CoRR abs\/1412.8356 (2014)"},{"key":"39_CR20","unstructured":"Nelson, B., et al.: Exploiting machine learning to subvert your spam filter. In: Proceedings of the 1st USENIX Workshop on Large-Scale Exploits and Emergent Threats, LEET 2008, pp. 7:1\u20137:9. USENIX Association, Berkeley (2008)"},{"key":"39_CR21","doi-asserted-by":"crossref","unstructured":"Newell, A., Potharaju, R., Xiang, L., Nita-Rotaru, C.: On the practicality of integrity attacks on document-level sentiment analysis. In: Proceedings of the 2014 Workshop on Artificial Intelligent and Security Workshop, AISec 2014, pp. 83\u201393. ACM, New York (2014)","DOI":"10.1145\/2666652.2666661"},{"key":"39_CR22","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1007\/11856214_5","volume-title":"Recent Advances in Intrusion Detection","author":"J Newsome","year":"2006","unstructured":"Newsome, J., Karp, B., Song, D.: Paragraph: thwarting signature learning by training maliciously. In: Zamboni, D., Kruegel, C. (eds.) RAID 2006. LNCS, vol. 4219, pp. 81\u2013105. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11856214_5"},{"key":"39_CR23","doi-asserted-by":"crossref","unstructured":"Perdisci, R., Dagon, D., Lee, W., Fogla, P., Sharif, M.: Misleading worm signature generators using deliberate noise injection. In: 2006 IEEE Symposium on Security and Privacy (S&P 2006), pp. 15\u201331, May 2006","DOI":"10.1109\/SP.2006.26"},{"key":"39_CR24","doi-asserted-by":"crossref","unstructured":"Rubinstein, B.I., et al.: ANTIDOTE: understanding and defending against poisoning of anomaly detectors. In: Proceedings of the 9th ACM SIGCOMM Conference on Internet Measurement, IMC 2009, pp. 1\u201314. ACM, New York (2009)","DOI":"10.1145\/1644893.1644895"},{"key":"39_CR25","unstructured":"Samangouei, P., Kabkab, M., Chellappa, R.: Defense-GAN: protecting classifiers against adversarial attacks using generative models. arXiv preprint arXiv:1805.06605 (2018)"},{"key":"39_CR26","unstructured":"Shaham, U., et al.: Defending against adversarial images using basis functions transformations. arXiv abs\/1803.10840 (2018)"},{"key":"39_CR27","unstructured":"Stouffer, S., Suchman, E., DeVinney, L., Star, S., Williams, R.J.: The American Soldier. Adjustment During Army Life, vol. 1 (1949)"},{"key":"39_CR28","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1007\/978-3-030-11012-3_23","volume-title":"Computer Vision \u2013 ECCV 2018 Workshops","author":"O Taran","year":"2019","unstructured":"Taran, O., Rezaeifar, S., Voloshynovskiy, S.: Bridging machine learning and cryptography in defence against adversarial attacks. In: Leal-Taix\u00e9, L., Roth, S. (eds.) ECCV 2018. LNCS, vol. 11130, pp. 267\u2013279. Springer, Cham (2019). https:\/\/doi.org\/10.1007\/978-3-030-11012-3_23"},{"key":"39_CR29","doi-asserted-by":"publisher","unstructured":"Tolpin, D.: Population anomaly detection through deep gaussianization. In: Proceedings of the 34th ACM\/SIGAPP Symposium on Applied Computing, SAC 2019, pp. 1330\u20131336. ACM, New York (2019). https:\/\/doi.org\/10.1145\/3297280.3297414","DOI":"10.1145\/3297280.3297414"},{"key":"39_CR30","unstructured":"Xiao, H., Xiao, H., Eckert, C.: Adversarial label flips attack on support vector machines. In: Proceedings of the 20th European Conference on Artificial Intelligence, ECAI 2012, pp. 870\u2013875. IOS Press, Amsterdam (2012)"},{"key":"39_CR31","unstructured":"Xiao, H., Biggio, B., Brown, G., Fumera, G., Eckert, C., Roli, F.: Is feature selection secure against training data poisoning? In: International Conference on Machine Learning, pp. 1689\u20131698 (2015)"},{"key":"39_CR32","doi-asserted-by":"crossref","unstructured":"Xu, W., Evans, D., Qi, Y.: Feature squeezing: detecting adversarial examples in deep neural networks. In: Proceedings of the 25th Annual Network and Distributed System Security Symposium (NDSS) (2017)","DOI":"10.14722\/ndss.2018.23198"}],"container-title":["Lecture Notes in Computer Science","Network and System Security"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-36938-5_39","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,10,8]],"date-time":"2022-10-08T01:17:47Z","timestamp":1665191867000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-36938-5_39"}},"subtitle":["Protecting Machine Learning from Poisoning Attacks"],"short-title":[],"issued":{"date-parts":[[2019]]},"ISBN":["9783030369378","9783030369385"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-36938-5_39","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2019]]},"assertion":[{"value":"10 December 2019","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"NSS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Network and System Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Sapporo","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Japan","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2019","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"15 December 2019","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"18 December 2019","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"13","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"nss2019","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/nsclab.org\/nss2019\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"89","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"36","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"40% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.8","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"7","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}