{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T15:53:54Z","timestamp":1776182034474,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":19,"publisher":"ACM","license":[{"start":{"date-parts":[[2019,12,9]],"date-time":"2019-12-09T00:00:00Z","timestamp":1575849600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2019,12,9]]},"DOI":"10.1145\/3359992.3366638","type":"proceedings-article","created":{"date-parts":[[2019,11,19]],"date-time":"2019-11-19T13:46:52Z","timestamp":1574171212000},"page":"8-13","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":15,"title":["Walling up Backdoors in Intrusion Detection Systems"],"prefix":"10.1145","author":[{"given":"Maximilian","family":"Bachl","sequence":"first","affiliation":[{"name":"Technische Universit\u00e4t Wien"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alexander","family":"Hartl","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t Wien"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Joachim","family":"Fabini","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t Wien"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tanja","family":"Zseby","sequence":"additional","affiliation":[{"name":"Technische Universit\u00e4t Wien"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2019,12,9]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"D. W. Apley and J. Zhu. 2016. Visualizing the Effects of Predictor Variables in Black Box Supervised Learning Models. arXiv:1612.08468 [stat] (Dec. 2016). arXiv: 1612.08468.  D. W. Apley and J. Zhu. 2016. Visualizing the Effects of Predictor Variables in Black Box Supervised Learning Models. arXiv:1612.08468 [stat] (Dec. 2016). arXiv: 1612.08468."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"crossref","unstructured":"B.\n      Biggio I.\n      Corona G.\n      Fumera G.\n      Giacinto and \n      F.\n      Roli\n  . \n  2011\n  . Bagging classifiers for fighting poisoning attacks in adversarial environments. In 10th Int'l Workshop on Multiple Classifier Systems volume \n  6713\n   of \n  LNCS\n  . \n  Springer Naples Italy 350--359.  B. Biggio I. Corona G. Fumera G. Giacinto and F. Roli. 2011. Bagging classifiers for fighting poisoning attacks in adversarial environments. In 10th Int'l Workshop on Multiple Classifier Systems volume 6713 of LNCS. Springer Naples Italy 350--359.","DOI":"10.1007\/978-3-642-21557-5_37"},{"key":"e_1_3_2_1_3_1","volume-title":"Proceedings of the 36th International Conference on Machine Learning. PMLR","author":"Chen H.","year":"2019","unstructured":"H. Chen , H. Zhang , D. Boning , and C.-J. Hsieh . 2019 . Robust Decision Trees Against Adversarial Examples . In Proceedings of the 36th International Conference on Machine Learning. PMLR , Long Beach, CA, 1122--1131. H. Chen, H. Zhang, D. Boning, and C.-J. Hsieh. 2019. Robust Decision Trees Against Adversarial Examples. In Proceedings of the 36th International Conference on Machine Learning. PMLR, Long Beach, CA, 1122--1131."},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the 2018 Workshop on Traffic Measurements for Cybersecurity (WTMC '18)","author":"Erlacher F.","unstructured":"F. Erlacher and F. Dressler . 2018. How to Test an IDS?: GENESIDS: An Automated System for Generating Attack Traffic . In Proceedings of the 2018 Workshop on Traffic Measurements for Cybersecurity (WTMC '18) . ACM, New York, NY, USA, 46--51. https:\/\/doi.org\/10.1145\/3229598.3229601 event-place: Budapest, Hungary. 10.1145\/3229598.3229601 F. Erlacher and F. Dressler. 2018. How to Test an IDS?: GENESIDS: An Automated System for Generating Attack Traffic. In Proceedings of the 2018 Workshop on Traffic Measurements for Cybersecurity (WTMC '18). ACM, New York, NY, USA, 46--51. https:\/\/doi.org\/10.1145\/3229598.3229601 event-place: Budapest, Hungary."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/34.589207"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1214\/aos\/1013203451"},{"key":"e_1_3_2_1_7_1","unstructured":"T. Gu B. Dolan-Gavitt and S. Garg. 2017. BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain. arXiv:1708.06733 [cs] (Aug. 2017). arXiv: 1708.06733.  T. Gu B. Dolan-Gavitt and S. Garg. 2017. BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain. arXiv:1708.06733 [cs] (Aug. 2017). arXiv: 1708.06733."},{"key":"e_1_3_2_1_8_1","unstructured":"K. Liu B. Dolan-Gavitt and S. Garg. 2018. Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks. arXiv:1805.12185 [cs] (May 2018). arXiv: 1805.12185.  K. Liu B. Dolan-Gavitt and S. Garg. 2018. Fine-Pruning: Defending Against Backdooring Attacks on Deep Neural Networks. arXiv:1805.12185 [cs] (May 2018). arXiv: 1805.12185."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.3390\/app8112196"},{"key":"e_1_3_2_1_10_1","volume-title":"2015 Military Communications and Information Systems Conference (MilCIS). 1--6.","author":"Moustafa N.","unstructured":"N. Moustafa and J. Slay . 2015. UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set) . In 2015 Military Communications and Information Systems Conference (MilCIS). 1--6. N. Moustafa and J. Slay. 2015. UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). In 2015 Military Communications and Information Systems Conference (MilCIS). 1--6."},{"key":"e_1_3_2_1_11_1","unstructured":"A. Paszke S. Gross S. Chintala etal 2017. Automatic differentiation in PyTorch. (2017) 4.  A. Paszke S. Gross S. Chintala et al. 2017. Automatic differentiation in PyTorch. (2017) 4."},{"key":"e_1_3_2_1_12_1","article-title":"Scikit-learn: Machine Learning in Python","author":"Pedregosa F.","year":"2011","unstructured":"F. Pedregosa , G. Varoquaux , A. Gramfort , 2011 . Scikit-learn: Machine Learning in Python . Journal of Machine Learning Research 12 ( Oct. 2011), 2825--2830. F. Pedregosa, G. Varoquaux, A. Gramfort, et al. 2011. Scikit-learn: Machine Learning in Python. Journal of Machine Learning Research 12 (Oct. 2011), 2825--2830.","journal-title":"Journal of Machine Learning Research 12"},{"key":"e_1_3_2_1_13_1","volume-title":"Proceedings of the 2016 ACM Workshop on Artificial Intelligence and Security - ALSec '16","author":"Russu P.","unstructured":"P. Russu , A. Demontis , B. Biggio , G. Fumera , and F. Roli . 2016. Secure Kernel Machines against Evasion Attacks . In Proceedings of the 2016 ACM Workshop on Artificial Intelligence and Security - ALSec '16 . ACM Press, Vienna, Austria, 59--69. P. Russu, A. Demontis, B. Biggio, G. Fumera, and F. Roli. 2016. Secure Kernel Machines against Evasion Attacks. In Proceedings of the 2016 ACM Workshop on Artificial Intelligence and Security - ALSec '16. ACM Press, Vienna, Austria, 59--69."},{"key":"e_1_3_2_1_14_1","volume-title":"Proceedings of the 4th International Conference on Information Systems Security and Privacy. SCITEPRESS","author":"Sharafaldin I.","unstructured":"I. Sharafaldin , A. Habibi Lashkari , and A. A. Ghorbani . 2018. Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization . In Proceedings of the 4th International Conference on Information Systems Security and Privacy. SCITEPRESS , Funchal, Madeira, Portugal, 108--116. I. Sharafaldin, A. Habibi Lashkari, and A. A. Ghorbani. 2018. Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization. In Proceedings of the 4th International Conference on Information Systems Security and Privacy. SCITEPRESS, Funchal, Madeira, Portugal, 108--116."},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICNN.1988.23864"},{"key":"e_1_3_2_1_16_1","unstructured":"G. Vormayr. 2019. go-flows. https:\/\/github.com\/CN-TU\/go-flows Commit 0816e6.  G. Vormayr. 2019. go-flows. https:\/\/github.com\/CN-TU\/go-flows Commit 0816e6."},{"key":"e_1_3_2_1_17_1","unstructured":"Wikipedia. 2019. Convolutional neural network. https:\/\/en.wikipedia.org\/w\/index.php?title=Convolutional_neural_network&oldid=921208341 Page Version ID: 921208341.  Wikipedia. 2019. Convolutional neural network. https:\/\/en.wikipedia.org\/w\/index.php?title=Convolutional_neural_network&oldid=921208341 Page Version ID: 921208341."},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1145\/1163593.1163596"},{"key":"e_1_3_2_1_19_1","unstructured":"J. Yosinski J. Clune Y. Bengio and H. Lipson. 2014. How transferable are features in deep neural networks? In Advances in Neural Information Processing Systems 27. MIT Press 3320--3328.  J. Yosinski J. Clune Y. Bengio and H. Lipson. 2014. How transferable are features in deep neural networks? In Advances in Neural Information Processing Systems 27. MIT Press 3320--3328."}],"event":{"name":"CoNEXT '19: The 15th International Conference on emerging Networking EXperiments and Technologies","location":"Orlando FL USA","acronym":"CoNEXT '19","sponsor":["SIGCOMM ACM Special Interest Group on Data Communication"]},"container-title":["Proceedings of the 3rd ACM CoNEXT Workshop on Big DAta, Machine Learning and Artificial Intelligence for Data Communication Networks"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3359992.3366638","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3359992.3366638","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T23:13:28Z","timestamp":1750202008000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3359992.3366638"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,12,9]]},"references-count":19,"alternative-id":["10.1145\/3359992.3366638","10.1145\/3359992"],"URL":"https:\/\/doi.org\/10.1145\/3359992.3366638","relation":{},"subject":[],"published":{"date-parts":[[2019,12,9]]},"assertion":[{"value":"2019-12-09","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}