activity
20112025
most citedWild Patterns: Ten Years After the Rise of Adversarial Machine Learning

1.4k citations · 4.6k across the 52 of their papers we have counts for

collaborators
Showing 2017Show all

10 papers · 1 filter

cs.CV2017

Super-sparse Learning in Similarity Spaces

Ambra Demontis, Marco Melis, Battista Biggio +2

In several applications, input samples are more naturally represented in terms of similarities between each other, rather than in terms of feature vectors. In these settings, machi…

cs.CV2017★ 1.4k cited

Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning

Battista Biggio, Fabio Roli

Learning-based pattern classifiers, including deep networks, have shown impressive performance in several application domains, ranging from computer vision to cybersecurity. Howeve…

cs.CR2017★ 22 cited

Adversarial Detection of Flash Malware: Limitations and Open Issues

Davide Maiorca, Ambra Demontis, Battista Biggio +2

During the past four years, Flash malware has become one of the most insidious threats to detect, with almost 600 critical vulnerabilities targeting Adobe Flash disclosed in the wi…

cs.LG2017★ 428 cited

Security Evaluation of Pattern Classifiers under Attack

Battista Biggio, Giorgio Fumera, Fabio Roli

Pattern classification systems are commonly used in adversarial applications, like biometric authentication, network intrusion detection, and spam filtering, in which data can be p…

cs.LG2017★ 12 cited

On Security and Sparsity of Linear Classifiers for Adversarial Settings

Ambra Demontis, Paolo Russu, Battista Biggio +2

Machine-learning techniques are widely used in security-related applications, like spam and malware detection. However, in such settings, they have been shown to be vulnerable to a…

cs.LG2017

Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization

Luis Muñoz-González, Battista Biggio, Ambra Demontis +4

A number of online services nowadays rely upon machine learning to extract valuable information from data collected in the wild. This exposes learning algorithms to the threat of d…

cs.LG2017

Is Deep Learning Safe for Robot Vision? Adversarial Examples against the iCub Humanoid

Marco Melis, Ambra Demontis, Battista Biggio +3

Deep neural networks have been widely adopted in recent years, exhibiting impressive performances in several application domains. It has however been shown that they can be fooled…

cs.CR2017★ 889 cited

Evasion Attacks against Machine Learning at Test Time

Battista Biggio, Igino Corona, Davide Maiorca +5

In security-sensitive applications, the success of machine learning depends on a thorough vetting of their resistance to adversarial data. In one pertinent, well-motivated attack s…

cs.CR2017

DeltaPhish: Detecting Phishing Webpages in Compromised Websites

Igino Corona, Battista Biggio, Matteo Contini +6

The large-scale deployment of modern phishing attacks relies on the automatic exploitation of vulnerable websites in the wild, to maximize profit while hindering attack traceabilit…

cs.CR2017

Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection

Ambra Demontis, Marco Melis, Battista Biggio +6

To cope with the increasing variability and sophistication of modern attacks, machine learning has been widely adopted as a statistically-sound tool for malware detection. However,…