{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T15:39:50Z","timestamp":1781797190050,"version":"3.54.5"},"reference-count":38,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2019164"],"award-info":[{"award-number":["2019164"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Sci. Eng."],"published-print":{"date-parts":[[2025,1]]},"DOI":"10.1109\/tnse.2024.3492032","type":"journal-article","created":{"date-parts":[[2024,11,5]],"date-time":"2024-11-05T13:34:21Z","timestamp":1730813661000},"page":"252-262","source":"Crossref","is-referenced-by-count":9,"title":["Poisoning the Well: Adversarial Poisoning on ML-Based Software-Defined Network Intrusion Detection Systems"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4793-8982","authenticated-orcid":false,"given":"Tapadhir","family":"Das","sequence":"first","affiliation":[{"name":"Department of Computer Science, University of the Pacific, Stockton, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8239-7325","authenticated-orcid":false,"given":"Raj Mani","family":"Shukla","sequence":"additional","affiliation":[{"name":"School of Computing and Information Science, Anglia Ruskin University, Cambridge, U.K."}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shamik","family":"Sengupta","sequence":"additional","affiliation":[{"name":"Department of Computer Science and Engineering, University of Nevada, Reno, NV, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/NCA53618.2021.9685157"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/CSR54599.2022.9850339"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/WINCOM.2016.7777224"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2015.2404803"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/jsyst.2020.2991258"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.dcan.2021.07.009"},{"key":"ref8","first-page":"405","article-title":"Online anomaly detection under adversarial impact","volume-title":"Proc. 13th Int. Conf. Artif. Intell. Statist.","author":"Kloft","year":"2010"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-10925-7_4"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1504\/IJSN.2015.071829"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3407023.3407079"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011286"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v33i01.33011278"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.4160050"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2023.109935"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.7438"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3048038"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3130434"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2019.00179"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0275971"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/BigData55660.2022.10020528"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.3390\/jcp1020014"},{"key":"ref23","article-title":"Cleverhans v2. 0.0: An adversarial machine learning library","author":"Papernot","year":"2016"},{"key":"ref24","article-title":"The Software-Defined Networking (SDN) market in 2022","year":"2022"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2018.2814738"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-12-381479-1.00002-2"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3310986.3311023"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3084050"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC51644.2023.10059640"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/0-387-25465-X_9"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2019.2961157"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/s00500-020-05373-x"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1016\/B978-0-32-385708-6.00012-6"},{"key":"ref34","article-title":"Adversarial attacks and defences: A survey","author":"Chakraborty","year":"2018"},{"key":"ref35","first-page":"3358","article-title":"Adversarial training for free!","volume-title":"Proc. 33rd Int. Conf. Neural Inf. Process. Syst.","author":"Shafahi","year":"2019"},{"key":"ref36","article-title":"Robust data hiding using inverse gradient attention","author":"Zhang","year":"2020"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23198"},{"key":"ref38","article-title":"Ensemble adversarial training: Attacks and defenses","author":"Tramr","year":"2017"}],"container-title":["IEEE Transactions on Network Science and Engineering"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6488902\/10814995\/10742913-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488902\/10814995\/10742913.pdf?arnumber=10742913","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,25]],"date-time":"2024-12-25T01:33:13Z","timestamp":1735090393000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10742913\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1]]},"references-count":38,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tnse.2024.3492032","relation":{"has-preprint":[{"id-type":"doi","id":"10.36227\/techrxiv.21664031.v1","asserted-by":"object"}]},"ISSN":["2327-4697","2334-329X"],"issn-type":[{"value":"2327-4697","type":"electronic"},{"value":"2334-329X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,1]]}}}