{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,11]],"date-time":"2025-11-11T13:26:36Z","timestamp":1762867596727,"version":"3.28.0"},"reference-count":38,"publisher":"IEEE","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018,7]]},"DOI":"10.1109\/ijcnn.2018.8489495","type":"proceedings-article","created":{"date-parts":[[2018,10,19]],"date-time":"2018-10-19T18:25:09Z","timestamp":1539973509000},"page":"1-8","source":"Crossref","is-referenced-by-count":23,"title":["Attack Strength vs. Detectability Dilemma in Adversarial Machine Learning"],"prefix":"10.1109","author":[{"given":"Christopher","family":"Frederickson","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael","family":"Moore","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Glenn","family":"Dawson","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Robi","family":"Polikar","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref38","article-title":"Exploiting machine learning to subvert your spam filter","author":"nelson","year":"2008","journal-title":"Proceedings of the First Workshop on Largescale Exploits and Emerging Threats (LEET)"},{"key":"ref33","article-title":"Towards Deep Learning Models Resistant to Adversarial Attacks","author":"madry","year":"2017","journal-title":"ArXiv Preprint"},{"key":"ref32","article-title":"Unifying Adversarial Training Algorithms with Flexible Deep Data Gradient Regularization","author":"ororbia","year":"2016","journal-title":"ArXiv Preprint"},{"key":"ref31","article-title":"Early Methods for Detecting Adversarial Images","author":"hendrycks","year":"2017","journal-title":"ICLR 2017 Workshop track"},{"key":"ref30","article-title":"Adversarial and Clean Data Are Not Twins","author":"gong","year":"2017","journal-title":"ArXiv Preprint"},{"key":"ref37","first-page":"229","article-title":"Snort: Lightweight Intrusion Detection for Networks","author":"roesch","year":"1999","journal-title":"Proc LISA 99 13th Systems Administration Conf"},{"key":"ref36","first-page":"1","article-title":"Extending Defensive Distillation","author":"papernot","year":"2017","journal-title":"ArXiv Preprint"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref34","article-title":"Adversarial Machine Learning at Scale","author":"kurakin","year":"2017","journal-title":"ICLR 2017"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1137\/0222052"},{"key":"ref12","article-title":"Explaining and harnessing adversarial examples","author":"goodfellow","year":"2014","journal-title":"arXiv preprint arXiv 1412 6572"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref14","article-title":"Poisoning attacks against support vector machines","author":"biggio","year":"2012","journal-title":"arXiv preprint arXiv 1206 6389"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"ref16","first-page":"387","article-title":"Evasion Attacks against Machine Learning at Test Time","volume":"8190","author":"biggio","year":"2013","journal-title":"Machine Learning and Knowledge Discovery in Databases"},{"key":"ref17","article-title":"Practical black-box attacks against deep learning systems using adversarial examples","author":"papernot","year":"2016","journal-title":"arXiv preprint arXiv 1602 04875"},{"key":"ref18","first-page":"1","article-title":"Explaining and Harnessing Adversarial Examples","author":"goodfellow","year":"2015","journal-title":"ICLRE"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"key":"ref28","article-title":"Mitigating Evasion AAacks to Deep Neural Networks via Region-based Classification","author":"cao","year":"0","journal-title":"ArXiv Preprint"},{"key":"ref4","first-page":"261","article-title":"Credit card fraud detection using bayesian and neural networks","author":"maes","year":"2002","journal-title":"Proc 1st Int NAISO Congr Neuro Fuzzy Technologies"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/335191.335388"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1031171.1031252"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4614-3085-8"},{"key":"ref29","article-title":"Detecting Adversarial Samples from Artifacts","author":"feinman","year":"2017","journal-title":"ArXiv Preprint"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.ejor.2006.03.040"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046692"},{"key":"ref7","article-title":"Recommender systems for the department of defense and the intelligence community","author":"gadepally","year":"2016","journal-title":"MIT Lincoln Laboratory Lexington United States Tech Rep"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.elerap.2017.11.004"},{"key":"ref9","article-title":"Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning","author":"biggio","year":"2017","journal-title":"ArXiv Preprint"},{"key":"ref1","first-page":"1","article-title":"A machine learning architecture for optimizing web search engines","author":"boyan","year":"1996","journal-title":"AAAI-96 Workshop on Internet-Based Information Systems"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517321"},{"key":"ref22","first-page":"181","article-title":"Secret external encodings do not prevent transient fault analysis","author":"clavier","year":"2007","journal-title":"International Workshop on Cryptographic Hardware and Embedded Systems"},{"key":"ref21","first-page":"1689","article-title":"Is feature selection secure against training data poisoning?","author":"xiao","year":"2015","journal-title":"International Conference on Machine Learning"},{"key":"ref24","first-page":"2825","article-title":"Scikit-learn: Machine learning in Python","volume":"12","author":"pedregosa","year":"2011","journal-title":"Journal of Machine Learning Research"},{"article-title":"UCI machine learning repository","year":"2013","author":"lichman","key":"ref23"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2008.17"},{"key":"ref25","first-page":"582","article-title":"Support vector method for novelty detection","author":"scholkopf","year":"2000","journal-title":"Advances in neural information processing systems"}],"event":{"name":"2018 International Joint Conference on Neural Networks (IJCNN)","start":{"date-parts":[[2018,7,8]]},"location":"Rio de Janeiro","end":{"date-parts":[[2018,7,13]]}},"container-title":["2018 International Joint Conference on Neural Networks (IJCNN)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8465565\/8488986\/08489495.pdf?arnumber=8489495","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,8,24]],"date-time":"2020-08-24T00:08:54Z","timestamp":1598227734000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8489495\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,7]]},"references-count":38,"URL":"https:\/\/doi.org\/10.1109\/ijcnn.2018.8489495","relation":{},"subject":[],"published":{"date-parts":[[2018,7]]}}}