Battista Biggio

252 papers A* 17A 1B 10C 3Misc 7Journal 150Unranked 54

Year	Rank	Type	Title / Venue / Authors
2026	J	`jnl`	BlackCATT: Black-box Collusion Aware Traitor Tracing in Federated Learning. CoRR Elena Rodríguez Lois, Fabio Brau, Maura Pintor, Battista Biggio, Fernando Pérez-González
2026	J	`jnl`	Buffer-free class-incremental learning with out-of-distribution detection. Pattern Recognit. Srishti Gupta, Daniele Angioni, Maura Pintor, Ambra Demontis, Lea Schönherr, Fabio Roli, Battista Biggio
2026	J	`jnl`	Evaluating line-level localization ability of learning-based code vulnerability detection models. Mach. Learn. Marco Pintore, Giorgio Piras, Angelo Sotgiu, Maura Pintor, Battista Biggio
2026	J	`jnl`	Evaluation of Audio Language Models for Fairness, Safety, and Security. CoRR Ranya Aloufi, Srishti Gupta, Soumya Shaw, Battista Biggio, Lea Schönherr
2026	J	`jnl`	Label-efficient Training Updates for Malware Detection over Time. CoRR Luca Minnei, Cristian Manca, Giorgio Piras, Angelo Sotgiu, Maura Pintor, Daniele Ghiani, Davide Maiorca, Giorgio Giacinto, Battista Biggio
2026	J	`jnl`	On the robustness of adversarial training against uncertainty attacks. Pattern Recognit. Emanuele Ledda, Giovanni Scodeller, Daniele Angioni, Giorgio Piras, Antonio Emanuele Cinà, Giorgio Fumera, Battista Biggio, Fabio Roli
2026	J	`jnl`	Poison once, fool many: Practical poisoning attacks against text-to-image retrieval systems. Knowl. Based Syst. Dario Lazzaro, Raffaele Mura, Antonio Emanuele Cinà, Giuseppe Laurita, Gianni Viardo Vercelli, Luca Oneto, Battista Biggio, Fabio Roli
2026	—	`conf`	SAGE-5GC: Security-Aware Guidelines for Evaluating Anomaly Detection in the 5G Core Network. ITASEC/SERICS Cristian Manca, Christian Scano, Giorgio Piras, Fabio Brau, Maura Pintor, Battista Biggio
2026	J	`jnl`	SAGE-5GC: Security-Aware Guidelines for Evaluating Anomaly Detection in the 5G Core Network. CoRR Cristian Manca, Christian Scano, Giorgio Piras, Fabio Brau, Maura Pintor, Battista Biggio
2026	A*	`conf`	SOM Directions Are Better than One: Multi-Directional Refusal Suppression in Language Models. AAAI Giorgio Piras, Raffaele Mura, Fabio Brau, Luca Oneto, Fabio Roli, Battista Biggio
2026	J	`jnl`	Sonic: Fast and transferable data poisoning on clustering algorithms. Inf. Sci. Francesco Villani, Dario Lazzaro, Antonio Emanuele Cinà, Matteo Dell'Amico, Battista Biggio, Fabio Roli
2025	J	`jnl`	Adversarial pruning: A survey and benchmark of pruning methods for adversarial robustness. Pattern Recognit. Giorgio Piras, Maura Pintor, Ambra Demontis, Battista Biggio, Giorgio Giacinto, Fabio Roli
2025	—	`conf`	An Experimental Analysis of Semi-supervised Learning for Malware Detection. ITASEC/SERICS Luca Minnei, Giorgio Piras, Angelo Sotgiu, Maura Pintor, Ambra Demontis, Davide Maiorca, Battista Biggio
2025	A*	`conf`	AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples. AAAI Antonio Emanuele Cinà, Jérôme Rony, Maura Pintor, Luca Demetrio, Ambra Demontis, Battista Biggio, Ismail Ben Ayed, Fabio Roli
2025	J	`jnl`	Backdoor learning curves: explaining backdoor poisoning beyond influence functions. Int. J. Mach. Learn. Cybern. Antonio Emanuele Cinà, Kathrin Grosse, Sebastiano Vascon, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2025	J	`jnl`	Buffer-free Class-Incremental Learning with Out-of-Distribution Detection. CoRR Srishti Gupta, Daniele Angioni, Maura Pintor, Ambra Demontis, Lea Schönherr, Battista Biggio, Fabio Roli
2025	Misc	`conf`	CoEvolution: A Comprehensive Trustworthy Framework For Connected Machine Learning And Secure Interconnected AI Solutions. CSR Antonios Makris, Apostolos P. Fournaris, Anita Aghaie, Ioannis Arakas, Anna Maria Anaxagorou, Ioannis Arapakis, Davide Bacciu, Battista Biggio, Georgios Bouloukakis, Stavros Bouras, Arne Bröring, Antonio Carta, Marco Caselli, Olympia Giannakopoulou, Nikolaos Gkatzios, Alexandros Gkillas, Evangelos Haleplidis, Sotiris Ioannidis, Eleni-Maria Kalogeraki, Panagiotis Karantzias, Emmanouil Kritharakis, Aris S. Lalos, David Lenk, Stella Markopoulou, Entrit Metai, Andreas Miaoudakis, Haralambos Mouratidis, Jihane Najar, Theodor Panagiotakopoulos, Bernhard Peischl, Maura Pintor, Nikos Piperigkos, Vassilis Prevelakis, Carlos Segura, Georgios Spanoudakis, Orestis Tsirakis, Omar Veledar, Konstantinos Tserpes
2025	J	`jnl`	Counterfeit Answers: Adversarial Forgery against OCR-Free Document Visual Question Answering. CoRR Marco Pintore, Maura Pintor, Dimosthenis Karatzas, Battista Biggio
2025	—	`conf`	Demystifying the Role of Rule-Based Detection in AI Systems for Windows Malware Detection. EuroS&P (Workshops) Andrea Ponte, Luca Demetrio, Luca Oneto, Ivan Tesfai Ogbu, Battista Biggio, Fabio Roli
2025	J	`jnl`	Demystifying the Role of Rule-based Detection in AI Systems for Windows Malware Detection. CoRR Andrea Ponte, Luca Demetrio, Luca Oneto, Ivan Tesfai Ogbu, Battista Biggio, Fabio Roli
2025	J	`jnl`	Energy-latency attacks via sponge poisoning. Inf. Sci. Antonio Emanuele Cinà, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2025	J	`jnl`	Evaluating Line-level Localization Ability of Learning-based Code Vulnerability Detection Models. CoRR Marco Pintore, Giorgio Piras, Angelo Sotgiu, Maura Pintor, Battista Biggio
2025	J	`jnl`	Evaluating the Evaluators: Trust in Adversarial Robustness Tests. CoRR Antonio Emanuele Cinà, Maura Pintor, Luca Demetrio, Ambra Demontis, Battista Biggio, Fabio Roli
2025	—	`conf`	Evaluating the evaluators: trust in adversarial robustness tests. Ital-IA Antonio Emanuele Cinà, Maura Pintor, Luca Demetrio, Ambra Demontis, Battista Biggio, Fabio Roli
2025	J	`jnl`	Exploiting Edge Features for Transferable Adversarial Attacks in Distributed Machine Learning. CoRR Giulio Rossolini, Fabio Brau, Alessandro Biondi, Battista Biggio, Giorgio C. Buttazzo
2025	J	`jnl`	Exploiting edge features for transferable adversarial attacks in distributed machine learning. Internet Things Giulio Rossolini, Fabio Brau, Alessandro Biondi, Battista Biggio, Giorgio C. Buttazzo
2025	J	`jnl`	HO-FMN: Hyperparameter optimization for fast minimum-norm attacks. Neurocomputing Raffaele Mura, Giuseppe Floris, Luca Scionis, Giorgio Piras, Maura Pintor, Ambra Demontis, Giorgio Giacinto, Battista Biggio, Fabio Roli
2025	J	`jnl`	LatentBreak: Jailbreaking Large Language Models through Latent Space Feedback. CoRR Raffaele Mura, Giorgio Piras, Kamile Lukosiute, Maura Pintor, Amin Karbasi, Battista Biggio
2025	J	`jnl`	ModSec-AdvLearn: Countering Adversarial SQL Injections With Robust Machine Learning. IEEE Trans. Inf. Forensics Secur. Giuseppe Floris, Christian Scano, Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio
2025	J	`jnl`	Out-of-Distribution Detection for Continual Learning: Design Principles and Benchmarking. CoRR Srishti Gupta, Riccardo Balia, Daniele Angioni, Fabio Brau, Maura Pintor, Ambra Demontis, Alessandro Sebastian, Salvatore M. Carta, Fabio Roli, Battista Biggio
2025	J	`jnl`	Prototype-Guided Robust Learning against Backdoor Attacks. CoRR Wei Guo, Maura Pintor, Ambra Demontis, Battista Biggio
2025	J	`jnl`	RAID: A Dataset for Testing the Adversarial Robustness of AI-Generated Image Detectors. CoRR Hicham Eddoubi, Jonas Ricker, Federico Cocchi, Lorenzo Baraldi, Angelo Sotgiu, Maura Pintor, Marcella Cornia, Lorenzo Baraldi, Asja Fischer, Rita Cucchiara, Battista Biggio
2025	J	`jnl`	Regression-aware Continual Learning for Android Malware Detection. CoRR Daniele Ghiani, Daniele Angioni, Giorgio Piras, Angelo Sotgiu, Luca Minnei, Srishti Gupta, Maura Pintor, Fabio Roli, Battista Biggio
2025	J	`jnl`	Robustness-Congruent Adversarial Training for Secure Machine Learning Model Updates. IEEE Trans. Pattern Anal. Mach. Intell. Daniele Angioni, Luca Demetrio, Maura Pintor, Luca Oneto, Davide Anguita, Battista Biggio, Fabio Roli
2025	J	`jnl`	S2AP: Score-space Sharpness Minimization for Adversarial Pruning. CoRR Giorgio Piras, Qi Zhao, Fabio Brau, Maura Pintor, Christian Wressnegger, Battista Biggio
2025	J	`jnl`	SLIFER: Investigating performance and robustness of malware detection pipelines. Comput. Secur. Andrea Ponte, Dmitrijs Trizna, Luca Demetrio, Battista Biggio, Ivan Tesfai Ogbu, Fabio Roli
2025	J	`jnl`	SOM Directions are Better than One: Multi-Directional Refusal Suppression in Language Models. CoRR Giorgio Piras, Raffaele Mura, Fabio Brau, Luca Oneto, Fabio Roli, Battista Biggio
2025	J	`jnl`	Silent Until Sparse: Backdoor Attacks on Semi-Structured Sparsity. CoRR Wei Guo, Maura Pintor, Ambra Demontis, Battista Biggio
2025	—	`conf`	Understanding Regression in Continual Learning for Malware Detection. ITASEC/SERICS Daniele Ghiani, Daniele Angioni, Angelo Sotgiu, Maura Pintor, Battista Biggio
2025	A*	`conf`	σ-zero: Gradient-based Optimization of ℓ0-norm Adversarial Examples. ICLR Antonio Emanuele Cinà, Francesco Villani, Maura Pintor, Lea Schönherr, Battista Biggio, Marcello Pelillo
2024	J	`jnl`	Adversarial Pruning: A Survey and Benchmark of Pruning Methods for Adversarial Robustness. CoRR Giorgio Piras, Maura Pintor, Ambra Demontis, Battista Biggio, Giorgio Giacinto, Fabio Roli
2024	J	`jnl`	AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples. CoRR Antonio Emanuele Cinà, Jérôme Rony, Maura Pintor, Luca Demetrio, Ambra Demontis, Battista Biggio, Ismail Ben Ayed, Fabio Roli
2024	J	`jnl`	Certified Adversarial Robustness of Machine Learning-based Malware Detectors via (De)Randomized Smoothing. CoRR Daniel Gibert, Luca Demetrio, Giulio Zizzo, Quan Le, Jordi Planes, Battista Biggio
2024	Misc	`conf`	Data Drift in Android Malware Detection. ICMLC Luca Minnei, Hicham Eddoubi, Angelo Sotgiu, Maura Pintor, Ambra Demontis, Battista Biggio
2024	J	`jnl`	HO-FMN: Hyperparameter Optimization for Fast Minimum-Norm Attacks. CoRR Raffaele Mura, Giuseppe Floris, Luca Scionis, Giorgio Piras, Maura Pintor, Ambra Demontis, Giorgio Giacinto, Battista Biggio, Fabio Roli
2024	Misc	`conf`	LFPD: Local-Feature-Powered Defense Against Adaptive Backdoor Attacks. ICMLC Wei Guo, Ambra Demontis, Maura Pintor, Patrick P. K. Chan, Battista Biggio
2024	J	`jnl`	Living-off-The-Land Reverse-Shell Detection by Informed Data Augmentation. CoRR Dmitrijs Trizna, Luca Demetrio, Battista Biggio, Fabio Roli
2024	J	`jnl`	Machine Learning Security Against Data Poisoning: Are We There Yet? Computer Antonio Emanuele Cinà, Kathrin Grosse, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2024	J	`jnl`	Machine Learning in Computer Security is Difficult to Fix. Commun. ACM Battista Biggio
2024	J	`jnl`	ModSec-Learn: Boosting ModSecurity with Machine Learning. CoRR Christian Scano, Giuseppe Floris, Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio
2024	J	`jnl`	Nebula: Self-Attention for Dynamic Malware Analysis. IEEE Trans. Inf. Forensics Secur. Dmitrijs Trizna, Luca Demetrio, Battista Biggio, Fabio Roli
2024	J	`jnl`	On the Robustness of Adversarial Training Against Uncertainty Attacks. CoRR Emanuele Ledda, Giovanni Scodeller, Daniele Angioni, Giorgio Piras, Antonio Emanuele Cinà, Giorgio Fumera, Battista Biggio, Fabio Roli
2024	J	`jnl`	Over-parameterization and Adversarial Robustness in Neural Networks: An Overview and Empirical Analysis. CoRR Zhang Chen, Luca Demetrio, Srishti Gupta, Xiaoyi Feng, Zhaoqiang Xia, Antonio Emanuele Cinà, Maura Pintor, Luca Oneto, Ambra Demontis, Battista Biggio, Fabio Roli
2024	J	`jnl`	Rethinking data augmentation for adversarial robustness. Inf. Sci. Hamid Eghbal-zadeh, Werner Zellinger, Maura Pintor, Kathrin Grosse, Khaled Koutini, Bernhard Alois Moser, Battista Biggio, Gerhard Widmer
2024	J	`jnl`	Robustness-Congruent Adversarial Training for Secure Machine Learning Model Updates. CoRR Daniele Angioni, Luca Demetrio, Maura Pintor, Luca Oneto, Davide Anguita, Battista Biggio, Fabio Roli
2024	J	`jnl`	SLIFER: Investigating Performance and Robustness of Malware Detection Pipelines. CoRR Andrea Ponte, Dmitrijs Trizna, Luca Demetrio, Battista Biggio, Ivan Tesfai Ogbu, Fabio Roli
2024	J	`jnl`	Sonic: Fast and Transferable Data Poisoning on Clustering Algorithms. CoRR Francesco Villani, Dario Lazzaro, Antonio Emanuele Cinà, Matteo Dell'Amico, Battista Biggio, Fabio Roli
2024	J	`jnl`	Toward Effective Traffic Sign Detection via Two-Stage Fusion Neural Networks. IEEE Trans. Intell. Transp. Syst. Zhishan Li, Hongxu Chen, Battista Biggio, Yifan He, Haoran Cai, Fabio Roli, Lei Xie
2024	A*	`conf`	When Your AI Becomes a Target: AI Security Incidents and Best Practices. AAAI Kathrin Grosse, Lukas Bieringer, Tarek R. Besold, Battista Biggio, Alexandre Alahi
2024	J	`jnl`	σ-zero: Gradient-based Optimization of 𝓁 CoRR Antonio Emanuele Cinà, Francesco Villani, Maura Pintor, Lea Schönherr, Battista Biggio, Marcello Pelillo
2023	—	`conf`	AI Security and Safety: The PRALab Research Experience. Ital-IA Ambra Demontis, Maura Pintor, Luca Demetrio, Angelo Sotgiu, Daniele Angioni, Giorgio Piras, Srishti Gupta, Battista Biggio, Fabio Roli
2023	—	`conf`	Adversarial Attacks Against Uncertainty Quantification. ICCV (Workshops) Emanuele Ledda, Daniele Angioni, Giorgio Piras, Giorgio Fumera, Battista Biggio, Fabio Roli
2023	J	`jnl`	Adversarial Attacks Against Uncertainty Quantification. CoRR Emanuele Ledda, Daniele Angioni, Giorgio Piras, Giorgio Fumera, Battista Biggio, Fabio Roli
2023	J	`jnl`	Adversarial ModSecurity: Countering Adversarial SQL Injections with Robust Machine Learning. CoRR Biagio Montaruli, Luca Demetrio, Andrea Valenza, Luca Compagna, Davide Ariu, Luca Piras, Davide Balzarotti, Battista Biggio
2023	—	`conf`	Cybersecurity and AI: The PRALab Research Experience. Ital-IA Maura Pintor, Giulia Orrù, Davide Maiorca, Ambra Demontis, Luca Demetrio, Gian Luca Marcialis, Battista Biggio, Fabio Roli
2023	Misc	`conf`	Detecting Attacks Against Deep Reinforcement Learning for Autonomous Driving. ICMLC Maura Pintor, Luca Demetrio, Angelo Sotgiu, Hsiao-Ying Lin, Chengfang Fang, Ambra Demontis, Battista Biggio
2023	J	`jnl`	Hardening RGB-D Object Recognition Systems against Adversarial Patch Attacks. CoRR Yang Zheng, Luca Demetrio, Antonio Emanuele Cinà, Xiaoyi Feng, Zhaoqiang Xia, Xiaoyue Jiang, Ambra Demontis, Battista Biggio, Fabio Roli
2023	J	`jnl`	Hardening RGB-D object recognition systems against adversarial patch attacks. Inf. Sci. Yang Zheng, Luca Demetrio, Antonio Emanuele Cinà, Xiaoyi Feng, Zhaoqiang Xia, Xiaoyue Jiang, Ambra Demontis, Battista Biggio, Fabio Roli
2023	J	`jnl`	ImageNet-Patch: A dataset for benchmarking machine learning robustness against adversarial patches. Pattern Recognit. Maura Pintor, Daniele Angioni, Angelo Sotgiu, Luca Demetrio, Ambra Demontis, Battista Biggio, Fabio Roli
2023	B	`conf`	Improving Fast Minimum-Norm Attacks with Hyperparameter Optimization. ESANN Giorgio Piras, Giuseppe Floris, Raffaele Mura, Luca Scionis, Maura Pintor, Battista Biggio, Ambra Demontis
2023	J	`jnl`	Improving Fast Minimum-Norm Attacks with Hyperparameter Optimization. CoRR Giuseppe Floris, Raffaele Mura, Luca Scionis, Giorgio Piras, Maura Pintor, Ambra Demontis, Battista Biggio
2023	J	`jnl`	Machine Learning Security in Industry: A Quantitative Survey. IEEE Trans. Inf. Forensics Secur. Kathrin Grosse, Lukas Bieringer, Tarek R. Besold, Battista Biggio, Katharina Krombholz
2023	—	`conf`	Minimizing Energy Consumption of Deep Learning Models by Energy-Aware Training. ICIAP (2) Dario Lazzaro, Antonio Emanuele Cinà, Maura Pintor, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2023	J	`jnl`	Minimizing Energy Consumption of Deep Learning Models by Energy-Aware Training. CoRR Dario Lazzaro, Antonio Emanuele Cinà, Maura Pintor, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2023	J	`jnl`	Nebula: Self-Attention for Dynamic Malware Analysis. CoRR Dmitrijs Trizna, Luca Demetrio, Battista Biggio, Fabio Roli
2023	A	`conf`	Phantom Sponges: Exploiting Non-Maximum Suppression to Attack Deep Object Detectors. WACV Avishag Shapira, Alon Zolfi, Luca Demetrio, Battista Biggio, Asaf Shabtai
2023	—	`conf`	Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. AISec@CCS Biagio Montaruli, Luca Demetrio, Maura Pintor, Luca Compagna, Davide Balzarotti, Battista Biggio
2023	J	`jnl`	Raze to the Ground: Query-Efficient Adversarial HTML Attacks on Machine-Learning Phishing Webpage Detectors. CoRR Biagio Montaruli, Luca Demetrio, Maura Pintor, Luca Compagna, Davide Balzarotti, Battista Biggio
2023	Misc	`conf`	Samples on Thin Ice: Re-Evaluating Adversarial Pruning of Neural Networks. ICMLC Giorgio Piras, Maura Pintor, Ambra Demontis, Battista Biggio
2023	J	`jnl`	Samples on Thin Ice: Re-Evaluating Adversarial Pruning of Neural Networks. CoRR Giorgio Piras, Maura Pintor, Ambra Demontis, Battista Biggio
2023	J	`jnl`	Stateful detection of adversarial reprogramming. Inf. Sci. Yang Zheng, Xiaoyi Feng, Zhaoqiang Xia, Xiaoyue Jiang, Maura Pintor, Ambra Demontis, Battista Biggio, Fabio Roli
2023	J	`jnl`	The Threat of Offensive AI to Organizations. Comput. Secur. Yisroel Mirsky, Ambra Demontis, Jaidip Kotak, Ram Shankar, Gelei Deng, Liu Yang, Xiangyu Zhang, Maura Pintor, Wenke Lee, Yuval Elovici, Battista Biggio
2023	B	`conf`	Towards Machine Learning Models that We Can Trust: Testing, Improving, and Explaining Robustness. ESANN Maura Pintor, Ambra Demontis, Battista Biggio
2023	J	`jnl`	Why adversarial reprogramming works, when it fails, and how to tell the difference. Inf. Sci. Yang Zheng, Xiaoyi Feng, Zhaoqiang Xia, Xiaoyue Jiang, Ambra Demontis, Maura Pintor, Battista Biggio, Fabio Roli
2023	J	`jnl`	Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning. ACM Comput. Surv. Antonio Emanuele Cinà, Kathrin Grosse, Ambra Demontis, Sebastiano Vascon, Werner Zellinger, Bernhard Alois Moser, Alina Oprea, Battista Biggio, Marcello Pelillo, Fabio Roli
2022	J	`jnl`	"Why do so?" - A Practical Perspective on Machine Learning Security. CoRR Kathrin Grosse, Lukas Bieringer, Tarek Richard Besold, Battista Biggio, Katharina Krombholz
2022	J	`jnl`	A Survey on Reinforcement Learning Security with Application to Autonomous Driving. CoRR Ambra Demontis, Maura Pintor, Luca Demetrio, Kathrin Grosse, Hsiao-Ying Lin, Chengfang Fang, Battista Biggio, Fabio Roli
2022	J	`jnl`	Backdoor smoothing: Demystifying backdoor attacks on deep neural networks. Comput. Secur. Kathrin Grosse, Taesung Lee, Battista Biggio, Youngja Park, Michael Backes, Ian M. Molloy
2022	J	`jnl`	Denial-of-Service Attack on Object Detection Model Using Universal Adversarial Perturbation. CoRR Avishag Shapira, Alon Zolfi, Luca Demetrio, Battista Biggio, Asaf Shabtai
2022	J	`jnl`	Do gradient-based explanations tell anything about adversarial robustness to android malware? Int. J. Mach. Learn. Cybern. Marco Melis, Michele Scalas, Ambra Demontis, Davide Maiorca, Battista Biggio, Giorgio Giacinto, Fabio Roli
2022	J	`jnl`	Domain Knowledge Alleviates Adversarial Attacks in Multi-Label Classifiers. IEEE Trans. Pattern Anal. Mach. Intell. Stefano Melacci, Gabriele Ciravegna, Angelo Sotgiu, Ambra Demontis, Battista Biggio, Marco Gori, Fabio Roli
2022	J	`jnl`	Energy-Latency Attacks via Sponge Poisoning. CoRR Antonio Emanuele Cinà, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2022	B	`conf`	Explainability-based Debugging of Machine Learning for Vulnerability Discovery. ARES Angelo Sotgiu, Maura Pintor, Battista Biggio
2022	—	`conf`	Explaining Machine Learning DGA Detectors from DNS Traffic Data. ITASEC Giorgio Piras, Maura Pintor, Luca Demetrio, Battista Biggio
2022	J	`jnl`	Explaining Machine Learning DGA Detectors from DNS Traffic Data. CoRR Giorgio Piras, Maura Pintor, Luca Demetrio, Battista Biggio
2022	J	`jnl`	FADER: Fast adversarial example rejection. Neurocomputing Francesco Crecchi, Marco Melis, Angelo Sotgiu, Davide Bacciu, Battista Biggio
2022	J	`jnl`	ImageNet-Patch: A Dataset for Benchmarking Machine Learning Robustness against Adversarial Patches. CoRR Maura Pintor, Daniele Angioni, Angelo Sotgiu, Luca Demetrio, Ambra Demontis, Battista Biggio, Fabio Roli
2022	A*	`conf`	Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples. NeurIPS Maura Pintor, Luca Demetrio, Angelo Sotgiu, Ambra Demontis, Nicholas Carlini, Battista Biggio, Fabio Roli
2022	—	`conf`	Industrial practitioners' mental models of adversarial machine learning. SOUPS @ USENIX Security Symposium Lukas Bieringer, Kathrin Grosse, Michael Backes, Battista Biggio, Katharina Krombholz
2022	J	`jnl`	Machine Learning Security against Data Poisoning: Are We There Yet? CoRR Antonio Emanuele Cinà, Kathrin Grosse, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2022	J	`jnl`	Practical Attacks on Machine Learning: A Case Study on Adversarial Windows Malware. CoRR Luca Demetrio, Battista Biggio, Fabio Roli
2022	J	`jnl`	Practical Attacks on Machine Learning: A Case Study on Adversarial Windows Malware. IEEE Secur. Priv. Luca Demetrio, Battista Biggio, Fabio Roli
2022	J	`jnl`	Practical Evaluation of Poisoning Attacks on Online Anomaly Detectors in Industrial Control Systems. Comput. Secur. Moshe Kravchik, Luca Demetrio, Battista Biggio, Asaf Shabtai
2022	—	`conf`	Robust Machine Learning for Malware Detection over Time. ITASEC Daniele Angioni, Luca Demetrio, Maura Pintor, Battista Biggio
2022	J	`jnl`	Robust Machine Learning for Malware Detection over Time. CoRR Daniele Angioni, Luca Demetrio, Maura Pintor, Battista Biggio
2022	J	`jnl`	Security of Machine Learning (Dagstuhl Seminar 22281). Dagstuhl Reports Battista Biggio, Nicholas Carlini, Pavel Laskov, Konrad Rieck, Antonio Emanuele Cinà
2022	J	`jnl`	Stateful Detection of Adversarial Reprogramming. CoRR Yang Zheng, Xiaoyi Feng, Zhaoqiang Xia, Xiaoyue Jiang, Maura Pintor, Ambra Demontis, Battista Biggio, Fabio Roli
2022	J	`jnl`	Support Vector Machines under Adversarial Label Contamination. CoRR Huang Xiao, Battista Biggio, Blaine Nelson, Han Xiao, Claudia Eckert, Fabio Roli
2022	A*	`conf`	Tessellation-Filtering ReLU Neural Networks. IJCAI Bernhard Alois Moser, Michal Lewandowski, Somayeh Kargaran, Werner Zellinger, Battista Biggio, Christoph Koutschan
2022	J	`jnl`	Towards learning trustworthily, automatically, and with guarantees on graphs: An overview. Neurocomputing Luca Oneto, Nicolò Navarin, Battista Biggio, Federico Errica, Alessio Micheli, Franco Scarselli, Monica Bianchini, Luca Demetrio, Pietro Bongini, Armando Tacchella, Alessandro Sperduti
2022	J	`jnl`	Wild Patterns Reloaded: A Survey of Machine Learning Security against Training Data Poisoning. CoRR Antonio Emanuele Cinà, Kathrin Grosse, Ambra Demontis, Sebastiano Vascon, Werner Zellinger, Bernhard Alois Moser, Alina Oprea, Battista Biggio, Marcello Pelillo, Fabio Roli
2022	J	`jnl`	secml: Secure and explainable machine learning in Python. SoftwareX Maura Pintor, Luca Demetrio, Angelo Sotgiu, Marco Melis, Ambra Demontis, Battista Biggio
2021	J	`jnl`	Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detection. ACM Trans. Priv. Secur. Luca Demetrio, Scott E. Coull, Battista Biggio, Giovanni Lagorio, Alessandro Armando, Fabio Roli
2021	J	`jnl`	Adversarial Machine Learning: Attacks From Laboratories to the Real World. Computer Hsiao-Ying Lin, Battista Biggio
2021	J	`jnl`	Backdoor Learning Curves: Explaining Backdoor Poisoning Beyond Influence Functions. CoRR Antonio Emanuele Cinà, Kathrin Grosse, Sebastiano Vascon, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2021	B	`conf`	Complex Data: Learning Trustworthily, Automatically, and with Guarantees. ESANN Luca Oneto, Nicolò Navarin, Battista Biggio, Federico Errica, Alessio Micheli, Franco Scarselli, Monica Bianchini, Alessandro Sperduti
2021	J	`jnl`	Empirical assessment of generating adversarial configurations for software product lines. Empir. Softw. Eng. Paul Temple, Gilles Perrouin, Mathieu Acher, Battista Biggio, Jean-Marc Jézéquel, Fabio Roli
2021	A*	`conf`	Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints. NeurIPS Maura Pintor, Fabio Roli, Wieland Brendel, Battista Biggio
2021	J	`jnl`	Fast Minimum-norm Adversarial Attacks through Adaptive Norm Constraints. CoRR Maura Pintor, Fabio Roli, Wieland Brendel, Battista Biggio
2021	J	`jnl`	Functionality-Preserving Black-Box Optimization of Adversarial Windows Malware. IEEE Trans. Inf. Forensics Secur. Luca Demetrio, Battista Biggio, Giovanni Lagorio, Fabio Roli, Alessandro Armando
2021	J	`jnl`	Indicators of Attack Failure: Debugging and Improving Optimization of Adversarial Examples. CoRR Maura Pintor, Luca Demetrio, Angelo Sotgiu, Giovanni Manca, Ambra Demontis, Nicholas Carlini, Battista Biggio, Fabio Roli
2021	Misc	`conf`	Poisoning attacks on cyber attack detectors for industrial control systems. SAC Moshe Kravchik, Battista Biggio, Asaf Shabtai
2021	B	`conf`	Slope: A First-order Approach for Measuring Gradient Obfuscation. ESANN Maura Pintor, Luca Demetrio, Giovanni Manca, Battista Biggio, Fabio Roli
2021	—	`ed.`	Structural, Syntactic, and Statistical Pattern Recognition - Joint IAPR International Workshops, S+SSPR 2020, Padua, Italy, January 21-22, 2021, Proceedings S+SSPR Andrea Torsello, Luca Rossi, Marcello Pelillo, Battista Biggio, Antonio Robles-Kelly
2021	—	`conf`	Task-Specific Automation in Deep Learning Processes. DEXA Workshops Georg Buchgeher, Gerald Czech, Adriano Souza Ribeiro, Werner Kloihofer, Paolo Meloni, Paola Busia, Gianfranco Deriu, Maura Pintor, Battista Biggio, Cristina Chesta, Luca Rinelli, David Solans, Manuel Portela
2021	B	`conf`	The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers? IJCNN Antonio Emanuele Cinà, Sebastiano Vascon, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2021	J	`jnl`	The Hammer and the Nut: Is Bilevel Optimization Really Needed to Poison Linear Classifiers? CoRR Antonio Emanuele Cinà, Sebastiano Vascon, Ambra Demontis, Battista Biggio, Fabio Roli, Marcello Pelillo
2021	J	`jnl`	The Threat of Offensive AI to Organizations. CoRR Yisroel Mirsky, Ambra Demontis, Jaidip Kotak, Ram Shankar, Gelei Deng, Liu Yang, Xiangyu Zhang, Wenke Lee, Yuval Elovici, Battista Biggio
2021	J	`jnl`	Why Adversarial Reprogramming Works, When It Fails, and How to Tell the Difference. CoRR Yang Zheng, Xiaoyi Feng, Zhaoqiang Xia, Xiaoyue Jiang, Ambra Demontis, Maura Pintor, Battista Biggio, Fabio Roli
2021	J	`jnl`	secml-malware: A Python Library for Adversarial Robustness Evaluation of Windows Malware Classifiers. CoRR Luca Demetrio, Battista Biggio
2020	J	`jnl`	Adversarial Detection of Flash Malware: Limitations and Open Issues. Comput. Secur. Davide Maiorca, Ambra Demontis, Battista Biggio, Fabio Roli, Giorgio Giacinto
2020	J	`jnl`	Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detection. CoRR Luca Demetrio, Scott E. Coull, Battista Biggio, Giovanni Lagorio, Alessandro Armando, Fabio Roli
2020	J	`jnl`	Adversarial Feature Selection against Evasion Attacks. CoRR Fei Zhang, Patrick P. K. Chan, Battista Biggio, Daniel S. Yeung, Fabio Roli
2020	J	`jnl`	Can Domain Knowledge Alleviate Adversarial Attacks in Multi-Label Classifiers? CoRR Stefano Melacci, Gabriele Ciravegna, Angelo Sotgiu, Ambra Demontis, Battista Biggio, Marco Gori, Fabio Roli
2020	J	`jnl`	Deep neural rejection against adversarial examples. EURASIP J. Inf. Secur. Angelo Sotgiu, Ambra Demontis, Marco Melis, Battista Biggio, Giorgio Fumera, Xiaoyi Feng, Fabio Roli
2020	J	`jnl`	Do Gradient-based Explanations Tell Anything About Adversarial Robustness to Android Malware? CoRR Marco Melis, Michele Scalas, Ambra Demontis, Davide Maiorca, Battista Biggio, Giorgio Giacinto, Fabio Roli
2020	J	`jnl`	Efficient Black-box Optimization of Adversarial Windows Malware with Constrained Manipulations. CoRR Luca Demetrio, Battista Biggio, Giovanni Lagorio, Fabio Roli, Alessandro Armando
2020	J	`jnl`	FADER: Fast Adversarial Example Rejection. CoRR Francesco Crecchi, Marco Melis, Angelo Sotgiu, Davide Bacciu, Battista Biggio
2020	—	`conf`	Poisoning Attacks on Algorithmic Fairness. ECML/PKDD (1) David Solans, Battista Biggio, Carlos Castillo
2020	J	`jnl`	Poisoning Attacks on Algorithmic Fairness. CoRR David Solans, Battista Biggio, Carlos Castillo
2020	J	`jnl`	Poisoning Attacks on Cyber Attack Detectors for Industrial Control Systems. CoRR Moshe Kravchik, Battista Biggio, Asaf Shabtai
2019	A*	`conf`	AISec'19: 12th ACM Workshop on Artificial Intelligence and Security. CCS Sadia Afroz, Battista Biggio, Nicholas Carlini, Yuval Elovici, Asaf Shabtai
2019	J	`jnl`	Deep Neural Rejection against Adversarial Examples. CoRR Angelo Sotgiu, Ambra Demontis, Marco Melis, Battista Biggio, Giorgio Fumera, Xiaoyi Feng, Fabio Roli
2019	J	`jnl`	Detecting Adversarial Examples through Nonlinear Dimensionality Reduction. CoRR Francesco Crecchi, Davide Bacciu, Battista Biggio
2019	B	`conf`	Detecting Black-box Adversarial Examples through Nonlinear Dimensionality Reduction. ESANN Francesco Crecchi, Davide Bacciu, Battista Biggio
2019	J	`jnl`	Digital Investigation of PDF Files: Unveiling Traces of Embedded Malware. IEEE Secur. Priv. Davide Maiorca, Battista Biggio
2019	—	`conf`	Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries. ITASEC Luca Demetrio, Battista Biggio, Giovanni Lagorio, Fabio Roli, Alessandro Armando
2019	J	`jnl`	Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries. CoRR Luca Demetrio, Battista Biggio, Giovanni Lagorio, Fabio Roli, Alessandro Armando
2019	—	`conf`	Optimization and deployment of CNNs at the edge: the ALOHA experience. CF Paolo Meloni, Daniela Loi, Paola Busia, Gianfranco Deriu, Andy D. Pimentel, Dolly Sapra, Todor P. Stefanov, Svetlana Minakova, Francesco Conti, Luca Benini, Maura Pintor, Battista Biggio, Bernhard Moser, Natalia Shepeleva, Nikos Fragoulis, Ilias Theodorakopoulos, Michael Masin, Francesca Palumbo
2019	A*	`conf`	Poster: Attacking Malware Classifiers by Crafting Gradient-Attacks that Preserve Functionality. CCS Raphael Labaca Castro, Battista Biggio, Gabi Dreo Rodosek
2019	—	`ed.`	Proceedings of the 12th ACM Workshop on Artificial Intelligence and Security, AISec@CCS 2019, London, UK, November 15, 2019. AISec@CCS Lorenzo Cavallaro, Johannes Kinder, Sadia Afroz, Battista Biggio, Nicholas Carlini, Yuval Elovici, Asaf Shabtai
2019	B	`conf`	Societal Issues in Machine Learning: When Learning from Data is Not Enough. ESANN Davide Bacciu, Battista Biggio, Paulo Lisboa, José D. Martín, Luca Oneto, Alfredo Vellido
2019	J	`jnl`	Towards Adversarial Malware Detection: Lessons Learned from PDF-based Attacks. ACM Comput. Surv. Davide Maiorca, Battista Biggio, Giorgio Giacinto
2019	J	`jnl`	Towards Quality Assurance of Software Product Lines with Adversarial Configurations. CoRR Paul Temple, Mathieu Acher, Gilles Perrouin, Battista Biggio, Jean-Marc Jézéquel, Fabio Roli
2019	—	`conf`	Towards quality assurance of software product lines with adversarial configurations. SPLC (A) Paul Temple, Mathieu Acher, Gilles Perrouin, Battista Biggio, Jean-Marc Jézéquel, Fabio Roli
2019	A*	`conf`	Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks. USENIX Security Symposium Ambra Demontis, Marco Melis, Maura Pintor, Matthew Jagielski, Battista Biggio, Alina Oprea, Cristina Nita-Rotaru, Fabio Roli
2019	J	`jnl`	Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection. IEEE Trans. Dependable Secur. Comput. Ambra Demontis, Marco Melis, Battista Biggio, Davide Maiorca, Daniel Arp, Konrad Rieck, Igino Corona, Giorgio Giacinto, Fabio Roli
2019	J	`jnl`	secml: A Python Library for Secure and Explainable Machine Learning. CoRR Marco Melis, Ambra Demontis, Maura Pintor, Angelo Sotgiu, Battista Biggio
2018	A*	`conf`	11th International Workshop on Artificial Intelligence and Security (AISec 2018). CCS Sadia Afroz, Battista Biggio, Yuval Elovici, David Freeman, Asaf Shabtai
2018	—	`conf`	ALOHA: an architectural-aware framework for deep learning at the edge. INTESA@ESWEEK Paolo Meloni, Daniela Loi, Gianfranco Deriu, Andy D. Pimentel, Dolly Sapra, Bernhard Moser, Natalia Shepeleva, Francesco Conti, Luca Benini, Oscar Ripolles, David Solans, Maura Pintor, Battista Biggio, Todor P. Stefanov, Svetlana Minakova, Nikolaos Fragoulis, Ilias Theodorakopoulos, Michael Masin, Francesca Palumbo
2018	—	`conf`	Adversarial Malware Binaries: Evading Deep Learning for Malware Detection in Executables. EUSIPCO Bojan Kolosnjaji, Ambra Demontis, Battista Biggio, Davide Maiorca, Giorgio Giacinto, Claudia Eckert, Fabio Roli
2018	J	`jnl`	Adversarial Malware Binaries: Evading Deep Learning for Malware Detection in Executables. CoRR Bojan Kolosnjaji, Ambra Demontis, Battista Biggio, Davide Maiorca, Giorgio Giacinto, Claudia Eckert, Fabio Roli
2018	—	`conf`	Architecture-aware design and implementation of CNN algorithms for embedded inference: the ALOHA project. ICM Paolo Meloni, Daniela Loi, Gianfranco Deriu, Andy D. Pimentel, Dolly Sapra, Maura Pintor, Battista Biggio, Oscar Ripolles, David Solans, Francesco Conti, Luca Benini, Todor P. Stefanov, Svetlana Minakova, Bernhard Moser, Natalia Shepeleva, Michael Masin, Francesca Palumbo, Nikos Fragoulis, Ilias Theodorakopoulos
2018	—	`conf`	Explaining Black-box Android Malware Detection. EUSIPCO Marco Melis, Davide Maiorca, Battista Biggio, Giorgio Giacinto, Fabio Roli
2018	J	`jnl`	Explaining Black-box Android Malware Detection. CoRR Marco Melis, Davide Maiorca, Battista Biggio, Giorgio Giacinto, Fabio Roli
2018	J	`jnl`	Is Data Clustering in Adversarial Settings Secure? CoRR Battista Biggio, Ignazio Pillai, Samuel Rota Bulò, Davide Ariu, Marcello Pelillo, Fabio Roli
2018	J	`jnl`	Is feature selection secure against training data poisoning? CoRR Huang Xiao, Battista Biggio, Gavin Brown, Giorgio Fumera, Claudia Eckert, Fabio Roli
2018	A*	`conf`	Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning. IEEE Symposium on Security and Privacy Matthew Jagielski, Alina Oprea, Battista Biggio, Chang Liu, Cristina Nita-Rotaru, Bo Li
2018	J	`jnl`	Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learning. CoRR Matthew Jagielski, Alina Oprea, Battista Biggio, Chang Liu, Cristina Nita-Rotaru, Bo Li
2018	J	`jnl`	On the Intriguing Connections of Regularization, Input Gradients and Transferability of Evasion and Poisoning Attacks. CoRR Ambra Demontis, Marco Melis, Maura Pintor, Matthew Jagielski, Battista Biggio, Alina Oprea, Cristina Nita-Rotaru, Fabio Roli
2018	J	`jnl`	Poisoning Behavioral Malware Clustering. CoRR Battista Biggio, Konrad Rieck, Davide Ariu, Christian Wressnegger, Igino Corona, Giorgio Giacinto, Fabio Roli
2018	—	`ed.`	Proceedings of the 11th ACM Workshop on Artificial Intelligence and Security, CCS 2018, Toronto, ON, Canada, October 19, 2018 AISec@CCS Sadia Afroz, Battista Biggio, Yuval Elovici, David Freeman, Asaf Shabtai
2018	—	`conf`	Session details: AI Security / Adversarial Machine Learning. AISec@CCS Battista Biggio
2018	—	`ed.`	Structural, Syntactic, and Statistical Pattern Recognition - Joint IAPR International Workshop, S+SSPR 2018, Beijing, China, August 17-19, 2018, Proceedings S+SSPR Xiao Bai, Edwin R. Hancock, Tin Kam Ho, Richard C. Wilson, Battista Biggio, Antonio Robles-Kelly
2018	J	`jnl`	Towards Adversarial Configurations for Software Product Lines. CoRR Paul Temple, Mathieu Acher, Battista Biggio, Jean-Marc Jézéquel, Fabio Roli
2018	J	`jnl`	Towards Robust Detection of Adversarial Infection Vectors: Lessons Learned in PDF Malware. CoRR Davide Maiorca, Battista Biggio, Giorgio Giacinto
2018	A*	`conf`	Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning. CCS Battista Biggio, Fabio Roli
2018	J	`jnl`	Wild patterns: Ten years after the rise of adversarial machine learning. Pattern Recognit. Battista Biggio, Fabio Roli
2017	A*	`conf`	10th International Workshop on Artificial Intelligence and Security (AISec 2017). CCS Battista Biggio, David Freeman, Brad Miller, Arunesh Sinha
2017	J	`jnl`	Adversarial Detection of Flash Malware: Limitations and Open Issues. CoRR Davide Maiorca, Battista Biggio, Maria Elena Chiappe, Giorgio Giacinto
2017	—	`conf`	Deepsquatting: Learning-Based Typosquatting Detection at Deeper Domain Levels. AI*IA Paolo Piredda, Davide Ariu, Battista Biggio, Igino Corona, Luca Piras, Giorgio Giacinto, Fabio Roli
2017	—	`conf`	DeltaPhish: Detecting Phishing Webpages in Compromised Websites. ESORICS (1) Igino Corona, Battista Biggio, Matteo Contini, Luca Piras, Roberto Corda, Mauro Mereu, Guido Mureddu, Davide Ariu, Fabio Roli
2017	J	`jnl`	DeltaPhish: Detecting Phishing Webpages in Compromised Websites. CoRR Igino Corona, Battista Biggio, Matteo Contini, Luca Piras, Roberto Corda, Mauro Mereu, Guido Mureddu, Davide Ariu, Fabio Roli
2017	—	`conf`	Detection of Malicious Scripting Code Through Discriminant and Adversary-Aware API Analysis. ITASEC Davide Maiorca, Paolo Russu, Igino Corona, Battista Biggio, Giorgio Giacinto
2017	J	`jnl`	Digital Investigation of PDF Files: Unveiling Traces of Embedded Malware. CoRR Davide Maiorca, Battista Biggio
2017	J	`jnl`	Evasion Attacks against Machine Learning at Test Time. CoRR Battista Biggio, Igino Corona, Davide Maiorca, Blaine Nelson, Nedim Srndic, Pavel Laskov, Giorgio Giacinto, Fabio Roli
2017	—	`conf`	Infinity-Norm Support Vector Machines Against Adversarial Label Contamination. ITASEC Ambra Demontis, Battista Biggio, Giorgio Fumera, Giorgio Giacinto, Fabio Roli
2017	—	`conf`	Is Deep Learning Safe for Robot Vision? Adversarial Examples Against the iCub Humanoid. ICCV Workshops Marco Melis, Ambra Demontis, Battista Biggio, Gavin Brown, Giorgio Fumera, Fabio Roli
2017	J	`jnl`	Is Deep Learning Safe for Robot Vision? Adversarial Examples against the iCub Humanoid. CoRR Marco Melis, Ambra Demontis, Battista Biggio, Gavin Brown, Giorgio Fumera, Fabio Roli
2017	J	`jnl`	On Security and Sparsity of Linear Classifiers for Adversarial Settings. CoRR Ambra Demontis, Paolo Russu, Battista Biggio, Giorgio Fumera, Fabio Roli
2017	—	`ed.`	Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security, AISec@CCS 2017, Dallas, TX, USA, November 3, 2017 AISec@CCS Bhavani Thuraisingham, Battista Biggio, David Mandell Freeman, Brad Miller, Arunesh Sinha
2017	J	`jnl`	Randomized Prediction Games for Adversarial Machine Learning. IEEE Trans. Neural Networks Learn. Syst. Samuel Rota Bulò, Battista Biggio, Ignazio Pillai, Marcello Pelillo, Fabio Roli
2017	J	`jnl`	Security Evaluation of Pattern Classifiers under Attack. CoRR Battista Biggio, Giorgio Fumera, Fabio Roli
2017	J	`jnl`	Statistical Meta-Analysis of Presentation Attacks for Secure Multibiometric Systems. IEEE Trans. Pattern Anal. Mach. Intell. Battista Biggio, Giorgio Fumera, Gian Luca Marcialis, Fabio Roli
2017	J	`jnl`	Super-sparse Learning in Similarity Spaces. CoRR Ambra Demontis, Marco Melis, Battista Biggio, Giorgio Fumera, Fabio Roli
2017	—	`conf`	Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization. AISec@CCS Luis Muñoz-González, Battista Biggio, Ambra Demontis, Andrea Paudice, Vasin Wongrassamee, Emil C. Lupu, Fabio Roli
2017	J	`jnl`	Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimization. CoRR Luis Muñoz-González, Battista Biggio, Ambra Demontis, Andrea Paudice, Vasin Wongrassamee, Emil C. Lupu, Fabio Roli
2017	J	`jnl`	Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning. CoRR Battista Biggio, Fabio Roli
2017	J	`jnl`	Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection. CoRR Ambra Demontis, Marco Melis, Battista Biggio, Davide Maiorca, Daniel Arp, Konrad Rieck, Igino Corona, Giorgio Giacinto, Fabio Roli
2016	J	`jnl`	AdversariaLib: An Open-source Library for the Security Evaluation of Machine Learning Algorithms Under Attack. CoRR Igino Corona, Battista Biggio, Davide Maiorca
2016	J	`jnl`	Adversarial Feature Selection Against Evasion Attacks. IEEE Trans. Cybern. Fei Zhang, Patrick P. K. Chan, Battista Biggio, Daniel S. Yeung, Fabio Roli
2016	—	`conf`	Detecting Misuse of Google Cloud Messaging in Android Badware. SPSM@CCS Mansour Ahmadi, Battista Biggio, Steven Arzt, Davide Ariu, Giorgio Giacinto
2016	C	`conf`	Machine Learning under Attack: Vulnerability Exploitation and Security Measures. IH&MMSec Battista Biggio
2016	—	`conf`	On Security and Sparsity of Linear Classifiers for Adversarial Settings. S+SSPR Ambra Demontis, Paolo Russu, Battista Biggio, Giorgio Fumera, Fabio Roli
2016	J	`jnl`	Randomized Prediction Games for Adversarial Machine Learning. CoRR Samuel Rota Bulò, Battista Biggio, Ignazio Pillai, Marcello Pelillo, Fabio Roli
2016	—	`conf`	Secure Kernel Machines against Evasion Attacks. AISec@CCS Paolo Russu, Ambra Demontis, Battista Biggio, Giorgio Fumera, Fabio Roli
2016	J	`jnl`	Statistical Meta-Analysis of Presentation Attacks for Secure Multibiometric Systems. CoRR Battista Biggio, Giorgio Fumera, Gian Luca Marcialis, Fabio Roli
2016	—	`ed.`	Structural, Syntactic, and Statistical Pattern Recognition - Joint IAPR International Workshop, S+SSPR 2016, Mérida, Mexico, November 29 - December 2, 2016, Proceedings S+SSPR Antonio Robles-Kelly, Marco Loog, Battista Biggio, Francisco Escolano, Richard C. Wilson
2016	J	`jnl`	Super-Sparse Learning in Similarity Spaces. IEEE Comput. Intell. Mag. Ambra Demontis, Marco Melis, Battista Biggio, Giorgio Fumera, Fabio Roli
2016	A*	`conf`	Who Are You? A Statistical Approach to Measuring User Authenticity. NDSS David Freeman, Sakshi Jain, Markus Dürmuth, Battista Biggio, Giorgio Giacinto
2015	J	`jnl`	Adversarial Biometric Recognition : A review on biometric system security from the adversarial machine-learning perspective. IEEE Signal Process. Mag. Battista Biggio, Giorgio Fumera, Paolo Russu, Luca Didaci, Fabio Roli
2015	—	`ch.`	Anti-spoofing, Multimodal. Encyclopedia of Biometrics Gian Luca Marcialis, Battista Biggio, Giorgio Fumera
2015	J	`jnl`	Data-driven journal meta-ranking in business and management. Scientometrics Gianfranco Ennas, Battista Biggio, Maria Chiara Di Guardo
2015	—	`conf`	Fast Image Classification with Reduced Multiclass Support Vector Machines. ICIAP (2) Marco Melis, Luca Piras, Battista Biggio, Giorgio Giacinto, Giorgio Fumera, Fabio Roli
2015	A*	`conf`	Is Feature Selection Secure against Training Data Poisoning? ICML Huang Xiao, Battista Biggio, Gavin Brown, Giorgio Fumera, Claudia Eckert, Fabio Roli
2015	—	`conf`	One-and-a-Half-Class Multiple Classifier Systems for Secure Learning Against Evasion Attacks at Test Time. MCS Battista Biggio, Igino Corona, Zhi-Min He, Patrick P. K. Chan, Giorgio Giacinto, Daniel S. Yeung, Fabio Roli
2015	—	`conf`	Sparse support faces. ICB Battista Biggio, Marco Melis, Giorgio Fumera, Fabio Roli
2015	—	`conf`	Super-Sparse Regression for Fast Age Estimation from Faces at Test Time. ICIAP (2) Ambra Demontis, Battista Biggio, Giorgio Fumera, Fabio Roli
2015	J	`jnl`	Support vector machines under adversarial label contamination. Neurocomputing Huang Xiao, Battista Biggio, Blaine Nelson, Han Xiao, Claudia Eckert, Fabio Roli
2014	—	`ch.`	Multimodal Anti-spoofing in Biometric Recognition Systems. Handbook of Biometric Anti-Spoofing Giorgio Fumera, Gian Luca Marcialis, Battista Biggio, Fabio Roli, Stephanie A. C. Schuckers
2014	—	`conf`	On learning and recognition of secure patterns. AISec@CCS Battista Biggio
2014	J	`jnl`	Pattern Recognition Systems under Attack: Design Issues and Research Challenges. Int. J. Pattern Recognit. Artif. Intell. Battista Biggio, Giorgio Fumera, Fabio Roli
2014	—	`conf`	Poisoning Complete-Linkage Hierarchical Clustering. S+SSPR Battista Biggio, Samuel Rota Bulò, Ignazio Pillai, Michele Mura, Eyasu Zemene Mequanint, Marcello Pelillo, Fabio Roli
2014	—	`conf`	Poisoning behavioral malware clustering. AISec@CCS Battista Biggio, Konrad Rieck, Davide Ariu, Christian Wressnegger, Igino Corona, Giorgio Giacinto, Fabio Roli
2014	J	`jnl`	Security Evaluation of PatternClassifiers under Attack. IEEE Trans. Knowl. Data Eng. Battista Biggio, Giorgio Fumera, Fabio Roli
2014	J	`jnl`	Security Evaluation of Support Vector Machines in Adversarial Environments. CoRR Battista Biggio, Igino Corona, Blaine Nelson, Benjamin I. P. Rubinstein, Davide Maiorca, Giorgio Fumera, Giorgio Giacinto, Fabio Roli
2013	—	`conf`	Evasion Attacks against Machine Learning at Test Time. ECML/PKDD (3) Battista Biggio, Igino Corona, Davide Maiorca, Blaine Nelson, Nedim Srndic, Pavel Laskov, Giorgio Giacinto, Fabio Roli
2013	—	`conf`	Is data clustering in adversarial settings secure? AISec Battista Biggio, Ignazio Pillai, Samuel Rota Bulò, Davide Ariu, Marcello Pelillo, Fabio Roli
2013	—	`conf`	Pattern Recognition Systems under Attack. CIARP (1) Fabio Roli, Battista Biggio, Giorgio Fumera
2013	—	`conf`	Poisoning attacks to compromise face templates. ICB Battista Biggio, Luca Didaci, Giorgio Fumera, Fabio Roli
2012	—	`conf`	Learning sparse kernel machines with biometric similarity functions for identity recognition. BTAS Battista Biggio, Giorgio Fumera, Fabio Roli
2012	—	`conf`	Poisoning Adaptive Biometric Systems. SSPR/SPR Battista Biggio, Giorgio Fumera, Fabio Roli, Luca Didaci
2012	A*	`conf`	Poisoning Attacks against Support Vector Machines. ICML Battista Biggio, Blaine Nelson, Pavel Laskov
2012	J	`jnl`	Security evaluation of biometric authentication systems under real spoofing attacks. IET Biom. Battista Biggio, Zahid Akhtar, Giorgio Fumera, Gian Luca Marcialis, Fabio Roli
2011	J	`jnl`	A survey and experimental evaluation of image spam filtering techniques. Pattern Recognit. Lett. Battista Biggio, Giorgio Fumera, Ignazio Pillai, Fabio Roli
2011	—	`conf`	Bagging Classifiers for Fighting Poisoning Attacks in Adversarial Classification Tasks. MCS Battista Biggio, Igino Corona, Giorgio Fumera, Giorgio Giacinto, Fabio Roli
2011	B	`conf`	Design of robust classifiers for adversarial environments. SMC Battista Biggio, Giorgio Fumera, Fabio Roli
2011	C	`conf`	Microbagging Estimators: An Ensemble Approach to Distance-weighted Classifiers. ACML Blaine Nelson, Battista Biggio, Pavel Laskov
2011	—	`conf`	Robustness of multi-modal biometric systems under realistic spoof attacks against all traits. BioMS Zahid Akhtar, Battista Biggio, Giorgio Fumera, Gian Luca Marcialis
2011	B	`conf`	Robustness of multi-modal biometric verification systems under realistic spoofing attacks. IJCB Battista Biggio, Zahid Akhtar, Giorgio Fumera, Gian Luca Marcialis, Fabio Roli
2011	C	`conf`	Support Vector Machines Under Adversarial Label Noise. ACML Battista Biggio, Blaine Nelson, Pavel Laskov
2011	—	`conf`	Understanding the risk factors of learning in adversarial environments. AISec Blaine Nelson, Battista Biggio, Pavel Laskov
2010	—	`conf`	Multiple Classifier Systems under Attack. MCS Battista Biggio, Giorgio Fumera, Fabio Roli
2010	J	`jnl`	Multiple classifier systems for robust classifier design in adversarial environments. Int. J. Mach. Learn. Cybern. Battista Biggio, Giorgio Fumera, Fabio Roli
2009	—	`ch.`	Bayesian Linear Combination of Neural Networks. Innovations in Neural Information Paradigms and Applications Battista Biggio, Giorgio Fumera, Fabio Roli
2009	—	`ch.`	Evade Hard Multiple Classifier Systems. Applications of Supervised and Unsupervised Ensemble Methods Battista Biggio, Giorgio Fumera, Fabio Roli
2009	—	`conf`	Multiple Classifier Systems for Adversarial Classification Tasks. MCS Battista Biggio, Giorgio Fumera, Fabio Roli
2008	—	`conf`	Adversarial Pattern Classification Using Multiple Classifiers and Randomisation. SSPR/SPR Battista Biggio, Giorgio Fumera, Fabio Roli
2008	—	`conf`	Improving Image Spam Filtering Using Image Text Features. CEAS Giorgio Fumera, Fabio Roli, Battista Biggio, Ignazio Pillai
2007	—	`conf`	Bayesian Analysis of Linear Combiners. MCS Battista Biggio, Giorgio Fumera, Fabio Roli
2007	Misc	`conf`	Image Spam Filtering Using Visual Information. ICIAP Battista Biggio, Giorgio Fumera, Ignazio Pillai, Fabio Roli
2007	—	`conf`	Image Spam Filtering by Content Obscuring Detection. CEAS Battista Biggio, Giorgio Fumera, Ignazio Pillai, Fabio Roli