{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,3]],"date-time":"2026-09-03T02:29:13Z","timestamp":1788402553981,"version":"build-2803163510"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"11","license":[{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2024,11,1]],"date-time":"2024-11-01T00:00:00Z","timestamp":1730419200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100010418","name":"Defence Science and Technology Laboratory (Dstl) through the Project ERASE: Evaluating the Robustness of Machine Learning Algorithms in Adversarial Settings","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100010418","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Neural Netw. Learning Syst."],"published-print":{"date-parts":[[2024,11]]},"DOI":"10.1109\/tnnls.2023.3291648","type":"journal-article","created":{"date-parts":[[2023,8,30]],"date-time":"2023-08-30T17:25:28Z","timestamp":1693416328000},"page":"16008-16022","source":"Crossref","is-referenced-by-count":5,"title":["Hyperparameter Learning Under Data Poisoning: Analysis of the Influence of Regularization via Multiobjective Bilevel Optimization"],"prefix":"10.1109","volume":"35","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6394-4573","authenticated-orcid":false,"given":"Javier","family":"Carnerero-Cano","sequence":"first","affiliation":[{"name":"Imperial College London, London, U.K"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6093-5922","authenticated-orcid":false,"given":"Luis","family":"Mu\u00f1oz-Gonz\u00e1lez","sequence":"additional","affiliation":[{"name":"Imperial College London, London, U.K"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Phillippa","family":"Spencer","sequence":"additional","affiliation":[{"name":"Defence Science and Technology Laboratory (Dstl), Salisbury, U.K"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2844-3917","authenticated-orcid":false,"given":"Emil C.","family":"Lupu","sequence":"additional","affiliation":[{"name":"Imperial College London, London, U.K"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref2","first-page":"43","article-title":"Adveing","volume-title":"Proc. 4th ACM Workshop Secur. Artif. Intell.","author":"Huang"},{"key":"ref3","first-page":"102","article-title":"Challenges and advances in adversarial machine learning","volume-title":"Resilience and Hybrid Threats: Security and Integrity for the Digital World","volume":"55","author":"Mu\u00f1oz-Gonz\u00e1lez","year":"2019"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2909068"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23291"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.3041202"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2022.3182979"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2022.3204283"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/tnnls.2022.3201586"},{"key":"ref10","first-page":"1807","article-title":"Poisoning attacks against support vector machines","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Biggio"},{"key":"ref11","first-page":"1689","article-title":"Is feature selection secure against training data poisoning?","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Xiao"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v29i1.9569"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-021-06119-y"},{"key":"ref14","first-page":"1","article-title":"Regularization can help mitigate poisoning attacks...With the right hyperparameters","volume-title":"Proc. ICLR Workshop Secur. Saf. Mach. Learn. Syst.","author":"Carnerero-Cano"},{"key":"ref15","first-page":"1885","article-title":"Understanding black-box predictions via influence functions","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Koh"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140451"},{"key":"ref17","first-page":"12080","article-title":"MetaPoison: Practical general-purpose clean-label data poisoning","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"33","author":"Huang"},{"key":"ref18","first-page":"2113","article-title":"Gradient-based hyperparameter optimization through reversible learning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Maclaurin"},{"key":"ref19","first-page":"1165","article-title":"Forward and reverse gradient-based hyperparameter optimization","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Franceschi"},{"key":"ref20","first-page":"1568","article-title":"Bilevel programming for hyperparameter optimization and meta-learning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Franceschi"},{"key":"ref21","first-page":"3748","article-title":"On the iteration complexity of hypergradient computation","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Grazzi"},{"key":"ref22","first-page":"318","article-title":"Generic methods for optimization-based modeling","volume-title":"Proc. 15th Int. Conf. Artif. Intell. Statist.","author":"Domke"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"ref24","article-title":"Fashion-MNIST: A novel image dataset for benchmarking machine learning algorithms","author":"Xiao","year":"2017","journal-title":"arXiv:1708.07747"},{"key":"ref25","article-title":"Learning multiple layers of features from tiny images","author":"Krizhevsky","year":"2009"},{"key":"ref26","first-page":"1","article-title":"Exploiting machine learning to subvert your spam filter","volume-title":"Proc. LEET","volume":"8","author":"Nelson"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128824"},{"key":"ref28","first-page":"3681","article-title":"Security analysis of online centroid anomaly detection","volume":"13","author":"Kloft","year":"2012","journal-title":"J. Mach. Learn. Res."},{"key":"ref29","first-page":"6103","article-title":"Poison frogs! Targeted clean-label poisoning attacks on neural networks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"31","author":"Shafahi"},{"key":"ref30","first-page":"7614","article-title":"Transferable clean-label poisoning attacks on deep neural nets","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Zhu"},{"key":"ref31","first-page":"1","article-title":"Witches\u2019 Brew: Industrial scale data poisoning via gradient matching","volume-title":"Proc. Int. Conf. Learn. Represent.","author":"Geiping"},{"key":"ref32","article-title":"Poisoning attacks with generative adversarial nets","author":"Mu\u00f1oz-Gonz\u00e1lez","year":"2019","journal-title":"arXiv:1906.07773"},{"key":"ref33","first-page":"3517","article-title":"Certified defenses for data poisoning attacks","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"30","author":"Steinhardt"},{"key":"ref34","article-title":"Detection of adversarial training examples in poisoning attacks through anomaly detection","author":"Paudice","year":"2018","journal-title":"arXiv:1802.03041"},{"key":"ref35","first-page":"5","article-title":"Label sanitization against label flipping poisoning attacks","volume-title":"Proc. Joint Eur. Conf. Mach. Learn. Knowl. Discovery Databases","author":"Paudice"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v32i1.11610"},{"key":"ref37","first-page":"1596","article-title":"Sever: A robust meta-algorithm for stochastic optimization","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Diakonikolas"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/NNSP.1996.548336"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1162\/089976600300015187"},{"key":"ref40","first-page":"377","article-title":"Efficient multiple hyperparameter learning for log-linear models","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"20","author":"Foo"},{"key":"ref41","first-page":"737","article-title":"Hyperparameter optimization with approximate gradient","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Pedregosa"},{"key":"ref42","article-title":"Regularisation can mitigate poisoning attacks: A novel analysis based on multiobjective bilevel optimisation","author":"Carnerero-Cano","year":"2020","journal-title":"arXiv:2003.00040"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4757-2836-1"},{"key":"ref44","article-title":"An introduction to the conjugate gradient method without the agonizing pain","author":"Shewchuk","year":"1994"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1994.6.1.147"},{"key":"ref46","volume-title":"Pattern Recognition and Machine Learning","author":"Bishop","year":"2006"},{"key":"ref47","doi-asserted-by":"crossref","DOI":"10.1137\/1.9780898717761","volume-title":"Evaluating Derivatives: Principles and Techniques of Algorithmic Differentiation","volume":"105","author":"Griewank","year":"2008"},{"key":"ref48","first-page":"9236","article-title":"The limit points of (optimistic) gradient descent in min-max optimization","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","volume":"31","author":"Daskalakis"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1109\/TPAMI.2011.177"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1145\/1644893.1644895"},{"key":"ref51","first-page":"499","article-title":"Stability and generalization","volume":"2","author":"Bousquet","year":"2002","journal-title":"J. Mach. Learn. Res."},{"key":"ref52","first-page":"249","article-title":"Understanding the difficulty of training deep feedforward neural networks","volume-title":"Proc. 13th Int. Conf. Artif. Intell. Statist.","author":"Glorot"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.18637\/jss.v033.i01"},{"key":"ref54","first-page":"390","article-title":"A stability index for feature selection","volume-title":"Proc. 25th IASTED Int. Multi-Conf., Artif. Intell. Appl.","author":"Kuncheva"},{"key":"ref55","first-page":"1","article-title":"Detecting backdoor attacks on deep neural networks by activation clustering","volume-title":"Proc. AAAI Workshop Artif. Intell. Saf.","author":"Chen"}],"container-title":["IEEE Transactions on Neural Networks and Learning Systems"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5962385\/10737991\/10235261.pdf?arnumber=10235261","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,11,27]],"date-time":"2024-11-27T19:28:09Z","timestamp":1732735689000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10235261\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,11]]},"references-count":55,"journal-issue":{"issue":"11"},"URL":"https:\/\/doi.org\/10.1109\/tnnls.2023.3291648","relation":{},"ISSN":["2162-237X","2162-2388"],"issn-type":[{"value":"2162-237X","type":"print"},{"value":"2162-2388","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,11]]}}}