{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,6]],"date-time":"2026-01-06T13:54:16Z","timestamp":1767707656274,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":41,"publisher":"ACM","license":[{"start":{"date-parts":[[2018,7,19]],"date-time":"2018-07-19T00:00:00Z","timestamp":1531958400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["IIS-1565596, IIS-1615597, IIS-1749940, IIS-1650723, IIS-1716432, IIS-1750326"],"award-info":[{"award-number":["IIS-1565596, IIS-1615597, IIS-1749940, IIS-1650723, IIS-1716432, IIS-1750326"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Office of Naval Research","award":["N00014-14-1-0631, N00014-17-1-2265"],"award-info":[{"award-number":["N00014-14-1-0631, N00014-17-1-2265"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2018,7,19]]},"DOI":"10.1145\/3219819.3219909","type":"proceedings-article","created":{"date-parts":[[2018,7,19]],"date-time":"2018-07-19T13:05:12Z","timestamp":1532005512000},"page":"793-801","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":39,"title":["Identify Susceptible Locations in Medical Records via Adversarial Attacks on Deep Predictive Models"],"prefix":"10.1145","author":[{"given":"Mengying","family":"Sun","sequence":"first","affiliation":[{"name":"Michigan State University, East Lansing, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fengyi","family":"Tang","sequence":"additional","affiliation":[{"name":"Michigan State University, East Lansing, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jinfeng","family":"Yi","sequence":"additional","affiliation":[{"name":"JD AI Research, Beijing, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fei","family":"Wang","sequence":"additional","affiliation":[{"name":"Weill Cornell Medical School, New York, NY, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiayu","family":"Zhou","sequence":"additional","affiliation":[{"name":"Michigan State University, East Lansing, MI, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2018,7,19]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Scalable and accurate deep learning for electronic health records. arXiv preprint arXiv:1801.07860","author":"al Alvin Rajkomar Eyal Oren","year":"2018","unstructured":"Eyal Oren et. al Alvin Rajkomar . 2018. Scalable and accurate deep learning for electronic health records. arXiv preprint arXiv:1801.07860 ( 2018 ). Eyal Oren et. al Alvin Rajkomar. 2018. Scalable and accurate deep learning for electronic health records. arXiv preprint arXiv:1801.07860 (2018)."},{"key":"e_1_3_2_1_2_1","volume-title":"Evading machine learning malware detection. Black Hat","author":"Anderson Hyrum S","year":"2017","unstructured":"Hyrum S Anderson , Anant Kharkar , Bobby Filar , and Phil Roth . 2017. Evading machine learning malware detection. Black Hat ( 2017 ). Hyrum S Anderson, Anant Kharkar, Bobby Filar, and Phil Roth. 2017. Evading machine learning malware detection. Black Hat (2017)."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2996758.2996767"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/3097983.3097997"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1137\/080716542"},{"key":"e_1_3_2_1_6_1","volume-title":"Ground-Truth Adversarial Examples. arXiv preprint arXiv:1709.10207","author":"Carlini Nicholas","year":"2017","unstructured":"Nicholas Carlini , Guy Katz , Clark Barrett , and David L Dill . 2017. Ground-Truth Adversarial Examples. arXiv preprint arXiv:1709.10207 ( 2017 ). Nicholas Carlini, Guy Katz, Clark Barrett, and David L Dill. 2017. Ground-Truth Adversarial Examples. arXiv preprint arXiv:1709.10207 (2017)."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/2783258.2783365"},{"key":"e_1_3_2_1_9_1","volume-title":"AMIA Annual Symposium Proceedings","volume":"2016","author":"Che Zhengping","year":"2016","unstructured":"Zhengping Che , Sanjay Purushotham , Robinder Khemani , and Yan Liu . 2016 . In- terpretable deep models for icu outcome prediction . In AMIA Annual Symposium Proceedings , Vol. 2016 . American Medical Informatics Association, 371. Zhengping Che, Sanjay Purushotham, Robinder Khemani, and Yan Liu. 2016. In- terpretable deep models for icu outcome prediction. In AMIA Annual Symposium Proceedings, Vol. 2016. American Medical Informatics Association, 371."},{"key":"e_1_3_2_1_10_1","volume-title":"EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples. arXiv preprint arXiv:1709.04114","author":"Chen Pin-Yu","year":"2017","unstructured":"Pin-Yu Chen , Yash Sharma , Huan Zhang , Jinfeng Yi , and Cho-Jui Hsieh . 2017 . EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples. arXiv preprint arXiv:1709.04114 (2017). Pin-Yu Chen, Yash Sharma, Huan Zhang, Jinfeng Yi, and Cho-Jui Hsieh. 2017. EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examples. arXiv preprint arXiv:1709.04114 (2017)."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3128572.3140448"},{"key":"e_1_3_2_1_12_1","volume-title":"Caglar Gulcehre, Dzmitry Bahdanau, Fethi Bougares, Holger Schwenk, and Yoshua Bengio.","author":"Cho Kyunghyun","year":"2014","unstructured":"Kyunghyun Cho , Bart Van Merri\u00ebnboer , Caglar Gulcehre, Dzmitry Bahdanau, Fethi Bougares, Holger Schwenk, and Yoshua Bengio. 2014 . Learning phrase representations using RNN encoder-decoder for statistical machine translation. arXiv preprint arXiv:1406.1078 (2014). Kyunghyun Cho, Bart Van Merri\u00ebnboer, Caglar Gulcehre, Dzmitry Bahdanau, Fethi Bougares, Holger Schwenk, and Yoshua Bengio. 2014. Learning phrase representations using RNN encoder-decoder for statistical machine translation. arXiv preprint arXiv:1406.1078 (2014)."},{"key":"e_1_3_2_1_13_1","volume-title":"Machine Learning for Healthcare Conference. 301--318","author":"Choi Edward","year":"2016","unstructured":"Edward Choi , Mohammad Taha Bahadori , Andy Schuetz , Walter F Stewart , and Jimeng Sun . 2016 . Doctor ai: Predicting clinical events via recurrent neural networks . In Machine Learning for Healthcare Conference. 301--318 . Edward Choi, Mohammad Taha Bahadori, Andy Schuetz, Walter F Stewart, and Jimeng Sun. 2016. Doctor ai: Predicting clinical events via recurrent neural networks. In Machine Learning for Healthcare Conference. 301--318."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939823"},{"key":"e_1_3_2_1_15_1","unstructured":"Zhitao Gong. 2018. Adversarial Algorithms in TensorFlow. (2018).  Zhitao Gong. 2018. Adversarial Algorithms in TensorFlow. (2018)."},{"key":"e_1_3_2_1_16_1","volume-title":"Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572","author":"Goodfellow Ian J","year":"2014","unstructured":"Ian J Goodfellow , Jonathon Shlens , and Christian Szegedy . 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 ( 2014 ). Ian J Goodfellow, Jonathon Shlens, and Christian Szegedy. 2014. Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572 (2014)."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-66399-9_4"},{"key":"e_1_3_2_1_18_1","volume-title":"Multitask Learning and Benchmarking with Clinical Time Series Data. arXiv preprint arXiv:1703.07771","author":"Harutyunyan Hrayr","year":"2017","unstructured":"Hrayr Harutyunyan , Hrant Khachatrian , David C Kale , and Aram Galstyan . 2017. Multitask Learning and Benchmarking with Clinical Time Series Data. arXiv preprint arXiv:1703.07771 ( 2017 ). Hrayr Harutyunyan, Hrant Khachatrian, David C Kale, and Aram Galstyan. 2017. Multitask Learning and Benchmarking with Clinical Time Series Data. arXiv preprint arXiv:1703.07771 (2017)."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1162\/neco.1997.9.8.1735"},{"key":"e_1_3_2_1_20_1","volume-title":"Yaa Akosa Antwi, and Julia P Nath","author":"Hsia Renee Y","year":"2014","unstructured":"Renee Y Hsia , Yaa Akosa Antwi, and Julia P Nath . 2014 . Variation in charges for 10 common blood tests in California hospitals: a cross-sectional analysis. BMJ open 4, 8 (2014), e005482. Renee Y Hsia, Yaa Akosa Antwi, and Julia P Nath. 2014. Variation in charges for 10 common blood tests in California hospitals: a cross-sectional analysis. BMJ open 4, 8 (2014), e005482."},{"key":"e_1_3_2_1_21_1","volume-title":"Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN. arXiv preprint arXiv:1702.05983","author":"Hu Weiwei","year":"2017","unstructured":"Weiwei Hu and Ying Tan . 2017. Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN. arXiv preprint arXiv:1702.05983 ( 2017 ). Weiwei Hu and Ying Tan. 2017. Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN. arXiv preprint arXiv:1702.05983 (2017)."},{"key":"e_1_3_2_1_22_1","volume-title":"Adversarial examples for evaluating reading comprehension systems. arXiv preprint arXiv:1707.07328","author":"Jia Robin","year":"2017","unstructured":"Robin Jia and Percy Liang . 2017. Adversarial examples for evaluating reading comprehension systems. arXiv preprint arXiv:1707.07328 ( 2017 ). Robin Jia and Percy Liang. 2017. Adversarial examples for evaluating reading comprehension systems. arXiv preprint arXiv:1707.07328 (2017)."},{"key":"e_1_3_2_1_23_1","volume-title":"Leo Anthony Celi, and Roger G Mark","author":"Johnson Alistair EW","year":"2016","unstructured":"Alistair EW Johnson , Tom J Pollard , Lu Shen , H Lehman Li-wei, Mengling Feng , Mohammad Ghassemi , Benjamin Moody , Peter Szolovits , Leo Anthony Celi, and Roger G Mark . 2016 . MIMIC-III, a freely accessible critical care database. Scientific data 3 (2016), 160035. Alistair EW Johnson, Tom J Pollard, Lu Shen, H Lehman Li-wei, Mengling Feng, Mohammad Ghassemi, Benjamin Moody, Peter Szolovits, Leo Anthony Celi, and Roger G Mark. 2016. MIMIC-III, a freely accessible critical care database. Scientific data 3 (2016), 160035."},{"key":"e_1_3_2_1_24_1","volume-title":"Understanding Neural Networks through Representation Erasure. arXiv preprint arXiv:1612.08220","author":"Li Jiwei","year":"2016","unstructured":"Jiwei Li , Will Monroe , and Dan Jurafsky . 2016. Understanding Neural Networks through Representation Erasure. arXiv preprint arXiv:1612.08220 ( 2016 ). Jiwei Li, Will Monroe, and Dan Jurafsky. 2016. Understanding Neural Networks through Representation Erasure. arXiv preprint arXiv:1612.08220 (2016)."},{"key":"e_1_3_2_1_25_1","volume-title":"Learning to diagnose with LSTM recurrent neural networks. arXiv preprint arXiv:1511.03677","author":"Lipton Zachary C","year":"2015","unstructured":"Zachary C Lipton , David C Kale , Charles Elkan , and Randall Wetzel . 2015. Learning to diagnose with LSTM recurrent neural networks. arXiv preprint arXiv:1511.03677 ( 2015 ). Zachary C Lipton, David C Kale, Charles Elkan, and Randall Wetzel. 2015. Learning to diagnose with LSTM recurrent neural networks. arXiv preprint arXiv:1511.03677 (2015)."},{"key":"e_1_3_2_1_26_1","volume-title":"Delving into transfer- able adversarial examples and black-box attacks. arXiv preprint arXiv:1611.02770","author":"Liu Yanpei","year":"2016","unstructured":"Yanpei Liu , Xinyun Chen , Chang Liu , and Dawn Song . 2016. Delving into transfer- able adversarial examples and black-box attacks. arXiv preprint arXiv:1611.02770 ( 2016 ). Yanpei Liu, Xinyun Chen, Chang Liu, and Dawn Song. 2016. Delving into transfer- able adversarial examples and black-box attacks. arXiv preprint arXiv:1611.02770 (2016)."},{"key":"e_1_3_2_1_27_1","volume-title":"Deep patient: an unsupervised representation to predict the future of patients from the electronic health records. Scientific reports 6","author":"Miotto Riccardo","year":"2016","unstructured":"Riccardo Miotto , Li Li , Brian A Kidd , and Joel T Dudley . 2016. Deep patient: an unsupervised representation to predict the future of patients from the electronic health records. Scientific reports 6 ( 2016 ), 26094. Riccardo Miotto, Li Li, Brian A Kidd, and Joel T Dudley. 2016. Deep patient: an unsupervised representation to predict the future of patients from the electronic health records. Scientific reports 6 (2016), 26094."},{"key":"e_1_3_2_1_28_1","volume-title":"Universal adversarial perturbations. arXiv preprint arXiv:1610.08401","author":"Moosavi-Dezfooli Seyed-Mohsen","year":"2016","unstructured":"Seyed-Mohsen Moosavi-Dezfooli , Alhussein Fawzi , Omar Fawzi , and Pas- cal Frossard. 2016. Universal adversarial perturbations. arXiv preprint arXiv:1610.08401 ( 2016 ). Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi, and Pas- cal Frossard. 2016. Universal adversarial perturbations. arXiv preprint arXiv:1610.08401 (2016)."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"crossref","unstructured":"Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi and Pascal Frossard. 2016. Deepfool: a simple and accurate method to fool deep neural networks. In Pro- ceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 2574-- 2582.  Seyed-Mohsen Moosavi-Dezfooli Alhussein Fawzi and Pascal Frossard. 2016. Deepfool: a simple and accurate method to fool deep neural networks. In Pro- ceedings of the IEEE Conference on Computer Vision and Pattern Recognition. 2574-- 2582.","DOI":"10.1109\/CVPR.2016.282"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2015.7298640"},{"key":"e_1_3_2_1_31_1","volume-title":"Deepr: A Convolutional Net for Medical Records","author":"Nguyen Phuoc","year":"2017","unstructured":"Phuoc Nguyen , Truyen Tran , Nilmini Wickramasinghe , and Svetha Venkatesh . 2017 . Deepr: A Convolutional Net for Medical Records . IEEE journal of biomedical and health informatics 21, 1 (2017), 22--30. Phuoc Nguyen, Truyen Tran, Nilmini Wickramasinghe, and Svetha Venkatesh. 2017. Deepr: A Convolutional Net for Medical Records. IEEE journal of biomedical and health informatics 21, 1 (2017), 22--30."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP.2016.36"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795300"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-31750-2_3"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPRW.2016.58"},{"key":"e_1_3_2_1_36_1","volume":"201","author":"Sabour Sara","unstructured":"Sara Sabour , Yanshuai Cao , Fartash Faghri , and David J Fleet. 201 5. Adversarial manipulation of deep representations. arXiv preprint arXiv:1511.05122 (2015). Sara Sabour, Yanshuai Cao, Fartash Faghri, and David J Fleet. 2015. Adversarial manipulation of deep representations. arXiv preprint arXiv:1511.05122 (2015).","journal-title":"David J Fleet."},{"key":"e_1_3_2_1_37_1","volume-title":"Azra Bihorac, and Parisa Rashidi.","author":"Shickel Benjamin","year":"2017","unstructured":"Benjamin Shickel , Patrick James Tighe , Azra Bihorac, and Parisa Rashidi. 2017 . Deep EHR: A Survey of Recent Advances in Deep Learning Techniques for Electronic Health Record (EHR) Analysis. IEEE Journal of Biomedical and Health Informatics ( 2017). Benjamin Shickel, Patrick James Tighe, Azra Bihorac, and Parisa Rashidi. 2017. Deep EHR: A Survey of Recent Advances in Deep Learning Techniques for Electronic Health Record (EHR) Analysis. IEEE Journal of Biomedical and Health Informatics (2017)."},{"key":"e_1_3_2_1_38_1","volume-title":"Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199","author":"Szegedy Christian","year":"2013","unstructured":"Christian Szegedy , Wojciech Zaremba , Ilya Sutskever , Joan Bruna , Dumitru Erhan , Ian Goodfellow , and Rob Fergus . 2013. Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 ( 2013 ). Christian Szegedy, Wojciech Zaremba, Ilya Sutskever, Joan Bruna, Dumitru Erhan, Ian Goodfellow, and Rob Fergus. 2013. Intriguing properties of neural networks. arXiv preprint arXiv:1312.6199 (2013)."},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/2339530.2339605"},{"key":"e_1_3_2_1_40_1","volume-title":"Generating Natural Adversarial Examples. arXiv preprint arXiv:1710.11342","author":"Zhao Zhengli","year":"2017","unstructured":"Zhengli Zhao , Dheeru Dua , and Sameer Singh . 2017. Generating Natural Adversarial Examples. arXiv preprint arXiv:1710.11342 ( 2017 ). Zhengli Zhao, Dheeru Dua, and Sameer Singh. 2017. Generating Natural Adversarial Examples. arXiv preprint arXiv:1710.11342 (2017)."},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623711"}],"event":{"name":"KDD '18: The 24th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"],"location":"London United Kingdom","acronym":"KDD '18"},"container-title":["Proceedings of the 24th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3219819.3219909","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3219819.3219909","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3219819.3219909","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:07:20Z","timestamp":1750212440000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3219819.3219909"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,7,19]]},"references-count":41,"alternative-id":["10.1145\/3219819.3219909","10.1145\/3219819"],"URL":"https:\/\/doi.org\/10.1145\/3219819.3219909","relation":{},"subject":[],"published":{"date-parts":[[2018,7,19]]},"assertion":[{"value":"2018-07-19","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}