Name
Abstract | ||
|---|---|---|
In this paper, we investigate the adversarial robustness of feature selection based on the ℓ
<sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sub>
regularized linear regression method, named LASSO. In the considered problem, there is an adversary who can observe the whole data set. After seeing the data, the adversary will carefully modify the response values and the feature matrix in order to manipulate the selected features. We formulate this problem as a bi-level optimization problem and cast the ℓ
<sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sub>
regularized linear regression problem as a linear inequality constrained quadratic programming problem to mitigate the issue caused by non-differentiability of the ℓ
<sub xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">1</sub>
norm. We then use the projected gradient descent to design the modification strategy. Numerical examples based on synthetic data and real data both indicate that the feature selection is very vulnerable to this kind of attacks. |
Year | DOI | Venue |
|---|---|---|
2020 | 10.1109/MLSP49062.2020.9231631 | 2020 IEEE 30th International Workshop on Machine Learning for Signal Processing (MLSP) |
Keywords | DocType | ISSN |
Linear regression,sparse learning,LASSO,adversarial machine learning,bi-level optimization | Conference | 1551-2541 |
ISBN | Citations | PageRank |
978-1-7281-6663-6 | 0 | 0.34 |
References | Authors | |
4 | 3 | |
Name | Order | Citations | PageRank |
|---|---|---|---|
| Fuwei Li | 1 | 24 | 3.14 |
| Lifeng Lai | 2 | 2289 | 167.78 |
| Shuguang Cui | 3 | 521 | 54.46 |