Certifying Decision Trees Against Evasion Attacks by Program Analysis

Stefano Calzavara, Pietro Ferrara, Claudio Lucchese

Machine learning has proved invaluable for a range of different tasks, yet it also proved vulnerable to evasion attacks, i.e., maliciously crafted perturbations of input data desig…