{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,11,13]],"date-time":"2025-11-13T07:16:12Z","timestamp":1763018172474,"version":"3.37.3"},"reference-count":51,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2022,2,1]],"date-time":"2022-02-01T00:00:00Z","timestamp":1643673600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2022,2,1]],"date-time":"2022-02-01T00:00:00Z","timestamp":1643673600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,2,1]],"date-time":"2022-02-01T00:00:00Z","timestamp":1643673600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"publisher","award":["N00014-18-1-2452"],"award-info":[{"award-number":["N00014-18-1-2452"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Knowl. Data Eng."],"published-print":{"date-parts":[[2022,2,1]]},"DOI":"10.1109\/tkde.2020.2987299","type":"journal-article","created":{"date-parts":[[2020,4,15]],"date-time":"2020-04-15T22:21:20Z","timestamp":1586989280000},"page":"969-982","source":"Crossref","is-referenced-by-count":9,"title":["Using Randomness to Improve Robustness of Tree-Based Models Against Evasion Attacks"],"prefix":"10.1109","volume":"34","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4113-764X","authenticated-orcid":false,"given":"Fan","family":"Yang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhiyuan","family":"Chen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Aryya","family":"Gangopadhyay","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s10462-009-9109-6"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1561\/1500000006"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1593105.1593239"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.1999.766909"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1541880.1541882"},{"article-title":"Intrusion detection systems: A survey and taxonomy","year":"2000","author":"Axelsson","key":"ref6"},{"key":"ref7","first-page":"5","article-title":"Intrusion detection with unlabeled data using clustering","volume-title":"Proc. ACM CSS Workshop Data Mining Appl. Secur.","author":"Portnoy"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1081870.1081950"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2807385"},{"key":"ref10","article-title":"Robust physical-world attacks on machine learning models","volume-title":"CoRR","author":"Evtimov","year":"2017"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"article-title":"Adversarial perturbations against deep neural networks for malware classification","year":"2016","author":"Grosse","key":"ref12"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978392"},{"article-title":"BadNets: Identifying vulnerabilities in the machine learning model supply chain","year":"2017","author":"Gu","key":"ref14"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW.2009.9"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"issue":"1","key":"ref17","first-page":"2617","article-title":"Static prediction games for adversarial learning problems","volume":"13","author":"Br\u00fcckner","year":"2012","journal-title":"J. Mach. Learn. Res."},{"article-title":"A game theoretical framework for adversarial learning","volume-title":"Proc. CERIAS 9th Annu. Inf. Secur. Symp.","author":"Kantarcioglu","key":"ref18"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-010-0197-3"},{"issue":"2","key":"ref20","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1023\/A:1010968702992","article-title":"Robust learning with missing data","volume":"45","author":"Ramoni","year":"2001","journal-title":"Mach. Learn."},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143889"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/1553374.1553526"},{"article-title":"Feature weighting for improved classifier robustness","volume-title":"Proc. 6th Conf. Email Anti-Spam","author":"Ko\u0142cz","key":"ref23"},{"article-title":"Explaining and harnessing adversarial examples","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Goodfellow","key":"ref24"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.41"},{"article-title":"Generative adversarial trainer: Defense to adversarial perturbations with GAN","year":"2017","author":"Lee","key":"ref26"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.7551\/mitpress\/4643.001.0001"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-89689-0_54"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/s13042-010-0007-7"},{"article-title":"UCI repository of machine learning databases","year":"1998","author":"Hettich","key":"ref30"},{"key":"ref31","first-page":"2387","article-title":"Evasion and hardening of tree ensemble classifiers","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Kantchelian"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"article-title":"Polymorphic blending attacks","volume-title":"Proc. 15th Conf. USENIX Secur. Symp.","author":"Fogla","key":"ref33"},{"issue":"May","key":"ref34","first-page":"1293","article-title":"Query strategies for evading convex-inducing classifiers","volume":"13","author":"Nelson","year":"2012","journal-title":"J. Mach. Learn. Res."},{"key":"ref35","first-page":"601","article-title":"Stealing machine learning models via prediction APIs","volume-title":"Proc. 25th USENIX Conf. Secur. Symp.","author":"Tram\u00e8r"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-009-5124-8"},{"key":"ref37","first-page":"555","article-title":"A robust minimax approach to classification","volume":"3","author":"Lanckriet","year":"2003","journal-title":"The J. Mach. Learn. Res."},{"key":"ref38","first-page":"1489","article-title":"Convex learning with invariances","volume-title":"Proc. Int. Conf. Neural Inf. Process. Syst.","author":"Teo"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1145\/2339530.2339697"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1137\/0222052"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/1014052.1014066"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020495"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5199-2"},{"key":"ref44","volume-title":"Handbook of Multibiometrics","volume":"6","author":"Ross","year":"2006"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/1081870.1081885"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/ICPR.2008.4761358"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2006.165"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/MIS.2009.108"},{"key":"ref49","first-page":"485","article-title":"Optimal randomized classification in adversarial settings","volume-title":"Proc. Int. Conf. Auton. Agents Multi-Agent Syst.","author":"Vorobeychik"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1145\/1978672.1978676"}],"container-title":["IEEE Transactions on Knowledge and Data Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/69\/9677034\/09068471.pdf?arnumber=9068471","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,9]],"date-time":"2024-01-09T22:16:43Z","timestamp":1704838603000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9068471\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,2,1]]},"references-count":51,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tkde.2020.2987299","relation":{},"ISSN":["1041-4347","1558-2191","2326-3865"],"issn-type":[{"type":"print","value":"1041-4347"},{"type":"electronic","value":"1558-2191"},{"type":"electronic","value":"2326-3865"}],"subject":[],"published":{"date-parts":[[2022,2,1]]}}}