{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T03:23:54Z","timestamp":1773890634179,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":35,"publisher":"ACM","license":[{"start":{"date-parts":[[2020,8,20]],"date-time":"2020-08-20T00:00:00Z","timestamp":1597881600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100004052","name":"King Abdullah University of Science and Technology","doi-asserted-by":"publisher","award":["FCC\/1\/1976-19-01"],"award-info":[{"award-number":["FCC\/1\/1976-19-01"]}],"id":[{"id":"10.13039\/501100004052","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2020,8,23]]},"DOI":"10.1145\/3394486.3403194","type":"proceedings-article","created":{"date-parts":[[2020,8,20]],"date-time":"2020-08-20T23:18:56Z","timestamp":1597965536000},"page":"1415-1425","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["Attackability Characterization of Adversarial Evasion Attack on Discrete Data"],"prefix":"10.1145","author":[{"given":"Yutong","family":"Wang","sequence":"first","affiliation":[{"name":"King Abdullah University of Science and Technology, Thuwal, Saudi Arabia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yufei","family":"Han","sequence":"additional","affiliation":[{"name":"Nortonlifelock, Sophia-Antipolis, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hongyan","family":"Bao","sequence":"additional","affiliation":[{"name":"King Abdullah University of Science and Technology, Thuwal, Saudi Arabia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yun","family":"Shen","sequence":"additional","affiliation":[{"name":"Nortonlifelock, Reading, United Kingdom"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fenglong","family":"Ma","sequence":"additional","affiliation":[{"name":"Penn State University, Pennsylvania, PA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jin","family":"Li","sequence":"additional","affiliation":[{"name":"Guangzhou University, Guangzhou , China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xiangliang","family":"Zhang","sequence":"additional","affiliation":[{"name":"King Abdullah University of Science and Technology, Thuwal, Saudi Arabia"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2020,8,20]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"ICML","author":"Akbarnejad A.","year":"2019","unstructured":"A. Akbarnejad and S. G\u00fcnnemann . Adversarial attacks on node embedding via graph poisoning . In ICML , 2019 . A. Akbarnejad and S. G\u00fcnnemann. Adversarial attacks on node embedding via graph poisoning. In ICML, 2019."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/2661829.2662047"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v29i1.9563"},{"key":"e_1_3_2_1_4_1","volume-title":"ICML","author":"Biggio B. Nelson B.","year":"2012","unstructured":"B. Nelson B. Biggio and P. Laskov . Poisoning attacks against support vector machines . In ICML , 2012 . B. Nelson B. Biggio and P. Laskov. Poisoning attacks against support vector machines. In ICML, 2012."},{"key":"e_1_3_2_1_5_1","volume-title":"Deep submodular functions. arXiv preprint arXiv:1701.08939","author":"Bilmes J.","year":"2017","unstructured":"J. Bilmes and W. Bai . Deep submodular functions. arXiv preprint arXiv:1701.08939 , 2017 . J. Bilmes and W. Bai. Deep submodular functions. arXiv preprint arXiv:1701.08939, 2017."},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.49"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00009"},{"key":"e_1_3_2_1_8_1","volume-title":"ICML","author":"Chen L.","year":"2017","unstructured":"L. Chen , M. Feldman , and A. Karbasi . Weakly submodular maximization beyond cardinality constraints: Does randomization help greedy ? In ICML , 2017 . L. Chen, M. Feldman, and A. Karbasi. Weakly submodular maximization beyond cardinality constraints: Does randomization help greedy? In ICML, 2017."},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220078"},{"key":"e_1_3_2_1_10_1","volume-title":"ICML","author":"Das A.","year":"2011","unstructured":"A. Das and D. Kempe . Submodular meets spectral: Greedy algorithms for subset selection, sparse approximation and dictionary selection . In ICML , 2011 . A. Das and D. Kempe. Submodular meets spectral: Greedy algorithms for subset selection, sparse approximation and dictionary selection. In ICML, 2011."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/872"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.18653\/v1\/P18-2006"},{"key":"e_1_3_2_1_13_1","volume-title":"Annuals of Statistics","author":"Elenberg E. R.","year":"2016","unstructured":"E. R. Elenberg , R. Khanna , A. G. Dimakis , and Sahand Negahban . Restricted strong convexity implies weak submodularity . Annuals of Statistics , 2016 . E. R. Elenberg, R. Khanna, A. G. Dimakis, and Sahand Negahban. Restricted strong convexity implies weak submodularity. Annuals of Statistics, 2016."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/3219819.3220020"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00016"},{"key":"e_1_3_2_1_16_1","volume-title":"Adversarial texts with gradient methods. ArXiv, abs\/1801.07175","author":"Gong Z.","year":"2018","unstructured":"Z. Gong , W. Wang , B. Li , D. Song , and W. Ku . Adversarial texts with gradient methods. ArXiv, abs\/1801.07175 , 2018 . Z. Gong, W. Wang, B. Li, D. Song, and W. Ku. Adversarial texts with gradient methods. ArXiv, abs\/1801.07175, 2018."},{"key":"e_1_3_2_1_17_1","volume-title":"ICLR","author":"Goodfellow I.","year":"2015","unstructured":"I. Goodfellow , J. Shlens , and C. Szegedy . Explaining and harnessing adversarial examples . In ICLR , 2015 . I. Goodfellow, J. Shlens, and C. Szegedy. Explaining and harnessing adversarial examples. In ICLR, 2015."},{"key":"e_1_3_2_1_18_1","volume-title":"ICLR","author":"Hassidim A.","year":"2017","unstructured":"A. Hassidim and Y. Singer . Robust guarantees of stochastic greedy algorithms . In ICLR , 2017 . A. Hassidim and Y. Singer. Robust guarantees of stochastic greedy algorithms. In ICLR, 2017."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1109\/CVPR.2016.90"},{"key":"e_1_3_2_1_20_1","first-page":"322","author":"C. JE, C. GR","year":"2008","unstructured":"C. JE, C. GR , Chai T, M. M, Tang Y, B. DR, B. NJ, V. SA, C. GJ, B. I, B.JA, M. SA, S. C, S. JL, and S. CO. Photosynthetic control of atmospheric carbonyl sulfide during the growing season. Science , 322 , 2008 . C. JE, C. GR, Chai T, M. M, Tang Y, B. DR, B. NJ, V. SA, C. GJ, B. I, B.JA, M. SA, S. C, S. JL, and S. CO. Photosynthetic control of atmospheric carbonyl sulfide during the growing season. Science, 322, 2008.","journal-title":"Science"},{"key":"e_1_3_2_1_21_1","volume-title":"ICLR","author":"Kuleshov V.","year":"2018","unstructured":"V. Kuleshov , S. Thakoor , T. Lau , and S. Ermon . Adversarial examples for natural language classification problems . In ICLR , 2018 . V. Kuleshov, S. Thakoor, T. Lau, and S. Ermon. Adversarial examples for natural language classification problems. In ICLR, 2018."},{"key":"e_1_3_2_1_22_1","volume-title":"ICLR","author":"Miyato T.","year":"2016","unstructured":"T. Miyato , A. M. Dai , and I.J. Goodfellow . Adversarial training methods for semi-supervised text classification . In ICLR , 2016 . T. Miyato, A. M. Dai, and I.J. Goodfellow. Adversarial training methods for semi-supervised text classification. In ICLR, 2016."},{"key":"e_1_3_2_1_23_1","first-page":"8","author":"Fisher G. Nemhauser M.L.","year":"1978","unstructured":"G. Nemhauser M.L. Fisher and L.A. Wolsey . An analysis of approximations for maximizing submodular set functions. Mathematical Programming , 8 , 1978 . G. Nemhauser M.L. Fisher and L.A. Wolsey. An analysis of approximations for maximizing submodular set functions. Mathematical Programming, 8, 1978.","journal-title":"Mathematical Programming"},{"key":"e_1_3_2_1_24_1","first-page":"14","author":"Nemhauser G.","year":"1978","unstructured":"G. Nemhauser and L.A. Wolsey . An anlaysis of approximations for maximizing submodular set functions. Mathematical Programming , 14 , 1978 . G. Nemhauser and L.A. Wolsey. An anlaysis of approximations for maximizing submodular set functions. Mathematical Programming, 14, 1978.","journal-title":"Mathematical Programming"},{"key":"e_1_3_2_1_25_1","first-page":"3","author":"Nemhauser G.","year":"1978","unstructured":"G. Nemhauser and L.A. Wolsey . Best algorithms for approximating the maximum of a submodular set function. Mathematics of Operations Research , 3 , 1978 . G. Nemhauser and L.A. Wolsey. Best algorithms for approximating the maximum of a submodular set function. Mathematics of Operations Research, 3, 1978.","journal-title":"Mathematics of Operations Research"},{"key":"e_1_3_2_1_26_1","volume-title":"Papadimitriou and Kenneth Steiglitz. Combinatorial Optimization: Algorithms and Complexity","author":"Christos","year":"1982","unstructured":"Christos H. Papadimitriou and Kenneth Steiglitz. Combinatorial Optimization: Algorithms and Complexity . Prentice-Hall, Inc. , 1982 . Christos H. Papadimitriou and Kenneth Steiglitz. Combinatorial Optimization: Algorithms and Complexity. Prentice-Hall, Inc., 1982."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM.2016.7795300"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/ACSSC.1993.342465"},{"key":"e_1_3_2_1_29_1","volume-title":"SysML","author":"Qi L.","year":"2019","unstructured":"L. Qi , L. Wu , P. Chen , A. Dimakis , and and M. Witbrock I. Dhillon . Discrete attacks and submodular optimization with applications to text classification . In SysML , 2019 . L. Qi, L. Wu, P. Chen, A. Dimakis, and and M. Witbrock I. Dhillon. Discrete attacks and submodular optimization with applications to text classification. In SysML, 2019."},{"key":"e_1_3_2_1_30_1","volume-title":"Towards crafting text adversarial samples. CoRR, abs\/1707.02812","author":"Samanta S.","year":"2017","unstructured":"S. Samanta and S. Mehta . Towards crafting text adversarial samples. CoRR, abs\/1707.02812 , 2017 . S. Samanta and S. Mehta. Towards crafting text adversarial samples. CoRR, abs\/1707.02812, 2017."},{"key":"e_1_3_2_1_31_1","volume-title":"ICLR","author":"Szegedy C.","year":"2013","unstructured":"C. Szegedy , W. Zaremba , I. Sutskever , J. Bruna , D. Erhan , I. J. Goodfellow , and R. Fergus . Intriguing properties of neural networks . In ICLR , 2013 . C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. J. Goodfellow, and R. Fergus. Intriguing properties of neural networks. In ICLR, 2013."},{"key":"e_1_3_2_1_32_1","volume-title":"Adversarial attacks and defenses in images, graphs and text: A review","author":"Xu H.","year":"2019","unstructured":"H. Xu , Y. Ma , H. Liu , D. Deb , H. Liu , J. Tang , and A. K. Jain . Adversarial attacks and defenses in images, graphs and text: A review , 2019 . H. Xu, Y. Ma, H. Liu, D. Deb, H. Liu, J. Tang, and A. K. Jain. Adversarial attacks and defenses in images, graphs and text: A review, 2019."},{"key":"e_1_3_2_1_33_1","volume-title":"Greedy attack and gumbel attack: Generating adversarial examples for discrete data. ArXiv, abs\/1805.12316","author":"Yang P.","year":"2018","unstructured":"P. Yang , J. Chen , C. Hsieh , J. Wang , and M. I. Jordan . Greedy attack and gumbel attack: Generating adversarial examples for discrete data. ArXiv, abs\/1805.12316 , 2018 . P. Yang, J. Chen, C. Hsieh, J. Wang, and M. I. Jordan. Greedy attack and gumbel attack: Generating adversarial examples for discrete data. ArXiv, abs\/1805.12316, 2018."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133990"},{"key":"e_1_3_2_1_35_1","first-page":"46","author":"Zhang F.","year":"2016","unstructured":"F. Zhang , P. P. K. Chan , B. Biggio , D. S. Yeung , and F. Roli . Adversarial feature selection against evasion attacks. IEEE Transactions on Cybernetics , 46 , 2016 . F. Zhang, P. P. K. Chan, B. Biggio, D. S. Yeung, and F. Roli. Adversarial feature selection against evasion attacks. IEEE Transactions on Cybernetics, 46, 2016.","journal-title":"Adversarial feature selection against evasion attacks. IEEE Transactions on Cybernetics"}],"event":{"name":"KDD '20: The 26th ACM SIGKDD Conference on Knowledge Discovery and Data Mining","location":"Virtual Event CA USA","acronym":"KDD '20","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGKDD ACM Special Interest Group on Knowledge Discovery in Data"]},"container-title":["Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3394486.3403194","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3394486.3403194","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:31:34Z","timestamp":1750195894000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3394486.3403194"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,8,20]]},"references-count":35,"alternative-id":["10.1145\/3394486.3403194","10.1145\/3394486"],"URL":"https:\/\/doi.org\/10.1145\/3394486.3403194","relation":{},"subject":[],"published":{"date-parts":[[2020,8,20]]},"assertion":[{"value":"2020-08-20","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}