{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,31]],"date-time":"2025-03-31T04:14:10Z","timestamp":1743394450884,"version":"3.40.3"},"reference-count":63,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T00:00:00Z","timestamp":1740528000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T00:00:00Z","timestamp":1740528000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,4]]},"DOI":"10.1007\/s10207-025-00998-1","type":"journal-article","created":{"date-parts":[[2025,2,26]],"date-time":"2025-02-26T14:39:27Z","timestamp":1740580767000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Outlier-oriented poisoning attack: a grey-box approach to disturb decision boundaries by perturbing outliers in multiclass learning"],"prefix":"10.1007","volume":"24","author":[{"given":"Anum","family":"Paracha","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Junaid","family":"Arshad","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mohamed Ben","family":"Farah","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Khalid","family":"Ismail","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,2,26]]},"reference":[{"key":"998_CR1","doi-asserted-by":"crossref","unstructured":"Han, R., Gong, H., Ma, S., Li, J., Xu, C., Bertino, E., Nepal, S., Ma, Z., Ma, J.: A credential usage study: flow-aware leakage detection in open-source projects. IEEE Trans. Inf. Forensics Secur. (2023)","DOI":"10.1109\/TIFS.2023.3326985"},{"key":"998_CR2","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1007\/s12551-022-01040-7","volume":"15","author":"H Moradi","year":"2023","unstructured":"Moradi, H., Al-Hourani, A., Concilia, G., Khoshmanesh, F., Nezami, F.R., Needham, S., Baratchi, S., Khoshmanesh, K.: Recent developments in modeling, imaging, and monitoring of cardiovascular diseases using machine learning. Biophys. Rev. 15, 19\u201333 (2023)","journal-title":"Biophys. Rev."},{"key":"998_CR3","doi-asserted-by":"crossref","unstructured":"Zeng, T., Ferdowsi, A., Semiari, O., Saad, W., Hong, C.S.: Convergence of communications, control, and machine learning for secure and autonomous vehicle navigation. IEEE Wirel. Commun. (2024)","DOI":"10.1109\/MWC.005.2300030"},{"issue":"3","key":"998_CR4","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s10207-024-00834-y","volume":"23","author":"AK Chillara","year":"2024","unstructured":"Chillara, A.K., Saxena, P., Maiti, R.R., Gupta, M., Kondapalli, R., Zhang, Z., Kesavan, K.: Deceiving supervised machine learning models via adversarial data poisoning attacks: a case study with USB keyboards. Int. J. Inf. Secur. 23(3), 1\u201319 (2024)","journal-title":"Int. J. Inf. Secur."},{"key":"998_CR5","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103676","volume":"139","author":"H Bostani","year":"2024","unstructured":"Bostani, H., Moonsamy, V.: Evadedroid: a practical evasion attack on machine learning for black-box android malware detection. Comput. Secur. 139, 103676 (2024)","journal-title":"Comput. Secur."},{"key":"998_CR6","doi-asserted-by":"crossref","unstructured":"Yang, Z., Xu, B., Zhang, J.M., Kang, H.J., Shi, J., He, J., Lo, D.: Stealthy backdoor attack for code models. In: IEEE Transactions on Software Engineering (2024)","DOI":"10.1109\/TSE.2024.3361661"},{"key":"998_CR7","first-page":"66","volume":"36","author":"BN Nguyen","year":"2024","unstructured":"Nguyen, B.N., Chandrasegaran, K., Abdollahzadeh, M., Cheung, N.M.M.: Label-only model inversion attacks via knowledge transfer. Adv. Neural Inf. Process. Syst. 36, 66 (2024)","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"998_CR8","doi-asserted-by":"crossref","unstructured":"Liu, G., Xu, T., Zhang, R., Wang, Z., Wang, C., Liu, L.: Gradient-leaks: enabling black-box membership inference attacks against machine learning models. IEEE Trans. Inf. Forensics Secur. (2023)","DOI":"10.1109\/TIFS.2023.3324772"},{"key":"998_CR9","doi-asserted-by":"crossref","first-page":"185","DOI":"10.1016\/j.future.2022.10.022","volume":"140","author":"Y Ali","year":"2023","unstructured":"Ali, Y.: Adversarial attacks on deep learning networks in image classification based on smell bees optimization algorithm. Futur. Gener. Comput. Syst. 140, 185\u2013195 (2023)","journal-title":"Futur. Gener. Comput. Syst."},{"key":"998_CR10","doi-asserted-by":"crossref","first-page":"331","DOI":"10.1016\/j.future.2022.03.008","volume":"133","author":"S Li","year":"2022","unstructured":"Li, S., Huang, G., Xu, X., Lu, H.: Query-based black-box attack against medical image segmentation model. Futur. Gener. Comput. Syst. 133, 331\u2013337 (2022)","journal-title":"Futur. Gener. Comput. Syst."},{"key":"998_CR11","doi-asserted-by":"crossref","unstructured":"Zhu, Y., Miao, C., Xue, H., Li, Z., Yu, Y., Xu, W., Su, L., Qiao, C.: TileMask: A passive-reflection-based attack against mmWave radar object detection in autonomous driving. In: Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security (CCS\u201923), pp. 1317\u20131331 (2023)","DOI":"10.1145\/3576915.3616661"},{"key":"998_CR12","first-page":"66","volume":"36","author":"R Jha","year":"2024","unstructured":"Jha, R., Hayase, J., Oh, S.: Label poisoning is all you need. Adv. Neural Inf. Process. Syst. 36, 66 (2024)","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"998_CR13","doi-asserted-by":"crossref","unstructured":"Manna, D., Tripathy, S.: TriMPA: triggerless targeted model poisoning attack in DNN. IEEE Trans. Comput. Soc. Syst. (2024)","DOI":"10.1109\/TCSS.2023.3349269"},{"key":"998_CR14","doi-asserted-by":"crossref","unstructured":"Yu, F., Zeng, B., Zhao, K., Pang, Z., Wang, L.: Chronic poisoning: backdoor attack against split learning. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 38(15), pp. 16531\u201316538 (2024)","DOI":"10.1609\/aaai.v38i15.29591"},{"key":"998_CR15","unstructured":"Biggio, B., Nelson, B., Laskov, P.: Poisoning attacks against support vector machines. In: Proceedings of the 29th International Conference on International Conference on Machine Learning (ICML\u201912), pp. 1467\u20131474 (2012)"},{"key":"998_CR16","unstructured":"Wang, Y., Zhu, Y., Gao, X.S.: Efficient Availability Attacks against Supervised and Contrastive Learning Simultaneously. In: arXiv preprint arXiv:2402.04010 (2024)"},{"key":"998_CR17","doi-asserted-by":"crossref","unstructured":"Lorenz, T., Kwiatkowska, M., Fritz, M.: Certifiers make neural networks vulnerable to availability attacks. In: Proceedings of the 16th ACM Workshop on Artificial Intelligence and Security, pp. 67\u201378 (2023)","DOI":"10.1145\/3605764.3623917"},{"key":"998_CR18","unstructured":"Liu, Z., Zhao, Z., Larson, M.: Image shortcut squeezing: Countering perturbative availability poisons with compression. In: International Conference on Machine Learning (PMLR), pp. 22473\u201322487 (2023)"},{"issue":"2","key":"998_CR19","doi-asserted-by":"crossref","first-page":"2450022","DOI":"10.1142\/S0219649224500229","volume":"23","author":"A Jonnalagadda","year":"2024","unstructured":"Jonnalagadda, A., Mohanty, D., Zakee, A., Kamalov, F.: Modelling data poisoning attacks against convolutional neural networks. J. Inf. Knowl. Manag. 23(2), 2450022 (2024)","journal-title":"J. Inf. Knowl. Manag."},{"key":"998_CR20","unstructured":"Di, J.Z., Douglas, J., Acharya, J., Kamath, G., Sekhari, A.: Hidden poison: machine unlearning enables camouflaged poisoning attacks. In: NeurIPS ML Safety Workshop (2022)"},{"key":"998_CR21","doi-asserted-by":"crossref","unstructured":"Zhao, B., Lao, Y.: CLPA: clean-label poisoning availability attacks using generative adversarial nets. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 36(8), pp. 9162\u20139170 (2022)","DOI":"10.1609\/aaai.v36i8.20902"},{"key":"998_CR22","volume":"81","author":"C Zhou","year":"2024","unstructured":"Zhou, C., Wang, Y., Zhu, G.: Object-attentional untargeted adversarial attack. J. Inf. Secur. Appl. 81, 103710 (2024)","journal-title":"J. Inf. Secur. Appl."},{"key":"998_CR23","volume":"75","author":"J Schneider","year":"2023","unstructured":"Schneider, J., Apruzzese, G.: Dual adversarial attacks: fooling humans and classifiers. J. Inf. Secur. Appl. 75, 103502 (2023)","journal-title":"J. Inf. Secur. Appl."},{"key":"998_CR24","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1007\/s10994-021-06119-y","volume":"66","author":"PW Koh","year":"2022","unstructured":"Koh, P.W., Steinhardt, J., Liang, P.: Stronger data poisoning attacks break data sanitization defenses. Mach. Learn. 66, 1\u201347 (2022)","journal-title":"Mach. Learn."},{"key":"998_CR25","unstructured":"Zhang, X., Zhu, X., Lessard, L.: Online data poisoning attacks. In: Learning for Dynamics and Control (PMLR), pp. 201\u2013210 (2020)"},{"key":"998_CR26","first-page":"2618","volume":"68","author":"J Chen","year":"2021","unstructured":"Chen, J., Zhang, L., Zheng, H., Wang, X., Ming, Z.: Deeppoison: feature transfer based stealthy poisoning attack for dnns. IEEE Trans. Circuits Syst. II Express Briefs 68, 2618\u20132622 (2021)","journal-title":"IEEE Trans. Circuits Syst. II Express Briefs"},{"key":"998_CR27","volume":"644","author":"C Zhang","year":"2023","unstructured":"Zhang, C., Tang, Z., Li, K.: Clean-label poisoning attack with perturbation causing dominant features. Inf. Sci. 644, 118899 (2023)","journal-title":"Inf. Sci."},{"key":"998_CR28","doi-asserted-by":"crossref","unstructured":"Zhong, H., Liao, C., Squicciarini, A.C., Zhu, S., Miller, D.: Backdoor embedding in convolutional neural network models via invisible perturbation. In: Proceedings of the Tenth ACM Conference on Data and Application Security and Privacy, pp. 97\u2013108 (2020)","DOI":"10.1145\/3374664.3375751"},{"key":"998_CR29","doi-asserted-by":"crossref","unstructured":"Liu, G., Huang, X., Yi, X.: Adversarial label poisoning attack on graph neural networks via label propagation. In: European Conference on Computer Vision, pp. 227\u2013243. Springer, Berlin (2022)","DOI":"10.1007\/978-3-031-20065-6_14"},{"key":"998_CR30","doi-asserted-by":"crossref","unstructured":"Shahid, A.R., Imteaj, A., Wu, P.Y., Igoche, D.A., Alam, T.: Label flipping data poisoning attack against wearable human activity recognition system. In: IEEE Symposium Series on Computational Intelligence (SSCI), pp. 908\u2013914. IEEE (2022)","DOI":"10.1109\/SSCI51031.2022.10022015"},{"key":"998_CR31","doi-asserted-by":"crossref","unstructured":"Aryal, K., Gupta, M., Abdelsalam, M.: \u201cAnalysis of label-flip poisoning attack on machine learning based malware detector. In: IEEE International Conference on Big Data (Big Data). IEEE. pp. 4236-4245 (2022)","DOI":"10.1109\/BigData55660.2022.10020528"},{"key":"998_CR32","unstructured":"Zhu, C., Huang, W.R., Li, H., Taylor, G., Studer, C., Goldstein, T.: Transferable clean-label poisoning attacks on deep neural nets. In: International Conference on Machine Learning (PMLR), pp. 7614\u20137623 (2019)"},{"key":"998_CR33","doi-asserted-by":"crossref","unstructured":"Aghakhani, H., Meng, D., Wang, Y.X., Kruegel, C., Vigna, G.: Bullseye polytope: a scalable clean-label poisoning attack with improved transferability. In: IEEE European Symposium on Security and Privacy (EuroS &P), pp. 159\u2013178. IEEE (2021)","DOI":"10.1109\/EuroSP51992.2021.00021"},{"key":"998_CR34","doi-asserted-by":"crossref","first-page":"6393","DOI":"10.1109\/TPAMI.2021.3087514","volume":"44","author":"K Ma","year":"2022","unstructured":"Ma, K., Xu, Q., Zeng, J., Cao, X., Huang, Q.: Poisoning attack against estimating from pairwise comparisons. IEEE Trans. Pattern Anal. Mach. Intell. 44, 6393\u20136408 (2022)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"998_CR35","doi-asserted-by":"crossref","unstructured":"Russo, A., Proutiere, A.: Poisoning attacks against data-driven control methods. In: American Control Conference (ACC), pp. 3234\u20133241. IEEE (2021)","DOI":"10.23919\/ACC50511.2021.9482992"},{"key":"998_CR36","doi-asserted-by":"crossref","unstructured":"Sanchez Vicarte, J.R., Schreiber, B., Paccagnella, R., Fletcher, C.W.: Game of threads: enabling asynchronous poisoning attacks. In: Proceedings of the Twenty-Fifth International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS\u201920), pp. 35\u201352 (2020)","DOI":"10.1145\/3373376.3378462"},{"key":"998_CR37","first-page":"12080","volume":"33","author":"WR Huang","year":"2020","unstructured":"Huang, W.R., Geiping, J., Fowl, L., Taylor, G., Goldstein, T.: Metapoison: practical general-purpose clean-label data poisoning. Adv. Neural Inf. Process. Syst. 33, 12080\u201312091 (2020)","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"998_CR38","doi-asserted-by":"crossref","unstructured":"Jagielski, M., Severi, G., Pousette Harger, N., Oprea, A.: Subpopulation data poisoning attacks. In: Proceedings of the 2021 ACM SIGSAC Conference on Computer and Communications Security, pp. 3104\u20133122 (2021)","DOI":"10.1145\/3460120.3485368"},{"key":"998_CR39","doi-asserted-by":"crossref","unstructured":"Mu\u00f1oz-Gonz\u00e1lez, L., Biggio, B., Demontis, A., Paudice, A., Wongrassamee, V., Lupu, E.C., Roli, F.: Towards poisoning of deep learning algorithms with back-gradient optimization. In: Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, pp. 27\u201338 (2017)","DOI":"10.1145\/3128572.3140451"},{"issue":"29","key":"998_CR40","first-page":"66","volume":"24","author":"A Paracha","year":"2025","unstructured":"Paracha, A., Arshad, J., Farah, M., Ismail, K.: Deep behavioral analysis of machine learning algorithms against data poisoning. Int. J. Inf. Secur. 24(29), 66 (2025)","journal-title":"Int. J. Inf. Secur."},{"key":"998_CR41","doi-asserted-by":"crossref","unstructured":"Adarsh, P., Jeyakumari, D.: Multiclass SVM-based automated diagnosis of diabetic retinopathy. In: International Conference On Communication And Signal Processing. pp. 206-210 (2013)","DOI":"10.1109\/iccsp.2013.6577044"},{"key":"998_CR42","doi-asserted-by":"crossref","unstructured":"Udayakumar, N., Saglani, V., Cupta, A., Subbulakshmi, T.: Malware classification using machine learning algorithms. In: 2nd International Conference on Trends in Electronics and Informatics (ICOEI), pp. 1\u20139 (2018)","DOI":"10.1109\/ICOEI.2018.8553780"},{"key":"998_CR43","doi-asserted-by":"crossref","DOI":"10.1016\/j.jpba.2022.114724","volume":"214","author":"E Colombo","year":"2022","unstructured":"Colombo, E., Mauri, L., Marinozzi, M., Rudd, T., Yates, E., Ballabio, D., Guerrini, M.: NMR spectroscopy and chemometric models to detect a specific non-porcine ruminant contaminant in pharmaceutical heparin. J. Pharm. Biomed. Anal. 214, 114724 (2022)","journal-title":"J. Pharm. Biomed. Anal."},{"key":"998_CR44","doi-asserted-by":"crossref","unstructured":"Zhao, B., Lao, Y.: Towards class-oriented poisoning attacks against neural networks. In: Proceedings of the IEEE\/CVF Winter Conference on Applications of Computer Vision, pp. 3741\u20133750 (2022)","DOI":"10.1109\/WACV51458.2022.00230"},{"key":"998_CR45","unstructured":"Carlini, N., Terzis, A.: Poisoning and backdooring contrastive learning. In: arXiv preprint arXiv:2106.09667 (2021)"},{"key":"998_CR46","doi-asserted-by":"crossref","first-page":"1519","DOI":"10.1007\/s11042-022-13269-1","volume":"82","author":"I Alarab","year":"2023","unstructured":"Alarab, I., Prakoonwit, I.: Uncertainty estimation based adversarial attack in multiclass classification. Multimed. Tools Appl. 82, 1519\u20131536 (2023)","journal-title":"Multimed. Tools Appl."},{"key":"998_CR47","doi-asserted-by":"crossref","unstructured":"Pantelakis, V., Bountakas, P., Farao, A., Xenakis, C.: Adversarial machine learning attacks on multiclass classification of IoT network traffic. In: Proceedings of the 18th International Conference on Availability, Reliability and Security, pp. 1\u20138 (2023)","DOI":"10.1145\/3600160.3605086"},{"key":"998_CR48","unstructured":"Suya, F., Mahloujifar, S., Suri, A., Evans, D., Tian, Y.: Model-targeted poisoning attacks with provable convergence. In: International Conference on Machine Learning (PMLR), pp. 10000\u201310010 (2021)"},{"key":"998_CR49","doi-asserted-by":"crossref","unstructured":"Mayerhofer, R., Mayer, R.: Poisoning attacks against feature-based image classification. In: Proceedings of the Twelfth ACM Conference on Data and Application Security and Privacy, pp. 358\u2013360 (2022)","DOI":"10.1145\/3508398.3519363"},{"key":"998_CR50","doi-asserted-by":"crossref","unstructured":"Saha, A., Subramanya, A., Pirsiavash, H.: Hidden trigger backdoor attacks. In: Proceedings of the AAAI Conference on Artificial Intelligence, vol. 34(7), 11957\u201311965 (2020)","DOI":"10.1609\/aaai.v34i07.6871"},{"key":"998_CR51","volume":"72","author":"A McCarthy","year":"2023","unstructured":"McCarthy, A., Ghadafi, E., Andriotis, P., Legg, P.: Defending against adversarial machine learning attacks using hierarchical learning: a case study on network traffic attack classification. J. Inf. Secur. Appl. 72, 103398 (2023)","journal-title":"J. Inf. Secur. Appl."},{"key":"998_CR52","doi-asserted-by":"crossref","unstructured":"Hossain, K.M., Oates, T.: Advancing security in AI systems: a novel approach to detecting backdoors in deep neural networks. In: arXiv preprint arXiv:2403.08208 (2024)","DOI":"10.1109\/ICC51166.2024.10622312"},{"key":"998_CR53","unstructured":"Laishram, R., Phoha, V.V.: Curie: a method for protecting SVM classifier from poisoning attack. In: arXiv preprint arXiv:1606.01584 (2016)"},{"key":"998_CR54","doi-asserted-by":"crossref","first-page":"9944","DOI":"10.1109\/TPAMI.2021.3137564","volume":"44","author":"S Melacci","year":"2021","unstructured":"Melacci, S., Ciravegna, G., Sotgiu, A., Demontis, A., Biggio, B., Gori, M., Roli, F.: Domain knowledge alleviates adversarial attacks in multi-label classifiers. IEEE Trans. Pattern Anal. Mach. Intell. 44, 9944\u20139959 (2021)","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"998_CR55","doi-asserted-by":"crossref","unstructured":"Paudice, A., Mu\u00f1oz-Gonz\u00e1lez, L., Lupu, E.: Label sanitization against label flipping poisoning attacks. In: ECML PKDD 2018 Workshops: Nemesis 2018, UrbReas 2018, SoGood 2018, IWAISe 2018, and Green Data Mining 2018, pp. 5\u201315 (2019)","DOI":"10.1007\/978-3-030-13453-2_1"},{"key":"998_CR56","doi-asserted-by":"crossref","unstructured":"Shahid, A., Imteaj, A., Badsha, S., Hossain, M.: Assessing wearable human activity recognition systems against data poisoning attacks in differentially-private federated learning. In: 2023 IEEE International Conference On Smart Computing (SMARTCOMP), pp. 355\u2013360 (2023)","DOI":"10.1109\/SMARTCOMP58114.2023.00085"},{"key":"998_CR57","unstructured":"Wongrassamee, V., Mu\u00f1oz-Gonz\u00e1lez, L.: Can you Poison a Machine Learning Algorithm? (2017)"},{"key":"998_CR58","doi-asserted-by":"crossref","first-page":"1925","DOI":"10.1007\/s10994-021-06068-6","volume":"111","author":"W Huang","year":"2022","unstructured":"Huang, W., Zhao, X., Huang, X.: Embedding and extraction of knowledge in tree ensemble classifiers. Mach. Learn. 111, 1925\u20131958 (2022)","journal-title":"Mach. Learn."},{"key":"998_CR59","doi-asserted-by":"crossref","unstructured":"Xue, J., Zheng, M., Sheng, Y., Yang, L., Lou, Q., Jiang, L.: TrojFair: Trojan Fairness Attacks. arXiv preprint arXiv:2312.10508 (2023)","DOI":"10.1145\/3689217.3690620"},{"key":"998_CR60","first-page":"66","volume":"30","author":"J Steinhardt","year":"2017","unstructured":"Steinhardt, J., Koh, P.W.W., Liang, P.S.: Certified defenses for data poisoning attacks. Adv. Neural Inf. Process. Syst. 30, 66 (2017)","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"998_CR61","first-page":"1","volume":"22","author":"H Chen","year":"2023","unstructured":"Chen, H., Koushanfar, F.: Tutorial: toward robust deep learning against poisoning attacks. ACM Trans. Embed. Comput. Syst. 22, 1\u201315 (2023)","journal-title":"ACM Trans. Embed. Comput. Syst."},{"key":"998_CR62","unstructured":"Hayase, J., Kong, W., Somani, R., Oh, S.: Spectre: defending against backdoor attacks using robust statistics. In: International Conference on Machine Learning (PMLR), pp. 4129\u20134139 (2021)"},{"key":"998_CR63","doi-asserted-by":"crossref","first-page":"2566","DOI":"10.1109\/TIFS.2021.3058771","volume":"16","author":"S Weerasinghe","year":"2021","unstructured":"Weerasinghe, S., Alpcan, T., Erfani, S.M., Leckie, C.: Defending support vector machines against data poisoning attacks. IEEE Trans. Inf. Forensics Secur. 16, 2566\u20132578 (2021)","journal-title":"IEEE Trans. Inf. Forensics Secur."}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-00998-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-00998-1\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-00998-1.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,30]],"date-time":"2025-03-30T08:00:37Z","timestamp":1743321637000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-00998-1"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,2,26]]},"references-count":63,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2025,4]]}},"alternative-id":["998"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-00998-1","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"type":"print","value":"1615-5262"},{"type":"electronic","value":"1615-5270"}],"subject":[],"published":{"date-parts":[[2025,2,26]]},"assertion":[{"value":"26 February 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no known competing financial interests or personal relationships that could have appeared to influence the work reported in this paper.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"85"}}