Evading classifiers in discrete domains with provable optimality guarantees

Bogdan Kulynych, Jamie Hayes, Nikita Samarin +1

Machine-learning models for security-critical applications such as bot, malware, or spam detection, operate in constrained discrete domains. These applications would benefit from h…