{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T16:47:23Z","timestamp":1780073243743,"version":"3.54.0"},"reference-count":71,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2023,10,1]],"date-time":"2023-10-01T00:00:00Z","timestamp":1696118400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"name":"Technology Innovation Institute","award":["8434000394"],"award-info":[{"award-number":["8434000394"]}]},{"name":"MUSA - Multilayered Urban Sustainability Action"},{"name":"European Union - NextGenerationEU"},{"name":"National Recovery and Resilience Plan"},{"name":"EU - NextGenerationEU"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Sustain. Comput."],"published-print":{"date-parts":[[2023,10]]},"DOI":"10.1109\/tsusc.2023.3293269","type":"journal-article","created":{"date-parts":[[2023,7,7]],"date-time":"2023-07-07T18:53:48Z","timestamp":1688756028000},"page":"540-554","source":"Crossref","is-referenced-by-count":24,"title":["On the Robustness of Random Forest Against Untargeted Data Poisoning: An Ensemble-Based Approach"],"prefix":"10.1109","volume":"8","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-5438-9467","authenticated-orcid":false,"given":"Marco","family":"Anisetti","sequence":"first","affiliation":[{"name":"Department of Computer Science, Università degli Studi di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7426-4795","authenticated-orcid":false,"given":"Claudio A.","family":"Ardagna","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Università degli Studi di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4674-983X","authenticated-orcid":false,"given":"Alessandro","family":"Balestrucci","sequence":"additional","affiliation":[{"name":"Consorzio Interuniversitario per l’Informatica, Rome, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4909-9892","authenticated-orcid":false,"given":"Nicola","family":"Bena","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Università degli Studi di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-9557-6496","authenticated-orcid":false,"given":"Ernesto","family":"Damiani","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Università degli Studi di Milano, Milan, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1398-952X","authenticated-orcid":false,"given":"Chan Yeob","family":"Yeun","sequence":"additional","affiliation":[{"name":"Khalifa University of Science and Technology, Abu Dhabi, UAE"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3390\/app9245574"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2894819"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.3390\/atmos11070676"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC47284.2019.8969655"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1016\/j.csbj.2014.11.005"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/BigDataService55688.2022.00018"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1038\/s41467-020-17419-7"},{"key":"ref8","article-title":"Data poisoning attack on random forest classification model","volume-title":"Proc. Int. Conf. Smart Media Appl.","author":"Chang"},{"key":"ref9","article-title":"Targeted backdoor attacks on deep learning systems using data poisoning","author":"Chen","year":"2017"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/JBHI.2014.2344095"},{"key":"ref11","first-page":"1559","article-title":"You autocomplete me: Poisoning vulnerabilities in neural code completion","volume-title":"Proc. USENIX Secur.","author":"Schuster"},{"key":"ref12","first-page":"97","article-title":"Support vector machines under adversarial label noise","volume-title":"Proc. Asian Conf. Mach. Learn.","author":"Biggio"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.3390\/su12166434"},{"key":"ref14","first-page":"1","article-title":"Attack strength versus detectability dilemma in adversarial machine learning","volume-title":"Proc. Int. Joint Conf. Neural Netw.","author":"Frederickson"},{"key":"ref15","first-page":"1596","article-title":"Sever: A robust meta-algorithm for stochastic optimization","volume-title":"Proc. 36th Int. Conf. Mach. Learn.","author":"Diakonikolas"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/657"},{"key":"ref17","first-page":"8230","article-title":"Certified robustness to label-flipping attacks via randomized smoothing","volume-title":"Proc. 37th Int. Conf. Mach. Learn.","author":"Rosenfeld"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-66415-2_4"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-021-06119-y"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i9.16971"},{"key":"ref21","article-title":"Deep partition aggregation: Provable defenses against general poisoning attacks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Levine"},{"key":"ref22","first-page":"22769","article-title":"Improved certified defenses against data poisoning with (Deterministic) finite aggregation","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Wang"},{"key":"ref23","first-page":"3299","article-title":"On collective robustness of bagging against data poisoning","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Chen"},{"key":"ref24","first-page":"507","article-title":"Why do tree-based models still outperform deep learning on typical tabular data?","volume-title":"Proc. Adv. Neural Inf. Process. Syst.","author":"Grinsztajn"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939778"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1145\/3540250.3549093"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/MICRO56248.2022.00043"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/s10489-020-02086-4"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2021.09.032"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM52596.2021.9652959"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1145\/3468218.3469050"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2022.118101"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1007\/s00521-020-04831-9"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/SSCI51031.2022.10022015"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-38919-2_1"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1145\/3415958.3433101"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/3446331"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/3585385"},{"key":"ref39","article-title":"Intriguing properties of neural networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Szegedy"},{"key":"ref40","doi-asserted-by":"crossref","DOI":"10.1145\/3446776","article-title":"Understanding deep learning requires rethinking generalization","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Zhang"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-13453-2_1"},{"key":"ref42","first-page":"6106","article-title":"Poison frogs! targeted clean-label poisoning attacks on neural networks","volume-title":"Proc. 32nd Int. Conf. Neural Inf. Process. Syst.","author":"Shafahi"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.11"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-010-5188-5"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1111\/rssb.12364"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-40994-3_25"},{"key":"ref47","article-title":"On the effectiveness of mitigating data poisoning attacks with gradient shaping","author":"Hong","year":"2020"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/BigData55660.2022.10020528"},{"key":"ref49","article-title":"ENISA threat landscape 2022","year":"2022"},{"key":"ref50","article-title":"UCI machine learning repository","author":"Dua","year":"2017"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1007\/BF00116251"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-007-5004-z"},{"key":"ref53","first-page":"650","article-title":"Modeling for optimal probability prediction","volume-title":"Proc. Int. Conf. Mach. Learn.","author":"Wang"},{"key":"ref54","article-title":"Online policy adaptation for ensemble classifiers","volume-title":"Proc. Eur. Symp. Artif. Neural Netw.","author":"Dimitrakakis"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2013.12.023"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.5566\/ias.1155"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1145\/1656274.1656278"},{"key":"ref58","article-title":"Detection of adversarial training examples in poisoning attacks through anomaly detection","author":"Paudice","year":"2018"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2339530.2339556"},{"key":"ref60","article-title":"Making sense of a forest of trees","author":"Chipman","year":"1998","journal-title":"Comput. Sci. Statist."},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1007\/s41060-018-0144-8"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1016\/j.inffus.2020.07.001"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-021-00635-x"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-75765-6_20"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/ICAPAI49758.2021.9462068"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE48619.2023.00133"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1137\/1.9781611975673.6"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1142\/S0218213009000305"},{"key":"ref69","article-title":"L1-based compression of random forest models","volume-title":"Proc. ESANN","author":"Joly"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.1007\/s11390-019-1921-0"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2019.00019"}],"container-title":["IEEE Transactions on Sustainable Computing"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/7274860\/10352167\/10175648.pdf?arnumber=10175648","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,12]],"date-time":"2024-01-12T02:29:01Z","timestamp":1705026541000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10175648\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10]]},"references-count":71,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tsusc.2023.3293269","relation":{},"ISSN":["2377-3782","2377-3790"],"issn-type":[{"value":"2377-3782","type":"electronic"},{"value":"2377-3790","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,10]]}}}