{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,24]],"date-time":"2026-01-24T17:44:34Z","timestamp":1769276674347,"version":"3.49.0"},"reference-count":47,"publisher":"Springer Science and Business Media LLC","issue":"6","license":[{"start":{"date-parts":[[2017,1,24]],"date-time":"2017-01-24T00:00:00Z","timestamp":1485216000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Mach. Learn. & Cyber."],"published-print":{"date-parts":[[2018,6]]},"DOI":"10.1007\/s13042-016-0629-5","type":"journal-article","created":{"date-parts":[[2017,1,24]],"date-time":"2017-01-24T19:05:00Z","timestamp":1485284700000},"page":"1039-1052","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":36,"title":["Data sanitization against adversarial label contamination based on data complexity"],"prefix":"10.1007","volume":"9","author":[{"given":"Patrick P. K.","family":"Chan","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhi-Min","family":"He","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongjiang","family":"Li","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chien-Chang","family":"Hsu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2017,1,24]]},"reference":[{"key":"629_CR1","doi-asserted-by":"crossref","unstructured":"Alfeld S, Zhu X, Barford P (2016) Data poisoning attacks against autoregressive models. In: Proceedings of the thirtieth AAAI conference on artificial intelligence, AAAI\u201916, pp 1452\u20131458","DOI":"10.1609\/aaai.v30i1.10237"},{"key":"629_CR2","doi-asserted-by":"crossref","unstructured":"Amos B, Turner H, White J (2013) Applying machine learning classifiers to dynamic android malware detection at scale. In: Wireless communications and mobile computing conference (IWCMC), IEEE, pp 1666\u20131671","DOI":"10.1109\/IWCMC.2013.6583806"},{"key":"629_CR3","doi-asserted-by":"crossref","unstructured":"Barreno M, Nelson B, Sears R, Joseph AD, Tygar JD (2006) Can machine learning be secure? In: Proceedings of the 2006 ACM symposium on information, computer and communications security, ACM, pp 16\u201325","DOI":"10.1145\/1128817.1128824"},{"issue":"2","key":"629_CR4","doi-asserted-by":"crossref","first-page":"121","DOI":"10.1007\/s10994-010-5188-5","volume":"81","author":"M Barreno","year":"2010","unstructured":"Barreno M, Nelson B, Joseph AD, Tygar J (2010) The security of machine learning. Mach Learn 81(2):121\u2013148","journal-title":"Mach Learn"},{"issue":"1","key":"629_CR5","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1109\/TEVC.2004.840153","volume":"9","author":"E Bernad\u00f3-Mansilla","year":"2005","unstructured":"Bernad\u00f3-Mansilla E, Ho TK (2005) Domain of competence of xcs classifier system in complexity measurement space. IEEE Trans Evol Comput 9(1):82\u2013104","journal-title":"IEEE Trans Evol Comput"},{"issue":"1\u20134","key":"629_CR6","doi-asserted-by":"crossref","first-page":"27","DOI":"10.1007\/s13042-010-0007-7","volume":"1","author":"B Biggio","year":"2010","unstructured":"Biggio B, Fumera G, Roli F (2010) Multiple classifier systems for robust classifier design in adversarial environments. Int J Mach Learn Cybernet 1(1\u20134):27\u201341","journal-title":"Int J Mach Learn Cybernet"},{"key":"629_CR7","doi-asserted-by":"crossref","unstructured":"Biggio B, Corona I, Fumera G, Giacinto G, Roli F (2011a) Bagging classifiers for fighting poisoning attacks in adversarial classification tasks. In: Multiple classifier systems. Springer, Berlin, pp 350\u2013359","DOI":"10.1007\/978-3-642-21557-5_37"},{"key":"629_CR8","doi-asserted-by":"crossref","unstructured":"Biggio B, Fumera G, Roli F (2011b) Design of robust classifiers for adversarial environments. In: IEEE international conference on systems, man, and cybernetics (SMC), IEEE, pp 977\u2013982","DOI":"10.1109\/ICSMC.2011.6083796"},{"key":"629_CR9","unstructured":"Biggio B, Nelson B, Laskov P (2011c) Support vector machines under adversarial label noise. In: ACML, pp 97\u2013112"},{"key":"629_CR10","unstructured":"Biggio B, Nelson B, Laskov P (2012) Poisoning attacks against support vector machines. In: 29th intl conf. on machine learning (ICML), pp 1807\u20131814"},{"issue":"4","key":"629_CR11","doi-asserted-by":"crossref","first-page":"984","DOI":"10.1109\/TKDE.2013.57","volume":"26","author":"B Biggio","year":"2014","unstructured":"Biggio B, Fumera G, Roli F (2014) Security evaluation of pattern classifiers under attack. IEEE Trans Knowl Data Eng 26(4):984\u2013996","journal-title":"IEEE Trans Knowl Data Eng"},{"issue":"1","key":"629_CR12","first-page":"2617","volume":"13","author":"M Br\u00fcckner","year":"2012","unstructured":"Br\u00fcckner M, Kanzow C, Scheffer T (2012) Static prediction games for adversarial learning problems. J Mach Learn Res 13(1):2617\u20132654","journal-title":"J Mach Learn Res"},{"key":"629_CR13","doi-asserted-by":"crossref","unstructured":"Chan PPK, Yang C, Yeung DS, Ng WWY (2015) Spam filtering for short messages in adversarial environment. Neurocomputing 155(C):167\u2013176","DOI":"10.1016\/j.neucom.2014.12.034"},{"key":"629_CR14","doi-asserted-by":"crossref","first-page":"201","DOI":"10.1016\/j.ins.2013.03.022","volume":"239","author":"I Corona","year":"2013","unstructured":"Corona I, Giacinto G, Roli F (2013) Adversarial attacks against intrusion detection systems: taxonomy, solutions and open issues. Inf Sci 239:201\u2013225","journal-title":"Inf Sci"},{"key":"629_CR15","doi-asserted-by":"crossref","unstructured":"Cretu GF, Stavrou A, Locasto ME, Stolfo SJ, Keromytis AD (2008) Casting out demons: sanitizing training data for anomaly sensors. In: IEEE symposium on security and privacy, IEEE, pp 81\u201395","DOI":"10.1109\/SP.2008.11"},{"key":"629_CR16","doi-asserted-by":"crossref","unstructured":"Dalvi N, Domingos P, Sanghai S, Verma D, et\u00a0al (2004) Adversarial classification. In: Proceedings of the tenth ACM SIGKDD international conference on Knowledge discovery and data mining, ACM, pp 99\u2013108","DOI":"10.1145\/1014052.1014066"},{"key":"629_CR17","unstructured":"Fefilatyev S, Shreve M, Kramer K, Hall L, Goldgof D, Kasturi R, Daly K, Remsen A, Bunke H (2012) Label-noise reduction with support vector machines. In: 21st international conference on pattern recognition (ICPR), IEEE, pp 3504\u20133508"},{"key":"629_CR18","doi-asserted-by":"crossref","unstructured":"Georgala K, Kosmopoulos A, Paliouras G (2014) Spam filtering: an active learning approach using incremental clustering. In: Proceedings of the 4th international conference on web intelligence, mining and semantics (WIMS14), ACM, pp 1\u201312","DOI":"10.1145\/2611040.2611059"},{"key":"629_CR19","doi-asserted-by":"crossref","unstructured":"Globerson A, Roweis S (2006) Nightmare at test time: robust learning by feature deletion. In: Proceedings of the 23rd international conference on Machine learning, ACM, pp 353\u2013360","DOI":"10.1145\/1143844.1143889"},{"issue":"4","key":"629_CR20","doi-asserted-by":"crossref","first-page":"607","DOI":"10.1007\/s13042-015-0348-3","volume":"6","author":"ZM He","year":"2015","unstructured":"He ZM, Chan PPK, Yeung DS, Pedrycz W, Ng WWY (2015) Quantification of side-channel information leaks based on data complexity measures for web browsing. Int J Mach Learn Cybernet 6(4):607\u2013619","journal-title":"Int J Mach Learn Cybernet"},{"issue":"3","key":"629_CR21","doi-asserted-by":"crossref","first-page":"289","DOI":"10.1109\/34.990132","volume":"24","author":"TK Ho","year":"2002","unstructured":"Ho TK, Basu M (2002) Complexity measures of supervised classification problems. IEEE Trans Pattern Anal Mach Intell 24(3):289\u2013300","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"key":"629_CR22","doi-asserted-by":"crossref","unstructured":"Huang L, Joseph AD, Nelson B, Rubinstein BI, Tygar J (2011) Adversarial machine learning. In: Proceedings of the 4th ACM workshop on security and artificial intelligence, ACM, pp 43\u201358","DOI":"10.1145\/2046684.2046692"},{"key":"629_CR23","first-page":"1115","volume":"9","author":"Z Jorgensen","year":"2008","unstructured":"Jorgensen Z, Zhou Y, Inge M (2008) A multiple instance learning strategy for combating good word attacks on spam filters. J Mach Learn Res 9:1115\u20131146","journal-title":"J Mach Learn Res"},{"issue":"8","key":"629_CR24","doi-asserted-by":"crossref","first-page":"67","DOI":"10.1109\/MC.2006.257","volume":"39","author":"JS Kong","year":"2006","unstructured":"Kong JS, Rezaei B, Sarshar N, Roychowdhury VP (2006) Collaborative spam filtering using e-mail networks. Computer 39(8):67\u201373","journal-title":"Computer"},{"key":"629_CR25","unstructured":"Lee H, Ng AY (2005) Spam deobfuscation using a hidden markov model. In: CEAS"},{"key":"629_CR26","unstructured":"Li B, Wang Y, Singh A, Vorobeychik Y (2016) Data poisoning attacks on factorization-based collaborative filtering. In: Advances in neural information processing systems, pp 1885\u20131893"},{"key":"629_CR27","unstructured":"Lichman M (2013) UCI machine learning repository. http:\/\/archive.ics.uci.edu\/ml"},{"key":"629_CR28","doi-asserted-by":"crossref","unstructured":"Lowd D, Meek C (2005) Adversarial learning. In: Proceedings of the eleventh ACM SIGKDD international conference on Knowledge discovery in data mining, ACM, pp 641\u2013647","DOI":"10.1145\/1081870.1081950"},{"issue":"1","key":"629_CR29","doi-asserted-by":"crossref","first-page":"43","DOI":"10.1016\/j.ins.2011.09.022","volume":"185","author":"J Luengo","year":"2012","unstructured":"Luengo J, Herrera F (2012) Shared domains of competence of approximate learning models using measures of separability of classes. Inf Sci 185(1):43\u201365","journal-title":"Inf Sci"},{"key":"629_CR30","unstructured":"Michie D, Spiegelhalter DJ, Taylor CC, Campbell J (eds) (1994) Machine learning, neural and statistical classification. Ellis Horwood, Upper Saddle River"},{"key":"629_CR31","first-page":"1","volume":"8","author":"B Nelson","year":"2008","unstructured":"Nelson B, Barreno M, Chi FJ, Joseph AD, Rubinstein BI, Saini U, Sutton CA, Tygar JD, Xia K (2008) Exploiting machine learning to subvert your spam filter. LEET 8:1\u20139","journal-title":"LEET"},{"key":"629_CR32","doi-asserted-by":"crossref","unstructured":"Nelson B, Barreno M, Chi FJ, Joseph AD, Rubinstein BI, Saini U, Sutton C, Tygar J, Xia K (2009) Misleading learners: co-opting your spam filter. In: Machine learning in cyber trust. Springer, Berlin, pp 17\u201351","DOI":"10.1007\/978-0-387-88735-7_2"},{"key":"629_CR33","doi-asserted-by":"crossref","unstructured":"Rubinstein BI, Nelson B, Huang L, Joseph AD, Lau Sh, Rao S, Taft N, Tygar J (2009) Antidote: understanding and defending against poisoning of anomaly detectors. In: Proceedings of the 9th ACM SIGCOMM conference on internet measurement conference, ACM, pp 1\u201314","DOI":"10.1145\/1644893.1644895"},{"issue":"1","key":"629_CR34","doi-asserted-by":"crossref","first-page":"355","DOI":"10.1016\/j.patcog.2012.07.009","volume":"46","author":"JA S\u00e1Ez","year":"2013","unstructured":"S\u00e1Ez JA, Luengo J, Herrera F (2013) Predicting noise filtering efficacy with data complexity measures for nearest neighbor classification. Pattern Recognit 46(1):355\u2013364","journal-title":"Pattern Recognit"},{"key":"629_CR35","doi-asserted-by":"crossref","unstructured":"Sahs J, Khan L (2012) A machine learning approach to android malware detection. In: Intelligence and security informatics conference (EISIC), IEEE, pp 141\u2013147","DOI":"10.1109\/EISIC.2012.34"},{"key":"629_CR36","unstructured":"Saini U (2008) Machine learning in the presence of an adversary: attacking and defending the spambayes spam filter. Tech. rep, DTIC Document"},{"key":"629_CR37","doi-asserted-by":"crossref","unstructured":"Satpute K, Agrawal S, Agrawal J, Sharma S (2013) A survey on anomaly detection in network intrusion detection system using particle swarm optimization based machine learning techniques. In: Proceedings of the international conference on frontiers of intelligent computing: theory and applications (FICTA), pp 441\u2013452","DOI":"10.1007\/978-3-642-35314-7_50"},{"key":"629_CR38","first-page":"633","volume":"4","author":"RA Servedio","year":"2003","unstructured":"Servedio RA (2003) Smooth boosting and learning with malicious noise. J Mach Learn Res 4:633\u2013648","journal-title":"J Mach Learn Res"},{"key":"629_CR39","doi-asserted-by":"crossref","first-page":"1534","DOI":"10.1109\/TPAMI.2003.1251146","volume":"12","author":"S Singh","year":"2003","unstructured":"Singh S (2003) Multiresolution estimates of classification complexity. IEEE Trans Pattern Anal Mach Intell 12:1534\u20131539","journal-title":"IEEE Trans Pattern Anal Mach Intell"},{"issue":"4","key":"629_CR40","doi-asserted-by":"crossref","first-page":"367","DOI":"10.1109\/TC.1968.229395","volume":"100","author":"FW Smith","year":"1968","unstructured":"Smith FW (1968) Pattern classifier design by linear programming. IEEE Trans Comput 100(4):367\u2013372","journal-title":"IEEE Trans Comput"},{"issue":"4","key":"629_CR41","doi-asserted-by":"crossref","first-page":"70","DOI":"10.1145\/2627534.2627557","volume":"41","author":"S Suthaharan","year":"2014","unstructured":"Suthaharan S (2014) Big data classification: problems and challenges in network intrusion prediction with machine learning. ACM SIGMETRICS Perform Eval Rev 41(4):70\u201373","journal-title":"ACM SIGMETRICS Perform Eval Rev"},{"key":"629_CR42","unstructured":"Wittel GL, Wu SF (2004) On attacking statistical spam filters. In: Conference on email and anti-spam"},{"key":"629_CR43","unstructured":"Xiao H, Xiao H, Eckert C (2012) Adversarial label flips attack on support vector machines. In: ECAI, pp 870\u2013875"},{"key":"629_CR44","unstructured":"Xiao H, Biggio B, Brown G, Fumera G, Eckert C, Roli F (2015a) Is feature selection secure against training data poisoning? In: Proceedings of the 32nd international conference on machine learning (ICML\u201915), pp 1689\u20131698"},{"key":"629_CR45","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1016\/j.neucom.2014.08.081","volume":"160","author":"H Xiao","year":"2015","unstructured":"Xiao H, Biggio B, Nelson B, Xiao H, Eckert C, Roli F (2015b) Support vector machines under adversarial label contamination. Neurocomputing 160:53\u201362","journal-title":"Neurocomputing"},{"key":"629_CR46","doi-asserted-by":"crossref","first-page":"766","DOI":"10.1109\/TCYB.2015.2415032","volume":"46","author":"F Zhang","year":"2016","unstructured":"Zhang F, Chan P, Biggio B, Yeung D, Roli F (2016) Adversarial feature selection against evasion attacks. IEEE Trans Cybernet 46:766\u2013777","journal-title":"IEEE Trans Cybernet"},{"issue":"1","key":"629_CR47","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1007\/s10844-013-0254-7","volume":"42","author":"B Zhou","year":"2014","unstructured":"Zhou B, Yao Y, Luo J (2014) Cost-sensitive three-way email spam filtering. J Intell Inf Syst 42(1):19\u201345","journal-title":"J Intell Inf Syst"}],"container-title":["International Journal of Machine Learning and Cybernetics"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s13042-016-0629-5\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s13042-016-0629-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s13042-016-0629-5.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,7,22]],"date-time":"2022-07-22T17:53:59Z","timestamp":1658512439000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/s13042-016-0629-5"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,1,24]]},"references-count":47,"journal-issue":{"issue":"6","published-print":{"date-parts":[[2018,6]]}},"alternative-id":["629"],"URL":"https:\/\/doi.org\/10.1007\/s13042-016-0629-5","relation":{},"ISSN":["1868-8071","1868-808X"],"issn-type":[{"value":"1868-8071","type":"print"},{"value":"1868-808X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,1,24]]}}}