{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,4,29]],"date-time":"2025-04-29T04:01:39Z","timestamp":1745899299522,"version":"3.40.4"},"publisher-location":"Cham","reference-count":38,"publisher":"Springer Nature Switzerland","isbn-type":[{"type":"print","value":"9783031808166"},{"type":"electronic","value":"9783031808173"}],"license":[{"start":{"date-parts":[[2024,12,11]],"date-time":"2024-12-11T00:00:00Z","timestamp":1733875200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,12,11]],"date-time":"2024-12-11T00:00:00Z","timestamp":1733875200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-80817-3_2","type":"book-chapter","created":{"date-parts":[[2025,2,25]],"date-time":"2025-02-25T11:23:54Z","timestamp":1740482634000},"page":"19-39","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Feasibility of Adversarial Attacks Against Machine Learning Models"],"prefix":"10.1007","author":[{"given":"Kimia","family":"Tahayori","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sherif","family":"Saad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohammad","family":"Mamun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Saeed","family":"Samet","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,12,11]]},"reference":[{"key":"2_CR1","doi-asserted-by":"crossref","unstructured":"Q. An, S. Rahman, J. Zhou, J.J. Kang, A comprehensive review on machine learning in healthcare industry: classification, restrictions, opportunities and challenges. Sensors 23(9), 4178 (2023)","DOI":"10.3390\/s23094178"},{"issue":"1","key":"2_CR2","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1177\/0306312717741687","volume":"48","author":"J Stilgoe","year":"2018","unstructured":"J. Stilgoe, Machine learning, social learning and the governance of self-driving cars. Soc. Stud. Sci. 48(1), 25\u201356 (2018)","journal-title":"Soc. Stud. Sci."},{"key":"2_CR3","unstructured":"I. Debicha, B. Cocheza, T. Kenazac, T. Debattyb, J. Dricota, W. Meesb, Review on the feasibility of adversarial evasion attacks and defenses for network intrusion detection systems. Inform. Secur. Appl. (2023)"},{"key":"2_CR4","doi-asserted-by":"crossref","unstructured":"A. Venturi, C. Zanasi, On the feasibility of adversarial machine learning in malware and network intrusion detection, in 2021 IEEE 20th International Symposium on Network Computing and Applications (NCA) (2021)","DOI":"10.1109\/NCA53618.2021.9685709"},{"key":"2_CR5","doi-asserted-by":"crossref","unstructured":"Z. Tian, L. Cui, J. Liang, S. Yu, A comprehensive survey on poisoning attacks and countermeasures in machine learning. ACM Comput. Surv. 55(8), 166 (2022)","DOI":"10.1145\/3551636"},{"key":"2_CR6","doi-asserted-by":"crossref","unstructured":"I.Y. Tyukin, D.J. Higham, A. Bastounis, E. Woldegeorgis, A.N. Gorban, The feasibility and inevitability of stealth attacks (2023). arXiv:2106.13997v4","DOI":"10.1093\/imamat\/hxad027"},{"key":"2_CR7","doi-asserted-by":"crossref","unstructured":"J.R. Quinlan, Induction of Decision Trees. Machine Learning, vol. 1 (Kluwer Academic Publishers, Boston, 1986), pp. 81\u2013106","DOI":"10.1007\/BF00116251"},{"key":"2_CR8","doi-asserted-by":"crossref","unstructured":"R.G. Brereton, G.R. Lloyd, Support vector machines for classification and regression. Roy. Soc. Chem. (2009). https:\/\/doi.org\/10.1039\/b918972f","DOI":"10.1039\/B918972F"},{"issue":"4","key":"2_CR9","first-page":"541","volume":"1","author":"Y LeCun","year":"1989","unstructured":"Y. LeCun, B. Boser, J.S. Denker, D. Henderson, R.E. Howard, W. Hubbard, L.D. Jackel, Backpropagation applied to handwritten zip code recognition. IEEE 1(4), 541\u2013551 (1989)","journal-title":"IEEE"},{"key":"2_CR10","doi-asserted-by":"crossref","unstructured":"S. Hochreiter, J. Schmidhuber, Long short-term memory, in Neural Computation (1997)","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"2_CR11","doi-asserted-by":"crossref","unstructured":"D.E. Rumelhart, G.E. Hinton, R.J. Williams, Learning Representations by Back-Propagating Errors (Nature Publishing Group, 1986)","DOI":"10.1038\/323533a0"},{"issue":"11","key":"2_CR12","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y Lecun","year":"1998","unstructured":"Y. Lecun, L. Bottou, Y. Bengio, P. Haffner, Gradient-based learning applied to document recognition. IEEE 86(11), 2278\u20132324 (1998)","journal-title":"IEEE"},{"key":"2_CR13","unstructured":"I.J. Goodfellow, J. Shlens, C. Szegedy, Explaining and harnessing adversarial examples, in ICLR (2015)"},{"key":"2_CR14","doi-asserted-by":"crossref","unstructured":"A. Kurakin, I.J. Goodfellow, S. Bengio, Adversarial examples in the physical world, in ICLR (2017)","DOI":"10.1201\/9781351251389-8"},{"key":"2_CR15","doi-asserted-by":"crossref","unstructured":"N. Papernot, P. McDaniel, S. Jha, M. Fredrikson, Z.B. Celik, A. Swami, The limitations of deep learning in adversarial settings (2015). arXiv:1511.07528v1","DOI":"10.1109\/EuroSP.2016.36"},{"key":"2_CR16","doi-asserted-by":"crossref","unstructured":"N. Carlini, D. Wagner, Towards evaluating the robustness of neural networks (2017). arXiv:1608.04644v2","DOI":"10.1109\/SP.2017.49"},{"key":"2_CR17","unstructured":"N. Papernot, P. McDaniel, Transferability in machine learning: from phenomena to black-box attacks using adversarial samples (2016). arXiv:1605.07277v1"},{"key":"2_CR18","unstructured":"B. Biggio, P. d\u2019Armi, B. Nelson, P. Laskov, Poisoning attacks against support vector machines (2013). arXiv:1206.6389v3."},{"key":"2_CR19","unstructured":"A. Shafahi, W.R. Huang, M. Najibi, O. Suciu, C. Studer, T. Dumitras, T. Goldstein, Poison frogs! targeted clean-label poisoning attacks on neural networks (2018). arXiv:1804.00792v2"},{"key":"2_CR20","doi-asserted-by":"publisher","first-page":"12103","DOI":"10.1109\/ACCESS.2018.2805680","volume":"6","author":"Q Liu","year":"2018","unstructured":"Q. Liu, P. Li, W. Zhao, W. Cai, S. Yu, V.C.M. Leung, A survey on security threats and defensive techniques of machine learning: a data driven view. Access 6, 12103\u201312117 (2018)","journal-title":"Access"},{"key":"2_CR21","unstructured":"B. Biggio, B. Nelson, P. Laskov, Support vector machines under adversarial label noise, in Asian Conference on Machine Learning (PMLR, 2011), pp. 97\u2013112"},{"key":"2_CR22","doi-asserted-by":"crossref","unstructured":"R. Shokri, M. Stronati, C. Song, V. Shmatikov, Membership inference attacks against machine learning models (2017). arXiv:1610.05820v2","DOI":"10.1109\/SP.2017.41"},{"key":"2_CR23","doi-asserted-by":"crossref","unstructured":"M. Fredrikson, S. Jha, T. Ristenpart, Model inversion attacks that exploit confidence information and basic countermeasures. ACM (2015). https:\/\/doi.org\/10.1145\/2810103.2813677","DOI":"10.1145\/2810103.2813677"},{"key":"2_CR24","unstructured":"M. Goldblum, D. Tsipras, C. Xie, X. Chen, A. Schwarzschild, D. Song, A. Madry, B. Li, T. Goldstein, Data security for machine learning: data poisoning, backdoor attacks, and defenses (2020). arXiv:2012.10544"},{"key":"2_CR25","doi-asserted-by":"publisher","DOI":"10.1016\/j.eng.2019.12.012","volume-title":"Adversarial Attacks and Defenses in Deep Learning","author":"K Ren","year":"2020","unstructured":"K. Ren, T. Zheng, Z. Qin, X. Liu, Adversarial Attacks and Defenses in Deep Learning (Elsevier, Amsterdam, 2020)"},{"key":"2_CR26","doi-asserted-by":"crossref","unstructured":"A.H. Qureshi, H. Larijani, M. M. Yousefi, A. Adeel, N. Mtetwa, An adversarial approach for intrusion detection systems using jacobian saliency map attacks (JSMA) algorithm. Computers 9(3), 58 (2020)","DOI":"10.3390\/computers9030058"},{"key":"2_CR27","doi-asserted-by":"crossref","unstructured":"G. Apruzzese, M. Andreolini, L. Ferretti, M. Marchetti, M. Colajanni, Modeling realistic adversarial attacks against network intrusion detection systems. Digit. Threat. Res. Pract. 3(3), 31 (2022)","DOI":"10.1145\/3469659"},{"key":"2_CR28","unstructured":"L.A. Zhang, G.S. Hartnett, J. Aguirre, A.J. Lohn, I. Khan, M. Herron, C. O\u2019Connell, Operational Feasibility of Adversarial Attacks Against Artificial Intelligence (RAND Corporation, 2022)"},{"key":"2_CR29","unstructured":"F. Tramer, F. Zhang, A. Juels, M.K. Reiter, T. Ristenpart, Stealing machine learning models via prediction APIs (2016). arXiv:1609.02943v2"},{"key":"2_CR30","doi-asserted-by":"crossref","unstructured":"G.A. de Oliveira J\u00fanior, R.T. de Sousa Jr., R.O. Albuquerque, L.J.G. Villalba, Adversarial attacks on a lexical sentiment analysis classifier. Science Direct Comput. Commun. (2021). https:\/\/doi.org\/10.1016\/j.comcom.2020.08.015","DOI":"10.1016\/j.comcom.2021.04.026"},{"key":"2_CR31","doi-asserted-by":"publisher","unstructured":"A. Uprety, D.B. Rawat, Mitigating poisoning attack in federated learning, in IEEE Symposium Series on Computational Intelligence (SSCI) (2021). https:\/\/doi.org\/10.1109\/SSCI50451.2021.9659839","DOI":"10.1109\/SSCI50451.2021.9659839"},{"key":"2_CR32","doi-asserted-by":"crossref","unstructured":"S. Wolf, W. Gamboa, M. Borowczak, Jangseung: a guardian for machine learning algorithms to protect against poisoning attacks, in IEEE International Smart Cities Conference (ISC2) (2021)","DOI":"10.1109\/ISC253183.2021.9562816"},{"key":"2_CR33","doi-asserted-by":"crossref","unstructured":"X. Yang, X. Qian, R. Zhang, N. Huang, H. Xia, Low-Poisoning Rate Invisible Backdoor Attack Based on Important Neurons (Springer Nature Switzerland AG, 2022)","DOI":"10.1007\/978-3-031-19214-2_31"},{"key":"2_CR34","doi-asserted-by":"publisher","unstructured":"E. Ashraf, N.F.F. Areed, H. Salem, E.H. Abdelhay, A. Farouk, FIDChain: federated intrusion detection system for blockchain-enabled IoT healthcare applications. Healthcare (2022). https:\/\/doi.org\/10.3390\/healthcare10061110","DOI":"10.3390\/healthcare10061110"},{"key":"2_CR35","doi-asserted-by":"crossref","unstructured":"V. Singh, S. Tewary, V. Sardana, H.K. Sardana, Arrhythmia detection\u2014a machine learning based comparative analysis with MIT-BIH ECG data, in 5th International Conference for Convergence in Technology (I2CT), Pune, India (2019)","DOI":"10.1109\/I2CT45611.2019.9033665"},{"key":"2_CR36","unstructured":"S. Torres-Alegre, J. Fombellida, J. Pinuela-Izquierdo, D. Andina, AMSOM: artificial metaplasticity in SOM neural networks-application to MIT-BIH arrhythmias database, in 5th International Work-Conference on the Interplay Between Natural and Artificial Computation (IWINAC) (2020)"},{"key":"2_CR37","unstructured":"G. Wang, T. Wang, H. Zheng, B.Y. Zhao, Man vs. machine: practical adversarial detection of malicious crowdsourcing workers, in 23rd USENIX Security Symposium (2014)"},{"key":"2_CR38","unstructured":"M.-I. Nicolae, M. Sinn, M.N. Tran, B. Buesser, A. Rawat, M. Wistuba, V. Zantedeschi, N. Baracaldo, B. Chen, H. Ludwig, I.M. Molloy, B. Edwards, Adversarial robustness toolbox v1.0.0 (2019). arXiv:1807.01069v4"}],"container-title":["Lecture Notes on Data Engineering and Communications Technologies","The 7th International Conference on Wireless, Intelligent and Distributed Environment for Communication"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-80817-3_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,28]],"date-time":"2025-04-28T08:16:28Z","timestamp":1745828188000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-80817-3_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,11]]},"ISBN":["9783031808166","9783031808173"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-80817-3_2","relation":{},"ISSN":["2367-4512","2367-4520"],"issn-type":[{"type":"print","value":"2367-4512"},{"type":"electronic","value":"2367-4520"}],"subject":[],"published":{"date-parts":[[2024,12,11]]},"assertion":[{"value":"11 December 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}}]}}