{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T09:12:05Z","timestamp":1790673125687,"version":"4.1.0"},"reference-count":68,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2016,3,1]],"date-time":"2016-03-01T00:00:00Z","timestamp":1456790400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2016,3,1]],"date-time":"2016-03-01T00:00:00Z","timestamp":1456790400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2016,3,1]],"date-time":"2016-03-01T00:00:00Z","timestamp":1456790400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["61003171"],"award-info":[{"award-number":["61003171"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["61272201"],"award-info":[{"award-number":["61272201"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["61003172"],"award-info":[{"award-number":["61003172"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100009873","name":"Regione Autonoma della Sardegna","doi-asserted-by":"crossref","award":["CRP-18293 L. R. 7\/2007 Bando 2009"],"award-info":[{"award-number":["CRP-18293 L. R. 7\/2007 Bando 2009"]}],"id":[{"id":"10.13039\/501100009873","id-type":"DOI","asserted-by":"crossref"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Cybern."],"published-print":{"date-parts":[[2016,3]]},"DOI":"10.1109\/tcyb.2015.2415032","type":"journal-article","created":{"date-parts":[[2015,4,21]],"date-time":"2015-04-21T18:42:27Z","timestamp":1429641747000},"page":"766-777","source":"Crossref","is-referenced-by-count":185,"title":["Adversarial Feature Selection Against Evasion Attacks"],"prefix":"10.1109","volume":"46","author":[{"given":"Fei","family":"Zhang","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick P. K.","family":"Chan","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Battista","family":"Biggio","sequence":"additional","affiliation":[{"name":"Department of Electrical and Electronic Engineering, University of Cagliari, Cagliari, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniel S.","family":"Yeung","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, South China University of Technology, Guangzhou, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabio","family":"Roli","sequence":"additional","affiliation":[{"name":"Department of Electrical and Electronic Engineering, University of Cagliari, Cagliari, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCB.2012.2195000"},{"key":"ref12","first-page":"2617","article-title":"Static prediction games for adversarial learning problems","volume":"13","author":"br\u00fcckner","year":"2012","journal-title":"J Mach Learn Res"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2005.159"},{"key":"ref15","article-title":"Feature weighting for improved classifier robustness","author":"kolcz","year":"2009","journal-title":"Proc 6th Conf Email Anti-Spam"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-005-1505-9"},{"key":"ref14","article-title":"On attacking statistical spam filters","author":"wittel","year":"2004","journal-title":"Proc 1st Conf Email Anti-Spam"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1016\/S0004-3702(97)00043-X"},{"key":"ref53","first-page":"1791","article-title":"Feature selection via probabilistic outputs","author":"andrea","year":"2012","journal-title":"Proc 29th Int Conf Mach Learn"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1016\/S0004-3702(03)00079-1"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2013.57"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCB.2012.2193613"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/2046684.2046692"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCB.2012.2225832"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1145\/2484313.2484327"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-010-0007-7"},{"key":"ref19","first-page":"387","article-title":"Evasion attacks against machine learning at test time","author":"biggio","year":"2013","journal-title":"Machine Learning and Knowledge Discovery in Databases"},{"key":"ref18","article-title":"Detection of malicious pdf files based on hierarchical document structure","author":"\u0161rndi?","year":"2013","journal-title":"Proc 20th Annu Netw Distrib Syst Security Symp"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CISIS.2010.116"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2011.10.006"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/btm344"},{"key":"ref45","first-page":"329","article-title":"Feature selection in high-dimensional classification","volume":"28","author":"kolar","year":"2013","journal-title":"Proc 30th Int Conf Mach Learn (ICML Track)"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2007.06.005"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2010.01.001"},{"key":"ref42","first-page":"1293","article-title":"Query strategies for evading convex-inducing classifiers","volume":"13","author":"nelson","year":"2012","journal-title":"J Mach Learn Res"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/1081870.1081950"},{"key":"ref44","first-page":"1157","article-title":"An introduction to variable and feature selection","volume":"3","author":"guyon","year":"2003","journal-title":"J Mach Learn Res"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-02326-2_14"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.3233\/JCS-2002-101-202"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-02300-7_4"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ICSMC.2011.6083796"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/1132026.1132027"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_5"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-88735-7_2"},{"key":"ref5","article-title":"Good word attacks on statistical spam filters","author":"lowd","year":"2005","journal-title":"Proc 2nd Conf Email Anti-Spam"},{"key":"ref40","article-title":"A ‘poisoning’ attack against online anomaly detection","author":"kloft","year":"2007","journal-title":"Proc NIPS Workshop Mach Learn Advers Environ Comput Security"},{"key":"ref35","first-page":"2087","article-title":"Feature cross-substitution in adversarial classification","author":"li","year":"2014","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-03999-7_2"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1023\/A:1012487302797"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2014.117"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-12127-2_8"},{"key":"ref30","first-page":"1489","article-title":"Convex learning with invariances","author":"teo","year":"2008","journal-title":"NIPS 20"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21557-5_37"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.11"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jvlc.2009.01.010"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1049\/iet-bmt.2011.0012"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref38","first-page":"27","article-title":"Conditional likelihood maximisation: A unifying framework for information theoretic feature selection","volume":"13","author":"brown","year":"2012","journal-title":"J Mach Learn Res"},{"key":"ref24","article-title":"Spam deobfuscation using a hidden Markov model","author":"lee","year":"2005","journal-title":"Proc Int Conf Email Anti-Spam"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1145\/505282.505283"},{"key":"ref23","first-page":"1115","article-title":"A multiple instance learning strategy for combating good word attacks on spam filters","volume":"9","author":"jorgensen","year":"2008","journal-title":"J Mach Learn Res"},{"key":"ref67","first-page":"123","article-title":"TREC 2007 spam track overview","author":"cormack","year":"2007","journal-title":"Proc 16th Text Retrieval Conf (TREC)"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644895"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/11856214_12"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143889"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1016\/j.chemolab.2007.01.004"},{"key":"ref63","doi-asserted-by":"crossref","DOI":"10.1002\/0470010940","author":"maronna","year":"2006","journal-title":"Robust Statistics Theory and Methods"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44415-3_5"},{"key":"ref66","volume":"999","author":"manning","year":"1999","journal-title":"Foundations of Statistical Natural Language Processing"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/2517312.2517321"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-2440-0"},{"key":"ref28","first-page":"405","article-title":"Online anomaly detection under adversarial impact","author":"kloft","year":"2010","journal-title":"Proc 13th Int Conf Artif Intell Stat"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/1900546.1900567"},{"key":"ref29","first-page":"1807","article-title":"Poisoning attacks against support vector machines","author":"biggio","year":"2012","journal-title":"Proc 29th Int Conf Mach Learn"},{"key":"ref60","first-page":"1439","article-title":"Use of the zero norm with linear models and kernel methods","volume":"3","author":"weston","year":"2003","journal-title":"J Mach Learn Res"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1002\/0471725250"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-39736-3_12"}],"container-title":["IEEE Transactions on Cybernetics"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6221036\/7406788\/07090993.pdf?arnumber=7090993","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,4,27]],"date-time":"2023-04-27T21:27:06Z","timestamp":1682630826000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7090993\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,3]]},"references-count":68,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tcyb.2015.2415032","relation":{},"ISSN":["2168-2267","2168-2275"],"issn-type":[{"value":"2168-2267","type":"print"},{"value":"2168-2275","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,3]]}}}