{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T02:47:08Z","timestamp":1781750828665,"version":"3.54.5"},"reference-count":192,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"},{"start":{"date-parts":[[2019,1,1]],"date-time":"2019-01-01T00:00:00Z","timestamp":1546300800000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS 1350145"],"award-info":[{"award-number":["CNS 1350145"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"University System of Maryland through the Wilson H. Elkins Professorship Award"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2019]]},"DOI":"10.1109\/access.2019.2948912","type":"journal-article","created":{"date-parts":[[2019,10,22]],"date-time":"2019-10-22T19:55:02Z","timestamp":1571774102000},"page":"158126-158147","source":"Crossref","is-referenced-by-count":137,"title":["Machine Learning for Security and the Internet of Things: The Good, the Bad, and the Ugly"],"prefix":"10.1109","volume":"7","author":[{"given":"Fan","family":"Liang","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"William Grant","family":"Hatcher","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weixian","family":"Liao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weichao","family":"Gao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4522-7340","authenticated-orcid":false,"given":"Wei","family":"Yu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref170","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1016\/j.jnca.2012.09.004","article-title":"Intrusion detection system: A comprehensive review","volume":"36","author":"liao","year":"2013","journal-title":"J Netw Comput Appl"},{"key":"ref172","author":"gershgorn","year":"2017","journal-title":"Microsoft’s AI is Learning to Write Code By Itself Not Steal It"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"ref174","author":"beltov","year":"2017","journal-title":"Artificial Intelligence Can Drive Ransomware Attacks"},{"key":"ref173","author":"arntz","year":"2018","journal-title":"How Artificial Intelligence and Machine Learning Will Impact Cybersecurity"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1109\/TCNS.2017.2690399"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523658"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1126\/science.aar6404"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.1109\/37.969131"},{"key":"ref168","doi-asserted-by":"crossref","first-page":"217","DOI":"10.1007\/978-3-030-21568-2_11","article-title":"PassGAN: A deep learning approach for password guessing","author":"hitaj","year":"2019","journal-title":"Proc Int Conf Appl Cryptogr Netw Secur"},{"key":"ref169","year":"2017","journal-title":"Ultra-Realistic Voice Cloning and Text-to-Speech"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2830661"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2019.2928551"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/ISKE.2017.8258762"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.23919\/ChiCC.2017.8028313"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2017.2665545"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/505282.505283"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2017.2743240"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1038\/529445a"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ISC2.2017.8090799"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/WASPAA.2017.8170030"},{"key":"ref181","author":"vincent","year":"2018","journal-title":"Did Elon Musk’s AI Champ Destroy Humans at Video Games? It’s Complicated"},{"key":"ref180","year":"2018","journal-title":"An Old-Fashioned AI Has Won a Starcraft Shootout"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1145\/3209542.3209576"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1109\/CIG.2016.7860416"},{"key":"ref183","author":"bursztein","year":"2018","journal-title":"Elie"},{"key":"ref182","year":"2018","journal-title":"Openai five"},{"key":"ref189","year":"2018","journal-title":"Inside the Pentagon’s Race Against Deepfake Videos"},{"key":"ref188","first-page":"175","article-title":"Fast, lean, and accurate: Modeling password guessability using neural networks","author":"melicher","year":"2016","journal-title":"Proc 25th USENIX Secur Symp (USENIX Secur )"},{"key":"ref187","article-title":"Weaponizing data science for social engineering: Automated E2E spear phishing on Twitter","volume":"37","author":"seymour","year":"2016"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/SECON.2011.5752976"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2016.2644615"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2788044"},{"key":"ref179","author":"churchill","year":"2018","journal-title":"A History of Starcraft AI Competitions StarCraft AI Competition"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2016.1600317WC"},{"key":"ref20","article-title":"Poisoning attacks against support vector machines","author":"biggio","year":"2012","journal-title":"arXiv 1206 6389"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MC.2017.201"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2017.316"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2707465"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2920763"},{"key":"ref101","article-title":"Towards edge-based deep learning in industrial Internet of Things","author":"liang","year":"2019"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MCE.2016.2640698"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/SMC.2016.7844820"},{"key":"ref25","doi-asserted-by":"crossref","first-page":"436","DOI":"10.1038\/nature14539","article-title":"Deep learning","volume":"521","author":"lecun","year":"2015","journal-title":"Nature"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2018.8422830"},{"key":"ref51","doi-asserted-by":"crossref","first-page":"141","DOI":"10.1007\/978-3-319-48057-2_9","article-title":"Collective anomaly detection based on long short-term memory recurrent neural networks","author":"bontemps","year":"2016","journal-title":"Proc Int Conf Future Data Secur Eng"},{"key":"ref154","author":"dickson","year":"2019","journal-title":"The Security Threats of Neural Networks and Deep Learning Algorithms"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2014.7039487"},{"key":"ref156","article-title":"Exploring the dark side and the downside of entrepreneurship with machine learning, sentiment analysis and experience sampling methodologies","author":"williamson","year":"2019"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2018.1700349"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1145\/3063386.3063767"},{"key":"ref152","article-title":"Robust physical-world attacks on deep learning models","author":"eykholt","year":"2017","journal-title":"arXiv 1707 08945"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/524"},{"key":"ref146","first-page":"1","article-title":"Exploiting machine learning to subvert your spam filter","volume":"8","author":"nelson","year":"2008","journal-title":"Proc lEE"},{"key":"ref147","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44581-1_31"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1016\/j.ifacol.2015.06.318"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1145\/1023875.1023881"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2013.6831173"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.070813.00214"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2018.8622120"},{"key":"ref56","first-page":"97","article-title":"Multidimensional time series anomaly detection: A GRU-based Gaussian mixture variational autoencoder approach","author":"guo","year":"2018","journal-title":"Proc Asian Conf Mach Learn"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.4108\/eai.3-12-2015.2262516"},{"key":"ref54","first-page":"579","article-title":"Network-based intrusion detection using neural networks","volume":"12","author":"bivens","year":"2002","journal-title":"Intell Eng Syst Artificial Neural Networks"},{"key":"ref53","article-title":"A distributed deep learning system for Web attack detection on edge devices","author":"tian","year":"0","journal-title":"IEEE Trans Ind Informat"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2762418"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1016\/j.bdr.2015.11.002"},{"key":"ref167","first-page":"203","article-title":"Better managed than memorized? Studying the impact of managers on password strength and reuse","author":"lyastani","year":"2018","journal-title":"Proc 7th USENIX Secur Symp (USENIX Secur )"},{"key":"ref166","author":"thomson","year":"2017","journal-title":"AI Slurps Learns Millions of Passwords to Work Out Which Ones You May Use Next"},{"key":"ref165","first-page":"94","article-title":"Captcha recognition with active deep learning","author":"stark","year":"2015","journal-title":"Proc Workshop New Challenges Neural Comput"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-27057-9_2"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2867556"},{"key":"ref162","author":"kubovic","year":"2018","journal-title":"Can Artificial Intelligence Power Future Malware?"},{"key":"ref161","author":"kassner","year":"2017","journal-title":"Using AI-Enhanced Malware Researchers Disrupt Algorithms Used in Antimalware"},{"key":"ref160","author":"rosebrock","year":"2017","journal-title":"Deep Learning for Computer Vision With Python ImageNet Bundle"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2806881"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2844341"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2015.15"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2016.2640563"},{"key":"ref159","article-title":"Image and attribute based convolutional neural network inference attacks in social networks","author":"mei","year":"0","journal-title":"IEEE Transactions on Network Science and Engineering"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2019.2932911"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2015.7158098"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2015.7288438"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.1017\/CBO9781107298019"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1007\/s11042-015-2464-1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2690902"},{"key":"ref46","first-page":"461","article-title":"CT-GAN: Malicious tampering of 3D medical imagery using deep learning","author":"mirsky","year":"2019","journal-title":"Proc 28th USENIX Secur Symp (USENIX Secur )"},{"key":"ref45","first-page":"533","article-title":"Towards large-scale hunting for Android negative-day malware","author":"yuan","year":"2019","journal-title":"Proc 20th Int Symp Res Attacks Intrusions Defenses (RAID)"},{"key":"ref48","doi-asserted-by":"crossref","first-page":"425","DOI":"10.1007\/978-3-319-61893-7_25","article-title":"Big data security and privacy","author":"bertino","year":"2018","journal-title":"A Comprehensive Guide Through the Italian Database Research Over the Last 25 Years"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/NCC.2016.7561088"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1504\/IJSN.2013.058152"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/CNS.2013.6682765"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/ISNCC.2016.7746067"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2015.01.009"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/CSF.2016.32"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813677"},{"key":"ref125","article-title":"Adversarial attacks and defences: A survey","author":"chakraborty","year":"2018","journal-title":"arXiv 1810 00069"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.939038"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2018.2845744"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2015.2388479"},{"key":"ref129","article-title":"Comprehensive privacy analysis of deep learning: Stand-alone and federated learning under passive and active white-box inference attacks","author":"nasr","year":"2018","journal-title":"arXiv 1812 00910"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2017.7983272"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1587\/transinf.2017ICP0013"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS.2012.26"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2017.2686367"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2018.00957"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2761353"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1002\/sec.835"},{"key":"ref75","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2016.7568478"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2009.5199054"},{"key":"ref134","first-page":"488","article-title":"Using an ensemble of one-class SVM classifiers to harden payload-based anomaly detection systems","volume":"6","author":"perdisci","year":"2006","journal-title":"Proc ICDM"},{"key":"ref131","first-page":"2687","article-title":"Learning to attack: Adversarial transformation networks","author":"baluja","year":"2018","journal-title":"Proc AAAI"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2016.2546259"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2933020"},{"key":"ref136","first-page":"227","article-title":"Anomalous payload-based worm detection and signature generation","author":"wang","year":"2005","journal-title":"Proc Int Workshop Recent Adv Intrusion Detection"},{"key":"ref135","doi-asserted-by":"crossref","first-page":"510","DOI":"10.1007\/978-3-642-31537-4_40","article-title":"A pattern recognition system for malicious PDF files detection","author":"maiorca","year":"2012","journal-title":"Proc Int Workshop Mach Learn Data Mining Pattern Recognit"},{"key":"ref138","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74320-0_13"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2010.02.023"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SNPD.2018.8441128"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2019.8685502"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.2013.6567003"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1145\/2740070.2631434"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1109\/IJCNN.2016.7727705"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(03)00212-8"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS.2016.7502997"},{"key":"ref141","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1007\/11856214_5","article-title":"Paragraph: Thwarting signature learning by training maliciously","author":"newsome","year":"2006","journal-title":"Proc Int Workshop Recent Adv Intrusion Detection"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/PlatCon.2016.7456805"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2006.26"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1002\/sec.957"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644895"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653666"},{"key":"ref144","first-page":"74","article-title":"Feature omission vulnerabilities: Thwarting signature generation for polymorphic worms","author":"van gundy","year":"2007","journal-title":"Proc 23rd Annu Comput Secur Appl Conf (ACSAC)"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2014.2312291"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1109\/TPDS.2013.92"},{"key":"ref145","first-page":"15","article-title":"Hamsa: Fast signature generation for zero-day polymorphic worms with provable attack resilience","author":"li","year":"2006","journal-title":"Proc IEEE Symp Secur Privacy (SP)"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2683200"},{"key":"ref109","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2017.10.009"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1109\/TBDATA.2017.2787198"},{"key":"ref190","author":"kirat","year":"2018","journal-title":"DeepLocker Concealing Targeted Attacks With AI Locksmithing"},{"key":"ref108","doi-asserted-by":"publisher","DOI":"10.1109\/ICCNC.2019.8685584"},{"key":"ref94","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2017.23149"},{"key":"ref191","article-title":"Decision-based adversarial attacks: Reliable attacks against black-box machine learning models","author":"brendel","year":"2017","journal-title":"arXiv 1712 04248"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.3390\/s17040818"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/MIC.2018.011581520"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2009.191"},{"key":"ref106","first-page":"865","article-title":"Traffic flow prediction with big data: A deep learning approach","volume":"16","author":"lv","year":"2015","journal-title":"IEEE Trans Intell Transp Syst"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2747560"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2705798"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2759728"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2019.8847069"},{"key":"ref90","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2016.1500356WC"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1109\/ICNP.2017.8117585"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1145\/2663761.2663768"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2778504"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"ref110","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2018.07.023"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1109\/TETC.2018.2805718"},{"key":"ref99","article-title":"Reinforcement learning-based control and networking co-design for industrial Internet of Thing SV","author":"xu","year":"2019"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1109\/LCN.2017.112"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2017.123"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2775180"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICII.2018.00021"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.01.058"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1080\/00207543.2017.1351644"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2017.2668061"},{"key":"ref15","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-319-47946-0","author":"wang","year":"2016","journal-title":"Wireless Health"},{"key":"ref118","article-title":"Generating adversarial malware examples for black-box attacks based on GAN","author":"hu","year":"2017","journal-title":"arXiv 1702 05983"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2013.177"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813687"},{"key":"ref117","first-page":"155","article-title":"Breaking reCAPTCHAs with unpredictable collapse: Heuristic character segmentation and recognition","author":"cruz-perez","year":"2012","journal-title":"Proc Conf on Pattern Recognition"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2931659"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2018\/547"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2016.2610963"},{"key":"ref84","article-title":"Evolution of endpoint detection and response platforms","author":"liggett","year":"2018"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.41"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICDCS.2017.284"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00019"},{"key":"ref114","first-page":"1627","article-title":"Inadvertently making cyber criminals rich: A comprehensive study of cryptojacking campaigns at Internet scale","author":"bijmans","year":"2019","journal-title":"Proc 28th USENIX Secur Symp (USENIX Secur )"},{"key":"ref113","first-page":"479","article-title":"Misleading authorship attribution of source code using adversarial learning","author":"quiring","year":"2019","journal-title":"Proc 28th USENIX Secur Symp (USENIX Secur )"},{"key":"ref116","article-title":"I’m not a human: Breaking the Google recaptcha","author":"sivakorn","year":"2016"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2017.2703842"},{"key":"ref115","first-page":"621","article-title":"SPOILER: Speculative load hazards boost Rowhammer and cache attacks","author":"islam","year":"2019","journal-title":"Proc 28th USENIX Secur Symp (USENIX Secur )"},{"key":"ref120","first-page":"601","article-title":"Stealing machine learning models via prediction apis","author":"tram\u00e8r","year":"2016","journal-title":"Proc 25th USENIX Secur Symp (USENIX Secur )"},{"key":"ref89","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2884906"},{"key":"ref121","article-title":"Adversarial examples in deep learning: Characterization and divergence","author":"wei","year":"2018","journal-title":"arXiv 1807 00051"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref123","first-page":"321","article-title":"Why do adversarial attacks transfer? Explaining transferability of evasion and poisoning attacks","author":"demontis","year":"2019","journal-title":"Proc 28th USENIX Secur Symp (USENIX Secur )"},{"key":"ref85","article-title":"Marginalized denoising autoencoders for domain adaptation","author":"chen","year":"2012","journal-title":"arXiv 1206 4683"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCN.2019.8846936"},{"key":"ref87","first-page":"1453","article-title":"Online incremental feature learning with denoising autoencoders","author":"zhou","year":"2012","journal-title":"Proc Artif Intell Statist"},{"key":"ref88","article-title":"Artificial neural networks-based machine learning for wireless networks: A tutorial","author":"chen","year":"0","journal-title":"IEEE Commun Surveys Tuts"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6287639\/8600701\/8879591-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/8600701\/08879591.pdf?arnumber=8879591","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,8]],"date-time":"2022-04-08T18:53:50Z","timestamp":1649444030000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8879591\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019]]},"references-count":192,"URL":"https:\/\/doi.org\/10.1109\/access.2019.2948912","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019]]}}}