{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,26]],"date-time":"2026-07-26T03:45:59Z","timestamp":1785037559260,"version":"3.55.0"},"reference-count":47,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"6","license":[{"start":{"date-parts":[[2015,11,1]],"date-time":"2015-11-01T00:00:00Z","timestamp":1446336000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1219570"],"award-info":[{"award-number":["CNS-1219570"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE J. Biomed. Health Inform."],"published-print":{"date-parts":[[2015,11]]},"DOI":"10.1109\/jbhi.2014.2344095","type":"journal-article","created":{"date-parts":[[2014,7,30]],"date-time":"2014-07-30T20:46:30Z","timestamp":1406753190000},"page":"1893-1905","source":"Crossref","is-referenced-by-count":289,"title":["Systematic Poisoning Attacks on and Defenses for Machine Learning in Healthcare"],"prefix":"10.1109","volume":"19","author":[{"given":"Mehran","family":"Mozaffari-Kermani","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Susmita","family":"Sur-Kolay","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anand","family":"Raghunathan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Niraj K.","family":"Jha","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","year":"2014"},{"key":"ref38","year":"2014"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1145\/1015330.1015415"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/BF00153759"},{"key":"ref31","first-page":"202","article-title":"Scaling up the accuracy of naive-Bayes classifiers: A decision-tree hybrid","author":"kohavi","year":"0","journal-title":"Proc Int Conf Knowl Discovery Data Mining"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1017\/S0269888909000241"},{"key":"ref37","year":"2014"},{"key":"ref36","first-page":"975","article-title":"Probability estimates for multi-class classification by pairwise coupling","volume":"5","author":"wu","year":"2004","journal-title":"J Mach Learn Res"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1162\/089976601300014493"},{"key":"ref34","first-page":"185","author":"platt","year":"1999","journal-title":"Advances in Kernel Methods"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/TIT.2011.2164053"},{"key":"ref40","year":"2014"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-010-9156-z"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046698"},{"key":"ref13","first-page":"7:1","article-title":"Exploiting machine learning to subvert your spam filter","author":"nelson","year":"0","journal-title":"USENIX Workshop on Large-scale Exploits and Emergent Threats"},{"key":"ref14","first-page":"1","article-title":"Hiding intrusions: From the abnormal to the normal and beyond","author":"tan","year":"0","journal-title":"Proc Int Workshop Inf Hiding"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1145\/1639562.1639592"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2013.57"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046692"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1214\/aos\/1016218223"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/PASSAT\/SocialCom.2011.34"},{"key":"ref27","article-title":"Best-first decision tree learning","author":"shi","year":"2007"},{"key":"ref3","first-page":"1","article-title":"Large-scale automatic classification of phishing pages","author":"whittaker","year":"0","journal-title":"Proc Symp Netw Distrib Syst Security"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2006.02.016"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15037-1_17"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020455"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2011.124"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/335191.335438"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1023\/A:1006624031083"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2004.45"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/4235.910462"},{"key":"ref46","year":"2014"},{"key":"ref20","first-page":"2617","article-title":"Static prediction games for adversarial learning problems","volume":"13","author":"br\u00fcckner","year":"2012","journal-title":"J Mach Learn Res"},{"key":"ref45","first-page":"236","article-title":"Why and how to define a similarity measure for object based representation systems","author":"bisson","year":"0","journal-title":"Toward Very Large Knowledge Bases"},{"key":"ref22","first-page":"1807","article-title":"Poisoning attacks against support vector machines","author":"biggio","year":"0","journal-title":"Proc Int Conf Mach Learn"},{"key":"ref47","first-page":"249","article-title":"Assessing agreement on classification tasks: The Kappa statistic","volume":"22","author":"carletta","year":"1996","journal-title":"Comput Linguist"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1155\/2011\/893592"},{"key":"ref24","first-page":"405","article-title":"Online anomaly detection under adversarial impact","volume":"9","author":"kloft","year":"2010","journal-title":"J Mach Learn Res"},{"key":"ref41","year":"2014"},{"key":"ref23","first-page":"1","article-title":"ANTIDOTE: Understanding and defending against poisoning of anomaly detectors","author":"rubinstein","year":"0","journal-title":"Proc ACM SIGCOMM Internet Meas Conf"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-005-0466-3"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143889"},{"key":"ref43","year":"2014"},{"key":"ref25","first-page":"350","article-title":"Bagging classifiers for fighting poisoning attacks in adversarial classification tasks","author":"biggio","year":"0","journal-title":"Proc Conf Multiple Classifier Systems"}],"container-title":["IEEE Journal of Biomedical and Health Informatics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6221020\/7317613\/06868201.pdf?arnumber=6868201","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T16:28:06Z","timestamp":1642004886000},"score":1,"resource":{"primary":{"URL":"http:\/\/ieeexplore.ieee.org\/document\/6868201\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,11]]},"references-count":47,"journal-issue":{"issue":"6"},"URL":"https:\/\/doi.org\/10.1109\/jbhi.2014.2344095","relation":{},"ISSN":["2168-2194","2168-2208"],"issn-type":[{"value":"2168-2194","type":"print"},{"value":"2168-2208","type":"electronic"}],"subject":[],"published":{"date-parts":[[2015,11]]}}}