{"id":"https://openalex.org/W7126206556","doi":"https://doi.org/10.1109/raid67961.2025.00015","title":"The Adaptive Arms Race: Redefining Robustness in AI Security","display_name":"The Adaptive Arms Race: Redefining Robustness in AI Security","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W7126206556","doi":"https://doi.org/10.1109/raid67961.2025.00015"},"language":"en","primary_location":{"id":"doi:10.1109/raid67961.2025.00015","is_oa":false,"landing_page_url":"https://doi.org/10.1109/raid67961.2025.00015","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 28th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://lirias.kuleuven.be/retrieve/f844c050-8024-4de8-ab60-7108c658d848","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003959400","display_name":"Ilias Tsingenopoulos","orcid":"https://orcid.org/0000-0002-7714-5238"},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Ilias Tsingenopoulos","raw_affiliation_strings":["KU Leuven,Leuven,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KU Leuven,Leuven,Belgium","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024905721","display_name":"Vera Rimmer","orcid":null},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Vera Rimmer","raw_affiliation_strings":["KU Leuven,Leuven,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KU Leuven,Leuven,Belgium","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069939159","display_name":"Davy Preuveneers","orcid":"https://orcid.org/0000-0001-6279-4430"},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Davy Preuveneers","raw_affiliation_strings":["KU Leuven,Leuven,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KU Leuven,Leuven,Belgium","institution_ids":["https://openalex.org/I99464096"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072597369","display_name":"Fabio Pierazzi","orcid":"https://orcid.org/0000-0002-1254-1758"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Fabio Pierazzi","raw_affiliation_strings":["University College London,London,United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College London,London,United Kingdom","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036908366","display_name":"Lorenzo Cavallaro","orcid":"https://orcid.org/0000-0002-3878-2680"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Lorenzo Cavallaro","raw_affiliation_strings":["University College London,London,United Kingdom"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College London,London,United Kingdom","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5120886517","display_name":"Wouter Joosen","orcid":null},"institutions":[{"id":"https://openalex.org/I99464096","display_name":"KU Leuven","ror":"https://ror.org/05f950310","country_code":"BE","type":"education","lineage":["https://openalex.org/I99464096"]}],"countries":["BE"],"is_corresponding":false,"raw_author_name":"Wouter Joosen","raw_affiliation_strings":["KU Leuven,Leuven,Belgium"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KU Leuven,Leuven,Belgium","institution_ids":["https://openalex.org/I99464096"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"611","last_page":"628"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8162999749183655,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.8162999749183655,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.10939999669790268,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.013299999758601189,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7585999965667725},{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.5113000273704529},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.44769999384880066},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.40230000019073486},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.3059999942779541}],"concepts":[{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7585999965667725},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7074000239372253},{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.5113000273704529},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5023999810218811},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44909998774528503},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.44769999384880066},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.40230000019073486},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3630000054836273},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.32760000228881836},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.3059999942779541},{"id":"https://openalex.org/C52970973","wikidata":"https://www.wikidata.org/wiki/Q2497134","display_name":"Adaptive system","level":2,"score":0.28360000252723694},{"id":"https://openalex.org/C125014702","wikidata":"https://www.wikidata.org/wiki/Q4680749","display_name":"Adaptive learning","level":2,"score":0.2696000039577484},{"id":"https://openalex.org/C107464732","wikidata":"https://www.wikidata.org/wiki/Q235781","display_name":"Adaptive control","level":3,"score":0.26249998807907104}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/raid67961.2025.00015","is_oa":false,"landing_page_url":"https://doi.org/10.1109/raid67961.2025.00015","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 28th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)","raw_type":"proceedings-article"},{"id":"pmh:oai:lirias2repo.kuleuven.be:20.500.12942/785826","is_oa":true,"landing_page_url":"https://lirias.kuleuven.be/handle/20.500.12942/785826","pdf_url":"https://lirias.kuleuven.be/retrieve/f844c050-8024-4de8-ab60-7108c658d848","source":{"id":"https://openalex.org/S7407055369","display_name":"Lirias","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"28th International Symposium on Research in Attacks, Intrusions and Defenses-RAID, AUSTRALIA, Gold Coast, 19-22 October 2025","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:lirias2repo.kuleuven.be:20.500.12942/785826","is_oa":true,"landing_page_url":"https://lirias.kuleuven.be/handle/20.500.12942/785826","pdf_url":"https://lirias.kuleuven.be/retrieve/f844c050-8024-4de8-ab60-7108c658d848","source":{"id":"https://openalex.org/S7407055369","display_name":"Lirias","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"28th International Symposium on Research in Attacks, Intrusions and Defenses-RAID, AUSTRALIA, Gold Coast, 19-22 October 2025","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7706851959228516}],"awards":[{"id":"https://openalex.org/G3681684530","display_name":"XAdv: Robust Explanations for Malware Detection","funder_award_id":"EP/X015971/2","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320322308","display_name":"KU Leuven","ror":"https://ror.org/05f950310"},{"id":"https://openalex.org/F4320327336","display_name":"Vlaamse regering","ror":null},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7126206556.pdf","grobid_xml":"https://content.openalex.org/works/W7126206556.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1518858799","https://openalex.org/W1542941925","https://openalex.org/W1966912382","https://openalex.org/W2138621090","https://openalex.org/W2522957395","https://openalex.org/W2553303224","https://openalex.org/W2594844947","https://openalex.org/W2758442112","https://openalex.org/W2906208681","https://openalex.org/W2913525780","https://openalex.org/W2963857521","https://openalex.org/W2969695741","https://openalex.org/W3015481738","https://openalex.org/W3015625436","https://openalex.org/W3034892461","https://openalex.org/W3090219579","https://openalex.org/W3091857398","https://openalex.org/W3107089345","https://openalex.org/W3173859330","https://openalex.org/W3173982024","https://openalex.org/W3213831029","https://openalex.org/W4210393155","https://openalex.org/W4281384280","https://openalex.org/W4281553483","https://openalex.org/W4287644588","https://openalex.org/W4293560553","https://openalex.org/W4324302739","https://openalex.org/W4378977274","https://openalex.org/W4396790454","https://openalex.org/W4402957915"],"related_works":[],"abstract_inverted_index":{"Despite":[0],"considerable":[1],"efforts":[2],"on":[3,32],"making":[4],"them":[5,126,212],"robust,":[6],"real-world":[7,222],"AI-based":[8,193],"systems":[9],"remain":[10],"vulnerable":[11],"to":[12,45,58,98,122,151,191,214],"decision":[13],"based":[14],"attacks,":[15,34,165],"as":[16],"definitive":[17],"proofs":[18],"of":[19,39,53,221],"their":[20,110],"operational":[21],"robustness":[22,29,93,220],"have":[23],"so":[24],"far":[25],"proven":[26],"intractable.":[27],"Canonical":[28],"evaluation":[30],"relies":[31],"adaptive":[33,164,171,185],"which":[35,55],"leverage":[36],"complete":[37],"knowledge":[38],"the":[40,51,86,119,196,204,219],"defense":[41],"and":[42,62,83,102,109,124,129,180,208],"are":[43,147],"tailored":[44],"bypass":[46],"it.":[47],"This":[48],"work":[49],"broadens":[50],"notion":[52],"adaptivity,":[54],"we":[56],"employ":[57],"enhance":[59,107],"both":[60],"attacks":[61,82,108,207],"defenses,":[63,123,140,209],"showing":[64],"how":[65],"they":[66,89],"can":[67,160],"benefit":[68],"from":[69],"mutual":[70],"learning":[71,116],"through":[72],"interaction.":[73],"We":[74,105,136],"introduce":[75],"a":[76,133,188],"framework":[77],"for":[78],"adaptively":[79],"optimizing":[80],"black-box":[81,192,206],"defenses":[84,159,169],"under":[85,132],"competitive":[87],"game":[88],"form.":[90],"To":[91],"assess":[92],"reliably,":[94],"it":[95],"is":[96],"essential":[97,149],"evaluate":[99,125],"against":[100,154],"realistic":[101],"worst-case":[103],"attacks.":[104],"thus":[106],"evasive":[111],"arsenal":[112],"together":[113,213],"using":[114],"reinforcement":[115],"(RL),":[117],"apply":[118],"same":[120],"principle":[121],"first":[127],"independently":[128],"then":[130],"jointly":[131],"multi-agent":[134],"perspective.":[135],"find":[137],"that":[138,142,157,167,184],"active":[139],"those":[141],"dynamically":[143],"control":[144],"system":[145],"responses,":[146],"an":[148,177],"complement":[150],"model":[152],"hardening":[153],"decision-based":[155],"attacks;":[156],"these":[158],"be":[161],"circumvented":[162],"by":[163,176],"something":[166],"elicits":[168],"being":[170],"too.":[172],"Our":[173],"findings,":[174],"supported":[175],"extensive":[178],"theoretical":[179],"empirical":[181],"investigation,":[182],"confirm":[183],"adversaries":[186],"pose":[187],"serious":[189],"threat":[190],"systems,":[194],"rekindling":[195],"proverbial":[197],"arms":[198],"race.":[199],"Notably,":[200],"our":[201],"approach":[202],"outperforms":[203],"state-of-the-art":[205],"while":[210],"bringing":[211],"render":[215],"effective":[216],"insights":[217],"into":[218],"deployed":[223],"ML-based":[224],"systems.":[225]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2026-02-01T00:00:00"}