{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T23:24:32Z","timestamp":1778023472988,"version":"3.51.4"},"publisher-location":"New York, NY, USA","reference-count":59,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,7,12]],"date-time":"2023-07-12T00:00:00Z","timestamp":1689120000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,7,12]]},"DOI":"10.1145\/3597926.3598129","type":"proceedings-article","created":{"date-parts":[[2023,7,13]],"date-time":"2023-07-13T20:12:53Z","timestamp":1689279173000},"page":"1207-1218","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Systematic Testing of the Data-Poisoning Robustness of KNN"],"prefix":"10.1145","author":[{"given":"Yannan","family":"Li","sequence":"first","affiliation":[{"name":"University of Southern California, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jingbo","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Southern California, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chao","family":"Wang","sequence":"additional","affiliation":[{"name":"University of Southern California, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,7,13]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.aci.2014.10.001"},{"key":"e_1_3_2_1_2_1","volume-title":"Predicting movie ratings using KNN","author":"Andersson Moa","unstructured":"Moa Andersson and Lisa Tran . 2020. Predicting movie ratings using KNN . KTH Royal Institute of Technology , Stockholm, Sweden . Moa Andersson and Lisa Tran. 2020. Predicting movie ratings using KNN. KTH Royal Institute of Technology, Stockholm, Sweden."},{"key":"e_1_3_2_1_3_1","first-page":"3","article-title":"A public domain dataset for human activity recognition using smartphones","volume":"3","author":"Anguita Davide","year":"2013","unstructured":"Davide Anguita , Alessandro Ghio , Luca Oneto , Xavier Parra , and Jorge Luis Reyes-Ortiz . 2013 . A public domain dataset for human activity recognition using smartphones .. In Esann. 3 , 3 . Davide Anguita, Alessandro Ghio, Luca Oneto, Xavier Parra, and Jorge Luis Reyes-Ortiz. 2013. A public domain dataset for human activity recognition using smartphones.. In Esann. 3, 3.","journal-title":"Esann."},{"key":"e_1_3_2_1_4_1","volume-title":"Proceedings of the 37th International Conference on Machine Learning, ICML 2020","volume":"550","author":"Bahri Dara","year":"2020","unstructured":"Dara Bahri , Heinrich Jiang , and Maya R. Gupta . 2020. Deep k-NN for Noisy Labels . In Proceedings of the 37th International Conference on Machine Learning, ICML 2020 , 13-18 July 2020 , Virtual Event (Proceedings of Machine Learning Research , Vol. 119). PMLR, 540\u2013 550 . Dara Bahri, Heinrich Jiang, and Maya R. Gupta. 2020. Deep k-NN for Noisy Labels. In Proceedings of the 37th International Conference on Machine Learning, ICML 2020, 13-18 July 2020, Virtual Event (Proceedings of Machine Learning Research, Vol. 119). PMLR, 540\u2013550."},{"key":"e_1_3_2_1_5_1","unstructured":"Dirk Beyer and Thomas Lemberger. 2017. Software Verification: Testing vs. Model Checking - A Comparative Evaluation of the State of the Art. In Hardware and Software: Verification and Testing - 13th International Haifa Verification Conference HVC 2017 Haifa Israel November 13-15 2017 Proceedings Ofer Strichman and Rachel Tzoref-Brill (Eds.) (Lecture Notes in Computer Science Vol. 10629). Springer 99\u2013114. \t\t\t\t  Dirk Beyer and Thomas Lemberger. 2017. Software Verification: Testing vs. Model Checking - A Comparative Evaluation of the State of the Art. In Hardware and Software: Verification and Testing - 13th International Haifa Verification Conference HVC 2017 Haifa Israel November 13-15 2017 Proceedings Ofer Strichman and Rachel Tzoref-Brill (Eds.) (Lecture Notes in Computer Science Vol. 10629). Springer 99\u2013114."},{"key":"e_1_3_2_1_6_1","volume-title":"International workshop on multiple classifier systems. 350\u2013359","author":"Biggio Battista","year":"2011","unstructured":"Battista Biggio , Igino Corona , Giorgio Fumera , Giorgio Giacinto , and Fabio Roli . 2011 . Bagging classifiers for fighting poisoning attacks in adversarial classification tasks . In International workshop on multiple classifier systems. 350\u2013359 . Battista Biggio, Igino Corona, Giorgio Fumera, Giorgio Giacinto, and Fabio Roli. 2011. Bagging classifiers for fighting poisoning attacks in adversarial classification tasks. In International workshop on multiple classifier systems. 350\u2013359."},{"key":"e_1_3_2_1_7_1","volume-title":"Proceedings of the 29th International Conference on Machine Learning, ICML 2012","author":"Biggio Battista","year":"2012","unstructured":"Battista Biggio , Blaine Nelson , and Pavel Laskov . 2012 . Poisoning Attacks against Support Vector Machines . In Proceedings of the 29th International Conference on Machine Learning, ICML 2012 , Edinburgh, Scotland, UK, June 26 - July 1, 2012. Battista Biggio, Blaine Nelson, and Pavel Laskov. 2012. Poisoning Attacks against Support Vector Machines. In Proceedings of the 29th International Conference on Machine Learning, ICML 2012, Edinburgh, Scotland, UK, June 26 - July 1, 2012."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of the 2014 workshop on artificial intelligent and security workshop. 27\u201336","author":"Biggio Battista","year":"2014","unstructured":"Battista Biggio , Konrad Rieck , Davide Ariu , Christian Wressnegger , Igino Corona , Giorgio Giacinto , and Fabio Roli . 2014 . Poisoning behavioral malware clustering . In Proceedings of the 2014 workshop on artificial intelligent and security workshop. 27\u201336 . Battista Biggio, Konrad Rieck, Davide Ariu, Christian Wressnegger, Igino Corona, Giorgio Giacinto, and Fabio Roli. 2014. Poisoning behavioral malware clustering. In Proceedings of the 2014 workshop on artificial intelligent and security workshop. 27\u201336."},{"key":"e_1_3_2_1_9_1","volume-title":"Program-Adaptive Mutational Fuzzing. In 2015 IEEE Symposium on Security and Privacy, SP 2015","author":"Cha Sang Kil","year":"2015","unstructured":"Sang Kil Cha , Maverick Woo , and David Brumley . 2015 . Program-Adaptive Mutational Fuzzing. In 2015 IEEE Symposium on Security and Privacy, SP 2015 , San Jose, CA, USA , May 17-21, 2015. IEEE Computer Society, 725\u2013741. Sang Kil Cha, Maverick Woo, and David Brumley. 2015. Program-Adaptive Mutational Fuzzing. In 2015 IEEE Symposium on Security and Privacy, SP 2015, San Jose, CA, USA, May 17-21, 2015. IEEE Computer Society, 725\u2013741."},{"key":"e_1_3_2_1_10_1","unstructured":"Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526. \t\t\t\t  Xinyun Chen Chang Liu Bo Li Kimberly Lu and Dawn Song. 2017. Targeted backdoor attacks on deep learning systems using data poisoning. arXiv preprint arXiv:1712.05526."},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/512950.512973"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/2535838.2537850"},{"key":"e_1_3_2_1_13_1","volume-title":"28th $USENIX$ Security Symposium ($USENIX$ Security 19). 321\u2013338.","author":"Demontis Ambra","unstructured":"Ambra Demontis , Marco Melis , Maura Pintor , Matthew Jagielski , Battista Biggio , Alina Oprea , Cristina Nita-Rotaru , and Fabio Roli . 2019. Why do adversarial attacks transfer? explaining transferability of evasion and poisoning attacks . In 28th $USENIX$ Security Symposium ($USENIX$ Security 19). 321\u2013338. Ambra Demontis, Marco Melis, Maura Pintor, Matthew Jagielski, Battista Biggio, Alina Oprea, Cristina Nita-Rotaru, and Fabio Roli. 2019. Why do adversarial attacks transfer? explaining transferability of evasion and poisoning attacks. In 28th $USENIX$ Security Symposium ($USENIX$ Security 19). 321\u2013338."},{"key":"e_1_3_2_1_14_1","volume-title":"Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation. 1083\u20131097","author":"Drews Samuel","year":"2020","unstructured":"Samuel Drews , Aws Albarghouthi , and Loris D\u2019Antoni . 2020 . Proving data-poisoning robustness in decision trees . In Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation. 1083\u20131097 . Samuel Drews, Aws Albarghouthi, and Loris D\u2019Antoni. 2020. Proving data-poisoning robustness in decision trees. In Proceedings of the 41st ACM SIGPLAN Conference on Programming Language Design and Implementation. 1083\u20131097."},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the USENIX Annual Technical Conference (ATC). 1\u201314","author":"Duplyakin Dmitry","year":"2019","unstructured":"Dmitry Duplyakin , Robert Ricci , Aleksander Maricq , Gary Wong , Jonathon Duerig , Eric Eide , Leigh Stoller , Mike Hibler , David Johnson , Kirk Webb , Aditya Akella , Kuangching Wang , Glenn Ricart , Larry Landweber , Chip Elliott , Michael Zink , Emmanuel Cecchet , Snigdhaswin Kar , and Prabodh Mishra . 2019 . The Design and Operation of CloudLab . In Proceedings of the USENIX Annual Technical Conference (ATC). 1\u201314 . https:\/\/www.flux.utah.edu\/paper\/duplyakin-atc19 Dmitry Duplyakin, Robert Ricci, Aleksander Maricq, Gary Wong, Jonathon Duerig, Eric Eide, Leigh Stoller, Mike Hibler, David Johnson, Kirk Webb, Aditya Akella, Kuangching Wang, Glenn Ricart, Larry Landweber, Chip Elliott, Michael Zink, Emmanuel Cecchet, Snigdhaswin Kar, and Prabodh Mishra. 2019. The Design and Operation of CloudLab. In Proceedings of the USENIX Annual Technical Conference (ATC). 1\u201314. https:\/\/www.flux.utah.edu\/paper\/duplyakin-atc19"},{"key":"e_1_3_2_1_16_1","volume-title":"Robust logistic regression and classification. Advances in neural information processing systems, 27","author":"Feng Jiashi","year":"2014","unstructured":"Jiashi Feng , Huan Xu , Shie Mannor , and Shuicheng Yan . 2014. Robust logistic regression and classification. Advances in neural information processing systems, 27 ( 2014 ), 253\u2013261. Jiashi Feng, Huan Xu, Shie Mannor, and Shuicheng Yan. 2014. Robust logistic regression and classification. Advances in neural information processing systems, 27 (2014), 253\u2013261."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1111\/j.1469-1809.1936.tb02137.x"},{"key":"e_1_3_2_1_18_1","volume-title":"Letter recognition using Holland-style adaptive classifiers. Machine learning, 6, 2","author":"Frey Peter W","year":"1991","unstructured":"Peter W Frey and David J Slate . 1991. Letter recognition using Holland-style adaptive classifiers. Machine learning, 6, 2 ( 1991 ), 161\u2013182. Peter W Frey and David J Slate. 1991. Letter recognition using Holland-style adaptive classifiers. Machine learning, 6, 2 (1991), 161\u2013182."},{"key":"e_1_3_2_1_19_1","volume-title":"The reduced nearest neighbor rule (corresp.)","author":"Gates Geoffrey","year":"1972","unstructured":"Geoffrey Gates . 1972. The reduced nearest neighbor rule (corresp.) . IEEE transactions on information theory, 18, 3 ( 1972 ), 431\u2013433. Geoffrey Gates. 1972. The reduced nearest neighbor rule (corresp.). IEEE transactions on information theory, 18, 3 (1972), 431\u2013433."},{"key":"e_1_3_2_1_20_1","unstructured":"Google. 2016. Honggfuzz. https:\/\/google.github.io\/honggfuzz\/ \t\t\t\t  Google. 2016. Honggfuzz. https:\/\/google.github.io\/honggfuzz\/"},{"key":"e_1_3_2_1_21_1","volume-title":"OTM Confederated International Conferences\" On the Move to Meaningful Internet Systems\". 986\u2013996","author":"Guo Gongde","year":"2003","unstructured":"Gongde Guo , Hui Wang , David Bell , Yaxin Bi , and Kieran Greer . 2003 . KNN model-based approach in classification . In OTM Confederated International Conferences\" On the Move to Meaningful Internet Systems\". 986\u2013996 . Gongde Guo, Hui Wang, David Bell, Yaxin Bi, and Kieran Greer. 2003. KNN model-based approach in classification. In OTM Confederated International Conferences\" On the Move to Meaningful Internet Systems\". 986\u2013996."},{"key":"e_1_3_2_1_22_1","volume-title":"2018 IEEE Symposium on Security and Privacy (SP). 19\u201335","author":"Jagielski Matthew","year":"2018","unstructured":"Matthew Jagielski , Alina Oprea , Battista Biggio , Chang Liu , Cristina Nita-Rotaru , and Bo Li . 2018 . Manipulating machine learning: Poisoning attacks and countermeasures for regression learning . In 2018 IEEE Symposium on Security and Privacy (SP). 19\u201335 . Matthew Jagielski, Alina Oprea, Battista Biggio, Chang Liu, Cristina Nita-Rotaru, and Bo Li. 2018. Manipulating machine learning: Poisoning attacks and countermeasures for regression learning. In 2018 IEEE Symposium on Security and Privacy (SP). 19\u201335."},{"key":"e_1_3_2_1_23_1","volume-title":"Thirty-Fifth AAAI Conference on Artificial Intelligence, AAAI","author":"Jia Jinyuan","year":"2021","unstructured":"Jinyuan Jia , Xiaoyu Cao , and Neil Zhenqiang Gong . 2021. Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks . In Thirty-Fifth AAAI Conference on Artificial Intelligence, AAAI 2021 , Thirty-Third Conference on Innovative Applications of Artificial Intelligence, IAAI 2021, The Eleventh Symposium on Educational Advances in Artificial Intelligence, EAAI 2021, Virtual Event , February 2-9, 2021. 7961\u20137969. Jinyuan Jia, Xiaoyu Cao, and Neil Zhenqiang Gong. 2021. Intrinsic Certified Robustness of Bagging against Data Poisoning Attacks. In Thirty-Fifth AAAI Conference on Artificial Intelligence, AAAI 2021, Thirty-Third Conference on Innovative Applications of Artificial Intelligence, IAAI 2021, The Eleventh Symposium on Educational Advances in Artificial Intelligence, EAAI 2021, Virtual Event, February 2-9, 2021. 7961\u20137969."},{"key":"e_1_3_2_1_24_1","volume-title":"Thirty-Sixth AAAI Conference on Artificial Intelligence, AAAI","author":"Jia Jinyuan","year":"2022","unstructured":"Jinyuan Jia , Yupei Liu , Xiaoyu Cao , and Neil Zhenqiang Gong . 2022. Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks . In Thirty-Sixth AAAI Conference on Artificial Intelligence, AAAI 2022 , Thirty-Fourth Conference on Innovative Applications of Artificial Intelligence, IAAI 2022, The Twelveth Symposium on Educational Advances in Artificial Intelligence, EAAI 2022 Virtual Event, February 22 - March 1, 2022. AAAI Press , 9575\u20139583. Jinyuan Jia, Yupei Liu, Xiaoyu Cao, and Neil Zhenqiang Gong. 2022. Certified Robustness of Nearest Neighbors against Data Poisoning and Backdoor Attacks. In Thirty-Sixth AAAI Conference on Artificial Intelligence, AAAI 2022, Thirty-Fourth Conference on Innovative Applications of Artificial Intelligence, IAAI 2022, The Twelveth Symposium on Educational Advances in Artificial Intelligence, EAAI 2022 Virtual Event, February 22 - March 1, 2022. AAAI Press, 9575\u20139583."},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-021-06119-y"},{"key":"e_1_3_2_1_26_1","unstructured":"Alex Krizhevsky and Geoffrey Hinton. 2009. Learning multiple layers of features from tiny images. \t\t\t\t  Alex Krizhevsky and Geoffrey Hinton. 2009. Learning multiple layers of features from tiny images."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00165-009-0110-2"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2950291"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/5.726791"},{"key":"e_1_3_2_1_30_1","volume-title":"9th International Conference on Learning Representations, ICLR 2021","author":"Levine Alexander","year":"2021","unstructured":"Alexander Levine and Soheil Feizi . 2021 . Deep Partition Aggregation: Provable Defenses against General Poisoning Attacks . In 9th International Conference on Learning Representations, ICLR 2021 , Virtual Event, Austria , May 3-7, 2021. Alexander Levine and Soheil Feizi. 2021. Deep Partition Aggregation: Provable Defenses against General Poisoning Attacks. In 9th International Conference on Learning Representations, ICLR 2021, Virtual Event, Austria, May 3-7, 2021."},{"key":"e_1_3_2_1_31_1","volume-title":"FMCAD 2022","author":"Li Yannan","year":"2022","unstructured":"Yannan Li , Jingbo Wang , and Chao Wang . 2022 . Proving Robustness of KNN Against Adversarial Data Poisoning. In 22nd Formal Methods in Computer-Aided Design , FMCAD 2022 , Trento, Italy , October 17-21, 2022, Alberto Griggio and Neha Rungta (Eds.). IEEE, 7\u201316. Yannan Li, Jingbo Wang, and Chao Wang. 2022. Proving Robustness of KNN Against Adversarial Data Poisoning. In 22nd Formal Methods in Computer-Aided Design, FMCAD 2022, Trento, Italy, October 17-21, 2022, Alberto Griggio and Neha Rungta (Eds.). IEEE, 7\u201316."},{"key":"e_1_3_2_1_32_1","volume-title":"Certifying the Fairness of KNN in the Presence of Dataset Bias. In International Conference on Computer Aided Verification. Springer.","author":"Li Yannan","year":"2023","unstructured":"Yannan Li , Jingbo Wang , and Chao Wang . 2023 . Certifying the Fairness of KNN in the Presence of Dataset Bias. In International Conference on Computer Aided Verification. Springer. Yannan Li, Jingbo Wang, and Chao Wang. 2023. Certifying the Fairness of KNN in the Presence of Dataset Bias. In International Conference on Computer Aided Verification. Springer."},{"key":"e_1_3_2_1_33_1","unstructured":"LLVM. 2021. libFuzzer. https:\/\/llvm.org\/docs\/LibFuzzer.html \t\t\t\t  LLVM. 2021. libFuzzer. https:\/\/llvm.org\/docs\/LibFuzzer.html"},{"key":"e_1_3_2_1_34_1","volume-title":"Proceedings of the Twenty-Eighth International Joint Conference on Artificial Intelligence, IJCAI 2019","author":"Ma Yuzhe","year":"2019","unstructured":"Yuzhe Ma , Xiaojin Zhu , and Justin Hsu . 2019 . Data Poisoning against Differentially-Private Learners: Attacks and Defenses . In Proceedings of the Twenty-Eighth International Joint Conference on Artificial Intelligence, IJCAI 2019 , Macao, China , August 10-16, 2019, Sarit Kraus (Ed.). ijcai.org, 4732\u20134738. Yuzhe Ma, Xiaojin Zhu, and Justin Hsu. 2019. Data Poisoning against Differentially-Private Learners: Attacks and Defenses. In Proceedings of the Twenty-Eighth International Joint Conference on Artificial Intelligence, IJCAI 2019, Macao, China, August 10-16, 2019, Sarit Kraus (Ed.). ijcai.org, 4732\u20134738."},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"crossref","unstructured":"Geoffrey J McLachlan Kim-Anh Do and Christophe Ambroise. 2005. Analyzing microarray gene expression data. \t\t\t\t  Geoffrey J McLachlan Kim-Anh Do and Christophe Ambroise. 2005. Analyzing microarray gene expression data.","DOI":"10.1002\/047172842X"},{"key":"e_1_3_2_1_36_1","volume-title":"Proceedings of the AAAI Conference on Artificial Intelligence.","author":"Mei Shike","year":"2015","unstructured":"Shike Mei and Xiaojin Zhu . 2015 . Using machine teaching to identify optimal training-set attacks on machine learners . In Proceedings of the AAAI Conference on Artificial Intelligence. Shike Mei and Xiaojin Zhu. 2015. Using machine teaching to identify optimal training-set attacks on machine learners. In Proceedings of the AAAI Conference on Artificial Intelligence."},{"key":"e_1_3_2_1_37_1","volume-title":"Advances in Neural Information Processing Systems 34: Annual Conference on Neural Information Processing Systems 2021","author":"Meyer Anna P.","year":"2021","unstructured":"Anna P. Meyer , Aws Albarghouthi , and Loris D\u2019Antoni . 2021 . Certifying Robustness to Programmable Data Bias in Decision Trees . In Advances in Neural Information Processing Systems 34: Annual Conference on Neural Information Processing Systems 2021 , NeurIPS 2021, December 6-14, 2021, virtual. 26276\u201326288. Anna P. Meyer, Aws Albarghouthi, and Loris D\u2019Antoni. 2021. Certifying Robustness to Programmable Data Bias in Decision Trees. In Advances in Neural Information Processing Systems 34: Annual Conference on Neural Information Processing Systems 2021, NeurIPS 2021, December 6-14, 2021, virtual. 26276\u201326288."},{"key":"e_1_3_2_1_38_1","volume-title":"Certifying Data-Bias Robustness in Linear Regression. CoRR, abs\/2206.03575","author":"Meyer Anna P.","year":"2022","unstructured":"Anna P. Meyer , Aws Albarghouthi , and Loris D\u2019Antoni . 2022. Certifying Data-Bias Robustness in Linear Regression. CoRR, abs\/2206.03575 ( 2022 ). Anna P. Meyer, Aws Albarghouthi, and Loris D\u2019Antoni. 2022. Certifying Data-Bias Robustness in Linear Regression. CoRR, abs\/2206.03575 (2022)."},{"key":"e_1_3_2_1_39_1","volume-title":"Vivekandanda Maganty, Ravi Murthy, Ajitkumar Natarajan, and Jeff Steidl.","author":"Miller Barton P","year":"1995","unstructured":"Barton P Miller , David Koski , Cjin Pheow Lee , Vivekandanda Maganty, Ravi Murthy, Ajitkumar Natarajan, and Jeff Steidl. 1995 . Fuzz revisited: A re-examination of the reliability of UNIX utilities and services. University of Wisconsin-Madison Department of Computer Sciences . Barton P Miller, David Koski, Cjin Pheow Lee, Vivekandanda Maganty, Ravi Murthy, Ajitkumar Natarajan, and Jeff Steidl. 1995. Fuzz revisited: A re-examination of the reliability of UNIX utilities and services. University of Wisconsin-Madison Department of Computer Sciences."},{"key":"e_1_3_2_1_40_1","volume-title":"FORMATS 2021, Paris, France, August 24-26, 2021, Proceedings, Catalin Dima and Mahsa Shirmohammadi (Eds.) (Lecture Notes in Computer Science","volume":"134","author":"Mohammadinejad Sara","year":"2021","unstructured":"Sara Mohammadinejad , Brandon Paulsen , Jyotirmoy V. Deshmukh , and Chao Wang . 2021 . DiffRNN: Differential Verification of Recurrent Neural Networks. In Formal Modeling and Analysis of Timed Systems - 19th International Conference , FORMATS 2021, Paris, France, August 24-26, 2021, Proceedings, Catalin Dima and Mahsa Shirmohammadi (Eds.) (Lecture Notes in Computer Science , Vol. 12860). Springer, 117\u2013 134 . Sara Mohammadinejad, Brandon Paulsen, Jyotirmoy V. Deshmukh, and Chao Wang. 2021. DiffRNN: Differential Verification of Recurrent Neural Networks. In Formal Modeling and Analysis of Timed Systems - 19th International Conference, FORMATS 2021, Paris, France, August 24-26, 2021, Proceedings, Catalin Dima and Mahsa Shirmohammadi (Eds.) (Lecture Notes in Computer Science, Vol. 12860). Springer, 117\u2013134."},{"key":"e_1_3_2_1_41_1","volume-title":"42nd International Conference on Software Engineering","author":"Paulsen Brandon","year":"2020","unstructured":"Brandon Paulsen , Jingbo Wang , and Chao Wang . 2020 . ReluDiff: differential verification of deep neural networks. In ICSE \u201920 : 42nd International Conference on Software Engineering , Seoul, South Korea, 27 June - 19 July, 2020, Gregg Rothermel and Doo-Hwan Bae (Eds.). ACM, 714\u2013726. Brandon Paulsen, Jingbo Wang, and Chao Wang. 2020. ReluDiff: differential verification of deep neural networks. In ICSE \u201920: 42nd International Conference on Software Engineering, Seoul, South Korea, 27 June - 19 July, 2020, Gregg Rothermel and Doo-Hwan Bae (Eds.). ACM, 714\u2013726."},{"key":"e_1_3_2_1_42_1","volume-title":"35th IEEE\/ACM International Conference on Automated Software Engineering, ASE 2020","author":"Paulsen Brandon","year":"2020","unstructured":"Brandon Paulsen , Jingbo Wang , Jiawei Wang , and Chao Wang . 2020 . NEURODIFF: Scalable Differential Verification of Neural Networks using Fine-Grained Approximation . In 35th IEEE\/ACM International Conference on Automated Software Engineering, ASE 2020 , Melbourne, Australia , September 21-25, 2020. IEEE, 784\u2013796. Brandon Paulsen, Jingbo Wang, Jiawei Wang, and Chao Wang. 2020. NEURODIFF: Scalable Differential Verification of Neural Networks using Fine-Grained Approximation. In 35th IEEE\/ACM International Conference on Automated Software Engineering, ASE 2020, Melbourne, Australia, September 21-25, 2020. IEEE, 784\u2013796."},{"key":"e_1_3_2_1_43_1","volume-title":"International Conference on Machine Learning. 8230\u20138241","author":"Rosenfeld Elan","year":"2020","unstructured":"Elan Rosenfeld , Ezra Winston , Pradeep Ravikumar , and Zico Kolter . 2020 . Certified robustness to label-flipping attacks via randomized smoothing . In International Conference on Machine Learning. 8230\u20138241 . Elan Rosenfeld, Ezra Winston, Pradeep Ravikumar, and Zico Kolter. 2020. Certified robustness to label-flipping attacks via randomized smoothing. In International Conference on Machine Learning. 8230\u20138241."},{"key":"e_1_3_2_1_44_1","volume-title":"Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018","author":"Shafahi Ali","year":"2018","unstructured":"Ali Shafahi , W. Ronny Huang , Mahyar Najibi , Octavian Suciu , Christoph Studer , Tudor Dumitras , and Tom Goldstein . 2018 . Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks . In Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018 , NeurIPS 2018, December 3-8, 2018, Montr\u00e9al, Canada, Samy Bengio, Hanna M. Wallach, Hugo Larochelle, Kristen Grauman, Nicol\u00f2 Cesa-Bianchi, and Roman Garnett (Eds.). 6106\u20136116. Ali Shafahi, W. Ronny Huang, Mahyar Najibi, Octavian Suciu, Christoph Studer, Tudor Dumitras, and Tom Goldstein. 2018. Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networks. In Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018, NeurIPS 2018, December 3-8, 2018, Montr\u00e9al, Canada, Samy Bengio, Hanna M. Wallach, Hugo Larochelle, Kristen Grauman, Nicol\u00f2 Cesa-Bianchi, and Roman Garnett (Eds.). 6106\u20136116."},{"key":"e_1_3_2_1_45_1","volume-title":"Certified Defenses for Data Poisoning Attacks. In Advances in Neural Information Processing Systems 30: Annual Conference on Neural Information Processing Systems 2017","author":"Steinhardt Jacob","year":"2017","unstructured":"Jacob Steinhardt , Pang Wei Koh , and Percy Liang . 2017 . Certified Defenses for Data Poisoning Attacks. In Advances in Neural Information Processing Systems 30: Annual Conference on Neural Information Processing Systems 2017 , December 4-9, 2017, Long Beach, CA, USA, Isabelle Guyon, Ulrike von Luxburg, Samy Bengio, Hanna M. Wallach, Rob Fergus, S. V. N. Vishwanathan, and Roman Garnett (Eds.). 3517\u20133529. Jacob Steinhardt, Pang Wei Koh, and Percy Liang. 2017. Certified Defenses for Data Poisoning Attacks. In Advances in Neural Information Processing Systems 30: Annual Conference on Neural Information Processing Systems 2017, December 4-9, 2017, Long Beach, CA, USA, Isabelle Guyon, Ulrike von Luxburg, Samy Bengio, Hanna M. Wallach, Rob Fergus, S. V. N. Vishwanathan, and Roman Garnett (Eds.). 3517\u20133529."},{"key":"e_1_3_2_1_46_1","volume-title":"Driller: Augmenting Fuzzing Through Selective Symbolic Execution. In 23rd Annual Network and Distributed System Security Symposium, NDSS 2016","author":"Stephens Nick","year":"2016","unstructured":"Nick Stephens , John Grosen , Christopher Salls , Andrew Dutcher , Ruoyu Wang , Jacopo Corbetta , Yan Shoshitaishvili , Christopher Kruegel , and Giovanni Vigna . 2016 . Driller: Augmenting Fuzzing Through Selective Symbolic Execution. In 23rd Annual Network and Distributed System Security Symposium, NDSS 2016 , San Diego, California, USA , February 21-24, 2016. The Internet Society. Nick Stephens, John Grosen, Christopher Salls, Andrew Dutcher, Ruoyu Wang, Jacopo Corbetta, Yan Shoshitaishvili, Christopher Kruegel, and Giovanni Vigna. 2016. Driller: Augmenting Fuzzing Through Selective Symbolic Execution. In 23rd Annual Network and Distributed System Security Symposium, NDSS 2016, San Diego, California, USA, February 21-24, 2016. The Internet Society."},{"key":"e_1_3_2_1_47_1","volume-title":"Hal Daume III, and Tudor Dumitras","author":"Suciu Octavian","year":"2018","unstructured":"Octavian Suciu , Radu Marginean , Yigitcan Kaya , Hal Daume III, and Tudor Dumitras . 2018 . When does machine learning $FAIL$? generalized transferability for evasion and poisoning attacks. In 27th $USENIX$ Security Symposium ($USENIX$ Security 18). 1299\u20131316. Octavian Suciu, Radu Marginean, Yigitcan Kaya, Hal Daume III, and Tudor Dumitras. 2018. When does machine learning $FAIL$? generalized transferability for evasion and poisoning attacks. In 27th $USENIX$ Security Symposium ($USENIX$ Security 18). 1299\u20131316."},{"key":"e_1_3_2_1_48_1","volume-title":"Proceedings of the 32nd IEEE\/ACM International Conference on Automated Software Engineering, ASE 2017","author":"Sung Chungha","year":"2017","unstructured":"Chungha Sung , Markus Kusano , and Chao Wang . 2017 . Modular verification of interrupt-driven software . In Proceedings of the 32nd IEEE\/ACM International Conference on Automated Software Engineering, ASE 2017 , Urbana, IL, USA, October 30 - November 03, 2017, Grigore Rosu, Massimiliano Di Penta, and Tien N. Nguyen (Eds.). IEEE Computer Society, 206\u2013216. Chungha Sung, Markus Kusano, and Chao Wang. 2017. Modular verification of interrupt-driven software. In Proceedings of the 32nd IEEE\/ACM International Conference on Automated Software Engineering, ASE 2017, Urbana, IL, USA, October 30 - November 03, 2017, Grigore Rosu, Massimiliano Di Penta, and Tien N. Nguyen (Eds.). IEEE Computer Society, 206\u2013216."},{"key":"e_1_3_2_1_49_1","volume-title":"Fuzzing for software security testing and quality assurance","author":"Takanen Ari","unstructured":"Ari Takanen , Jared D Demott , Charles Miller , and Atte Kettunen . 2018. Fuzzing for software security testing and quality assurance . Artech House . Ari Takanen, Jared D Demott, Charles Miller, and Atte Kettunen. 2018. Fuzzing for software security testing and quality assurance. Artech House."},{"key":"e_1_3_2_1_50_1","volume-title":"Spectral Signatures in Backdoor Attacks. In Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018","author":"Tran Brandon","year":"2018","unstructured":"Brandon Tran , Jerry Li , and Aleksander Madry . 2018 . Spectral Signatures in Backdoor Attacks. In Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018 , NeurIPS 2018, December 3-8, 2018, Montr\u00e9al, Canada, Samy Bengio, Hanna M. Wallach, Hugo Larochelle, Kristen Grauman, Nicol\u00f2 Cesa-Bianchi, and Roman Garnett (Eds.). 8011\u20138021. Brandon Tran, Jerry Li, and Aleksander Madry. 2018. Spectral Signatures in Backdoor Attacks. In Advances in Neural Information Processing Systems 31: Annual Conference on Neural Information Processing Systems 2018, NeurIPS 2018, December 3-8, 2018, Montr\u00e9al, Canada, Samy Bengio, Hanna M. Wallach, Hugo Larochelle, Kristen Grauman, Nicol\u00f2 Cesa-Bianchi, and Roman Garnett (Eds.). 8011\u20138021."},{"key":"e_1_3_2_1_51_1","volume-title":"International Conference on Machine Learning. 5133\u20135142","author":"Wang Yizhen","year":"2018","unstructured":"Yizhen Wang , Somesh Jha , and Kamalika Chaudhuri . 2018 . Analyzing the robustness of nearest neighbors to adversarial examples . In International Conference on Machine Learning. 5133\u20135142 . Yizhen Wang, Somesh Jha, and Kamalika Chaudhuri. 2018. Analyzing the robustness of nearest neighbors to adversarial examples. In International Conference on Machine Learning. 5133\u20135142."},{"key":"e_1_3_2_1_52_1","volume-title":"Rab: Provable robustness against backdoor attacks. arXiv preprint arXiv:2003.08904.","author":"Weber Maurice","year":"2020","unstructured":"Maurice Weber , Xiaojun Xu , Bojan Karlas , Ce Zhang , and Bo Li . 2020 . Rab: Provable robustness against backdoor attacks. arXiv preprint arXiv:2003.08904. Maurice Weber, Xiaojun Xu, Bojan Karlas, Ce Zhang, and Bo Li. 2020. Rab: Provable robustness against backdoor attacks. arXiv preprint arXiv:2003.08904."},{"key":"e_1_3_2_1_53_1","volume-title":"Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation, PLDI 2019","author":"Wu Meng","year":"2019","unstructured":"Meng Wu and Chao Wang . 2019 . Abstract interpretation under speculative execution . In Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation, PLDI 2019 , Phoenix, AZ, USA , June 22-26, 2019, Kathryn S. McKinley and Kathleen Fisher (Eds.). ACM, 802\u2013815. Meng Wu and Chao Wang. 2019. Abstract interpretation under speculative execution. In Proceedings of the 40th ACM SIGPLAN Conference on Programming Language Design and Implementation, PLDI 2019, Phoenix, AZ, USA, June 22-26, 2019, Kathryn S. McKinley and Kathleen Fisher (Eds.). ACM, 802\u2013815."},{"key":"e_1_3_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC.2011.15"},{"key":"e_1_3_2_1_55_1","volume-title":"International Conference on Machine Learning. 1689\u20131698","author":"Xiao Huang","year":"2015","unstructured":"Huang Xiao , Battista Biggio , Gavin Brown , Giorgio Fumera , Claudia Eckert , and Fabio Roli . 2015 . Is feature selection secure against training data poisoning? In International Conference on Machine Learning. 1689\u20131698 . Huang Xiao, Battista Biggio, Gavin Brown, Giorgio Fumera, Claudia Eckert, and Fabio Roli. 2015. Is feature selection secure against training data poisoning? In International Conference on Machine Learning. 1689\u20131698."},{"key":"e_1_3_2_1_56_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.08.081"},{"key":"e_1_3_2_1_57_1","volume-title":"ECAI 2012 - 20th European Conference on Artificial Intelligence. Including Prestigious Applications of Artificial Intelligence (PAIS-2012) System Demonstrations Track","author":"Xiao Han","year":"2012","unstructured":"Han Xiao , Huang Xiao , and Claudia Eckert . 2012. Adversarial Label Flips Attack on Support Vector Machines . In ECAI 2012 - 20th European Conference on Artificial Intelligence. Including Prestigious Applications of Artificial Intelligence (PAIS-2012) System Demonstrations Track , Montpellier, France , August 27-31 , 2012 . 242, IOS Press , 870\u2013875. Han Xiao, Huang Xiao, and Claudia Eckert. 2012. Adversarial Label Flips Attack on Support Vector Machines. In ECAI 2012 - 20th European Conference on Artificial Intelligence. Including Prestigious Applications of Artificial Intelligence (PAIS-2012) System Demonstrations Track, Montpellier, France, August 27-31 , 2012. 242, IOS Press, 870\u2013875."},{"key":"e_1_3_2_1_58_1","unstructured":"Michal Zalewski. 2017. American Fuzzy Lop. https:\/\/lcamtuf.coredump.cx\/afl\/ \t\t\t\t  Michal Zalewski. 2017. American Fuzzy Lop. https:\/\/lcamtuf.coredump.cx\/afl\/"},{"key":"e_1_3_2_1_59_1","volume-title":"International Conference on Machine Learning. 7614\u20137623","author":"Zhu Chen","year":"2019","unstructured":"Chen Zhu , W Ronny Huang , Hengduo Li , Gavin Taylor , Christoph Studer , and Tom Goldstein . 2019 . Transferable clean-label poisoning attacks on deep neural nets . In International Conference on Machine Learning. 7614\u20137623 . Chen Zhu, W Ronny Huang, Hengduo Li, Gavin Taylor, Christoph Studer, and Tom Goldstein. 2019. Transferable clean-label poisoning attacks on deep neural nets. In International Conference on Machine Learning. 7614\u20137623."}],"event":{"name":"ISSTA '23: 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis","location":"Seattle WA USA","acronym":"ISSTA '23","sponsor":["SIGSOFT ACM Special Interest Group on Software Engineering","AITO"]},"container-title":["Proceedings of the 32nd ACM SIGSOFT International Symposium on Software Testing and Analysis"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597926.3598129","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3597926.3598129","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:48:43Z","timestamp":1750182523000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3597926.3598129"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,12]]},"references-count":59,"alternative-id":["10.1145\/3597926.3598129","10.1145\/3597926"],"URL":"https:\/\/doi.org\/10.1145\/3597926.3598129","relation":{},"subject":[],"published":{"date-parts":[[2023,7,12]]},"assertion":[{"value":"2023-07-13","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}