Design of robust classifiers for adversarial environments

Conference Proceedings - IEEE International Conference on Systems, Man and Cybernetics

Volumn , Issue , 2011, Pages 977-982

  Biggio, Battista ^a   Fumera, Giorgio ^a   Roli, Fabio ^a  

^a UNIVERSITY OF CAGLIARI   (Italy)

Author keywords

adversarial classification; Pattern classification; robust classifiers

Indexed keywords

ADVERSARIAL ENVIRONMENTS; CAN DESIGN; CLASSIFICATION SYSTEM; CLASSIFICATION TASKS; DATA DISTRIBUTION; FALSE ALARMS; GENERAL METHOD; IDENTITY VERIFICATION; MALICIOUS ADVERSARIES; SPAM FILTERING;

BIOMETRICS; CYBERNETICS; INTERNET; LEARNING ALGORITHMS; PATTERN RECOGNITION;

INTRUSION DETECTION;

EID: 83755178513     PISSN: 1062922X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICSMC.2011.6083796     Document Type: Conference Paper

References (20)

1. N. Dalvi, P. Domingos, Mausam, S. Sanghai, and D. Verma, "Adversarial classification," in 10th ACM SIGKDD Int.'l Conf. Knowledge Discovery and Data Mining (KDD), Seattle, 2004, pp. 99-108.
2. A. Kolcz and C. H. Teo, "Feature weighting for improved classifier robustness," in 6th Conf. Email and Anti-Spam (CEAS), CA, USA, 2009.
3. R. N. Rodrigues, L. L. Ling, and V. Govindaraju, "Robustness of multimodal biometric fusion methods against spoof attacks," J. Vis. Lang. Comput., vol. 20, no. 3, pp. 169-179, 2009.
4. M. Barreno, B. Nelson, A. Joseph, and J. Tygar, "The security of machine learning," Machine Learning, vol. 81, pp. 121-148, 2010.
5. P. Laskov and R. Lippmann, "Machine learning in adversarial environments," Machine Learning, vol. 81, pp. 115-119, 2010.
6. G. L. Wittel and S. F. Wu, "On attacking statistical spam filters," in 1st Conf. Email and Anti-Spam (CEAS), CA, USA, 2004.
7. D. Lowd and C. Meek, "Good word attacks on statistical spam filters,"in 2nd Conf. Email and Anti-Spam (CEAS), CA, USA, 2005.
8. D. Sculley, G. Wachman, and C. E. Brodley, "Spam filtering using inexact string matching in explicit feature space with on-line linear classifiers," in TREC, E. M. Voorhees and L. P. Buckland, Eds., vol. Special Publication 500-272. NIST, 2006.
9. Z. Jorgensen, Y. Zhou, and M. Inge, "A multiple instance learning strategy for combating good word attacks on spam filters," Journal of Machine Learning Research, vol. 9, pp. 1115-1146, June 2008.
10. A. Globerson and S. T. Roweis, "Nightmare at test time: robust learning by feature deletion," in ICML, ser. ACM International Conference Proceeding Series, W. W. Cohen and A. Moore, Eds., vol. 148. ACM, 2006, pp. 353-360.
11. C. H. Teo, A. Globerson, S. Roweis, and A. Smola, "Convex learning with invariances," in Advances in Neural Information Processing Systems 20, J. Platt, D. Koller, Y. Singer, and S. Roweis, Eds. Cambridge, MA: MIT Press, 2008, pp. 1489-1496.
12. O. Dekel, O. Shamir, and L. Xiao, "Learning to classify with missing and corrupted features," Machine Learning, vol. 81, pp. 149-178, 2010.
13. B. Biggio, G. Fumera, and F. Roli, "Multiple classifier systems for robust classifier design in adversarial environments," Int.'l Journal of Machine Learning and Cybernetics, vol. 1, no. 1, pp. 27-41, 2010.
14. K. Nandakumar, Y. Chen, S. C. Dass, and A. Jain, "Likelihood ratiobased biometric score fusion," IEEE Transactions on Pattern Analysis and Machine Intelligence, vol. 30, pp. 342-347, February 2008.
15. G. F. Cretu, A. Stavrou, M. E. Locasto, S. J. Stolfo, and A. D. Keromytis, "Casting out demons: Sanitizing training data for anomaly sensors,"Security and Privacy, IEEE Symposium on, vol. 0, pp. 81-95, 2008.
16. B. I. Rubinstein, B. Nelson, L. Huang, A. D. Joseph, S.-h. Lau, S. Rao, N. Taft, and J. D. Tygar, "Antidote: understanding and defending against poisoning of anomaly detectors," in Proc. 9th ACM SIGCOMM Internet Measurement Conf., ser. IMC '09. NY, USA: ACM, 2009, pp. 1-14.
17. D. M. J. Tax, "One-class classification," Ph.D. dissertation, Advanced School for Computing and Imaging (ASCI), 2001.
18. A. McCallum and K. Nigam, "A comparison of event models for naive bayes text classification," in Proc. AAAI Workshop on learning for text categorization, 1998, pp. 41-48.
19. M. Sahami, S. Dumais, D. Heckerman, and E. Horvitz, "A bayesian approach to filtering junk e-mail," AAAI Technical Report WS-98-05, Madison, Wisconsin, 1998.
20. G. V. Cormack, "Trec 2007 spam track overview," in TREC, E. M. Voorhees and L. P. Buckland, Eds., vol. Special Publication 500-274. National Institute of Standards and Technology (NIST), 2007.