New method detects evasive product reviews that evade traditional spam detection.
problem Hardened spammers evade behavior-based opinion spam detection systems.
method Proposes EMERAL to generate evasive spams and DETER to defend against them.
result DETER outperforms traditional methods in detecting evasive reviews.
Microscopic models describing a whole of economic interactions in a closed society are considered. The presence of a tax system combined with a redistribution process is taken into account, as well as the occurrence of tax evasion. In particular, the existence is postulated, in relation to the level of evasion, of diff…
Thompson Sampling improves pursuit-evasion coordination.
problem Optimizing pursuer behavior to capture an evader efficiently.
method Variant of Thompson Sampling applied to pursuit-evasion problems.
result Thompson Sampling reduces time-to-capture significantly.
New model predicts dynamic tax evasion with audits and imitation.
problem Static treatment of tax compliance and evasion in Bertotti and Modanese model.
method Piecewise Deterministic Markov Processes (PDMPs) for audits and imitation mechanisms.
result Model shows persistent fluctuations and stationary distribution, not extreme equilibrium.
We develop a model of tax evasion based on the Ising model. We augment the model using an appropriate enforcement mechanism that may allow policy makers to curb tax evasion. With a certain probability tax evaders are subject to an audit. If they get caught they behave honestly for a certain number of periods. Simulatin…
This paper explores evasion attacks against Bayesian models.
problem Bayesian predictive models are vulnerable to evasion attacks.
method Developed gradient-based attacks for specific point predictions and entire posterior distributions.
result Optimal evasion attacks can be designed against Bayesian models.
Treant creates evasion-resistant decision trees.
problem Evasion attacks on decision tree ensembles.
method Treant minimizes evasion-aware loss function, using robust splitting and attack invariance.
result Treant generates accurate, nearly evasion-insensitive decision trees.
New model improves classifier security against evasion attacks by selecting features.
problem Security of machine learning classifiers against evasion attacks.
method Adversary-aware feature selection model incorporating specific adversary assumptions.
result Classifier security worsens with feature selection, but new model improves it.
We analyze income tax evasion dynamics in a standard model of statistical mechanics, the Ising model of ferromagnetism. However, in contrast to previous research, we use an inhomogeneous multi-dimensional Ising model where the local degrees of freedom (agents) are subject to a specific social temperature and coupled to…
Study of pursuit-evasion game on sphere and its relation to planar Apollonius circle.
problem Analyzing pursuit-evasion game on a sphere and its properties.
method Extending classical planar pursuit-evasion game to spherical geometry, studying equilibrium intercept points and their relation to Apollonius domain.
result Condition for intercept point to belong to Apollonius domain on sphere, analogous to planar game.
Study malware evasion attacks and defenses using ML classifiers.
problem Adversarial examples can mislead ML-based malware detectors.
method Investigated white-box and grey-box evasion attacks; compared defense approaches.
result Proposed a framework for grey-box and black-box attacks.
We investigate the effect of tax evasion on the income distribution and the inequality index of a society through a kinetic model described by a set of nonlinear ordinary differential equations. The model allows to compute the global outcome of binary and multiple microscopic interactions between individuals. When evas…
We investigate an inhomogeneous Ising model in the context of tax evasion dynamics where different types of agents are parametrized via local temperatures and magnetic fields. In particular, we analyse the impact of backauditing and endogenously determined penalty rates on tax compliance. Both features contribute to a …
The paper extends PAC-learning to handle evasion adversaries, finding limits on what can be learned.
problem Evasion attacks on machine learning models during testing.
method Extending PAC-learning framework to include evasion adversaries, defining corrupted hypothesis classes, and deriving adversarial VC-dimension.
result The adversarial VC-dimension can be larger or smaller than the standard VC-dimension, offering new insights.
Computes sections of a submersion and applies to evasion path problem.
problem Evasion path problem for mobile sensor networks.
method Computation of sections from fiber homotopy groups and time-varying homology/cohomology.
result Necessary and sufficient conditions for evasion paths and lower bounds.
Paper extends method to detect reverse engineering attacks on DNN classifiers.
problem Detecting reverse engineering attacks on deep neural network image classifiers.
method Extend ADA approach to detect RE attacks (ADA-RE).
result Successfully detects 'stealthy' RE attacks before they launch test-time evasion attacks.
The paper certifies decision trees against evasion attacks using program analysis.
problem Vulnerability of decision tree models to evasion attacks by maliciously crafted perturbations.
method Transform decision trees into imperative programs for program analysis, leveraging abstract interpretation.
result Soundly verifies security guarantees of decision tree models, yielding minimal false positives.
Tool detects tax evasion on social media using multi-modal deep learning.
problem Detecting tax evasion on social media platforms.
method Developed a multi-modal deep neural network combining comments, hashtags, and images.
result Multi-modal deep neural network achieved AUC of 0.808 and F1 score of 0.762.
Classifier evasion consists in finding for a given instance x the nearest instance x′ such that the classifier predictions of x and x′ are different. We present two novel algorithms for systematically computing evasions for tree ensembles such as boosted trees and random forests. Our first algorithm uses a Mixe…
We consider the static and dynamic models of Cournot duopoly with tax evasion. In the dynamic model we introduce the time delay and we analyze the local stability of the stationary state. There is a critical value of the delay when the Hopf bifurcation occurs.
Model shows how social norms and individual ethics affect tax evasion.
problem Effects of social norms and individual ethics on tax evasion.
method Agent-based model with simulations of different tax compliance behaviors.
result Threshold levels in society composition explain tax evasion extent.
Open-world evasion attacks using OOD adversarial examples outperform in-distribution attacks.
problem Evasion attacks on deep learning systems in open-world environments.
method Using 11 neural network models trained on 3 datasets, the study demonstrates the effectiveness of OOD adversarial examples against state-of-the-art detectors and defenses.
result OOD adversarial examples can achieve up to 4x higher success rates than in-distribution adversarial examples against known defenses.
Deep neural networks (DNNs) have transformed several artificial intelligence research areas including computer vision, speech recognition, and natural language processing. However, recent studies demonstrated that DNNs are vulnerable to adversarial manipulations at testing time. Specifically, suppose we have a testing …
PAD offers a principled approach to malware detection against evasion attacks.
problem Machine Learning techniques for malware detection are vulnerable to evasion attacks.
method PAD proposes a new adversarial training framework with convergence guarantees for robust optimization.
result PAD significantly outperforms state-of-the-art defenses and can harden ML-based malware detection against 27 evasion attacks.
New testing method quantifies ML vs AV robustness against evasion.
problem Benchmarking ML vs AV for malware detection.
method Developed new testing methodology to evaluate performance changes on modified files.
result ML systems show greater robustness against evasion than AV products.
Efficient black-box evasion attacks against deep networks with fewer queries.
problem Optimizing targeted evasion attacks with limited query budget.
method Formalized problem, evaluated benefits of using substitute models, presented two new attack strategies.
result Attack strategies are as effective as previous techniques but require significantly fewer queries.
This paper investigates why adversarial attacks can be effective against different models.
problem Understanding why adversarial attacks transfer between models.
method Developed a unifying optimization framework and formal definition for attack transferability.
result Identified two main factors: target model's vulnerability and surrogate model complexity.
Generative ML learns optimal pursuit trajectories in pursuit-evasion games.
problem Optimizing Blue's pursuit trajectory to intercept Red in a game of pursuit-evasion.
method Applying generative machine learning to learn optimal action policies for Blue.
result Generative ML models can learn relevant representations for pursuit-evasion dynamics.
In 1967, Chillingworth proved that all convex simplicial 3-balls are collapsible. Using the classical notion of tightness, we generalize this to arbitrary manifolds: We show that all tight simplicial 3-manifolds admit some perfect discrete Morse function. We also strengthen Chillingworth's theorem by proving that all c…
This paper improves machine learning models' robustness against evasion attacks using randomness.
problem Evasion attacks that adapt to machine learning models to avoid detection.
method Incorporates randomness into both training and application phases of machine learning models.
result The proposed randomization-based approach further improves the robustness of machine learning models, especially random forest.
This paper improves neural network robustness through feedback learning.
problem Vulnerability of neural networks to adversarial attacks.
method Feedback learning method to understand and improve model robustness.
result Significantly improved models' accuracy and robustness against evasion attacks.
This work studies PAC learning under evasion attacks, proving exponential sample complexity for high-dimensional inputs.
problem Formal study of PAC learning under evasion attacks where the adversary misclassifies perturbed samples.
method Proves exponential sample complexity for high-dimensional inputs under evasion attacks, formalizes hybrid attacks.
result PAC learning requires exponential sample complexity for high-dimensional inputs under evasion attacks.
UAVs use RL to outperform a greedy shooter in 2D engagements.
problem Optimizing UAV pursuit-evasion strategies in 2D environments.
method Reinforcement learning applied to a greedy shooter strategy in a 2D aerial engagement.
result Deep Q-learning UAV outperforms greedy shooter UAV in simulations.
We calculate the dynamics of tax evasion within a multi-agent econophysics model which is adopted from the theory of magnetism and previously has been shown to capture the main characteristics from agent-based based models which build on the standard Allingham and Sandmo approach. In particular, we implement a feedback…
The paper calculates how much data is needed to learn decision lists in the presence of evasion attacks.
problem Quantifying sample complexity for robust learning of decision lists against evasion attacks.
method PAC learning framework, Lipschitz condition on distributions, lower and upper bounds on sample complexity.
result Upper and lower bounds on sample complexity for robust learning of decision lists, showing exponential vs polynomial dependence on adversary's budget.
Paper uses 2-step Gradient Boosting to predict VAT tax gap.
problem Estimating tax evasion and revenue loss from tax avoidance.
method 2-steps Gradient Boosting model to correct selection bias.
result Significantly improved prediction of VAT tax gap.
Study finds tax avoidance and IT issues hinder revenue in Gombe state.
problem Problems of personal income tax on revenue generation in Gombe state.
method Survey with primary and secondary data, chi square test.
result Tax avoidance and IT issues are major problems.
Traditional classification algorithms assume that training and test data come from similar distributions. This assumption is violated in adversarial settings, where malicious actors modify instances to evade detection. A number of custom methods have been developed for both adversarial evasion attacks and robust learni…
This study evaluates the robustness of transformation-based ensemble defense against evasion attacks.
problem Understanding the reasons behind the robustness improvement in transformation-based ensemble defense.
method Designing two adaptive attacks to evaluate transformation-based ensemble defense, conducting experiments to analyze robustness.
result The robustness improvement is mainly from irreversible transformations rather than the ensemble of models.
We construct the first explicit example of a simplicial 3-ball B_{15,66} that is not collapsible. It has only 15 vertices. We exhibit a second 3-ball B_{12,38} with 12 vertices that is collapsible and evasive, but not shellable. Finally, we present the first explicit triangulation of a 3-sphere S_{18, 125} (with only 1…
New approach verifies tree ensembles efficiently, making them more robust.
problem Verifying robustness of decision tree ensembles against evasion attacks is NP-hard.
method Identified large-spread ensembles, proposed verifiable learning, designed training algorithm.
result Large-spread ensembles can be verified in polynomial time and are more robust.
This work proposes a robust ensemble method for decision trees that resists adversarial attacks.
problem Adversarial attacks on machine learning models, especially decision trees.
method Feature partitioning to train robust ensembles and approximate certification methods.
result The proposed ensemble method can resist evasion attacks by a majority of its models.
Paper defends models from backdoor attacks using randomized smoothing.
problem Vulnerability of deep neural networks to backdoor attacks.
method Unified framework via randomized smoothing for both evasion and backdoor attacks; RAB robust training process.
result First provable robustness bound for backdoor attacks.
A commonly used heuristic in non-convex optimization is Normalized Gradient Descent (NGD) - a variant of gradient descent in which only the direction of the gradient is taken into account and its magnitude ignored. We analyze this heuristic and show that with carefully chosen parameters and noise injection, this method…
Study on how changing curvature of GPC affects different types of attacks.
problem Understanding the relationship between different test-time attacks on GPCs.
method Examined Gaussian Process classifiers and their vulnerability to various attacks.
result Changing curvature of GPCs can make it robust against some attacks but vulnerable to others.
New adversarial training enhances malware detectors against various attacks.
problem Vulnerability of malware detectors to evasion attacks.
method Proposes a mixture of attacks and adversarial training to improve deep neural networks.
result Significantly enhances robustness of deep neural networks against a wide range of attacks.
New findings show strong barriers against computational robustness in adversarial learning.
problem Computational robustness of classifiers against adversarial attacks.
method Information-theoretic and computational proofs for evasion and poisoning attacks.
result Polynomial-time attacks can find adversarial examples of O(√n) Hamming distance for product distributions.
New algorithm sets record for model evasion with minimal queries.
problem Evasion of machine learning models in black-box settings.
method Sign-based gradient estimation for binary black-box optimization.
result Achieves highest evasion rates and lowest query efficiency.