Adversarial learning

Many classification tasks, such as spam filtering, intrusion detection, and terrorism detection, are complicated by an adversary who wishes to avoid detection. Previous work on adversarial classification has made the unrealistic assumption that the attacker has perfect knowledge of the classifier [2]. In this paper, we introduce the adversarial classifier reverse engineering (ACRE) learning problem, the task of learning sufficient information about a classifier to construct adversarial attacks. We present efficient algorithms for reverse engineering linear classifiers with either continuous or Boolean features and demonstrate their effectiveness using real data from the domain of spam filtering. Categories and Subject Descriptors I.2.6 [Artificial Intelligence]: Learning--Concept learning; F.2 [Analysis of Algorithms and Problem Complexity]: Miscellaneous General Terms Algorithms, Theory Keywords Adversarial classification, linear classifiers, spam

• Type: Conference
• Year: 2005
• Where: KDD
• Authors: Daniel Lowd, Christopher Meek
• Keywords: Adversarial Attacks, Adversarial Classifier, Data Mining, KDD 2005, Keywords Adversarial Classification