## 3 Sharing ML Models as Cyber Threat Intelligence
### Sharing ML Models as Threat Intelligence
2020. Available online: [https://cybersec4 europe.eu/publications/deliverables/](https://cybersec4 europe.eu/publications/deliverables/) (accessed on 24 February 2021). * [PERSON] et al. (2020) [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] Dos and Don'ts of Machine Learning in Computer Security. _arXiv_**2020**, arXiv:2010.09470. * [PERSON] et al. (2010) [PERSON]; [PERSON]; [PERSON]; [PERSON] The security of machine learning. _Mach. Learn._**2010**, _81_, 121-148. [CrossRef]* [37] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] ANTIDOTE: Understanding and Defending against Poisoning of Anomaly Detectors. In Proceedings of the 9 th ACM SIGCOMM Conference on Internet Measurement (IMC '09), Chicago, IL, USA, 4-6 November 2009; pp. 1-14. [CrossRef]
* [38] [PERSON]; [PERSON]; [PERSON] Poisoning Attacks against Support Vector Machines. In Proceedings of the 29 th International Coference on International Conference on Machine Learning (ICML'12), Edinburgh, UK, 26 June-1 July 2012; pp. 1467-1474. * [39] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Automated poisoning attacks and defenses in malware detection systems: An adversarial machine learning approach. _Comput. Secur._**2018**, _73_, 326-344. doi:10.1016/j.cose.2017.11.007. [CrossRef]
* [40] [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON] Chained Anomaly Detection Models for Federated Learning: An Intrusion Detection Case Study. _Appl. Sci._**2018**, \(8\), 2663. [CrossRef]
* [41] [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Stealing Machine Learning Models via Prediction APIs. In Proceedings of the 25 th USENIX Conference on Security Symposium (SEC'16), Austin, TX, USA, 10-12 August 2016; pp. 601-618. * [42] [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON] PRADA: Protecting Against DNN Model Stealing Attacks. In Proceedings of the 2019 IEEE European Symposium on Security and Privacy (EuroS P), Stockholm, Sweden, 17-19 June 2019; pp. 512-527. [CrossRef]
* [43] [PERSON]; [PERSON]; [PERSON]; [PERSON] Model Extraction Warning in MLaaS Paradigm. In Proceedings of the 34 th Annual Computer Security Applications Conference (ACSAC '18), San Juan, PR, USA, 3-7 December 2018; pp. 371-380. [CrossRef]
* [44] [PERSON]; [PERSON]; [PERSON]; [PERSON] Membership Inference Attacks Against Machine Learning Models. In Proceedings of the 2017 IEEE Symposium on Security and Privacy (SP), San Jose, CA, USA, 22-26 May 2017; pp. 3-18. [CrossRef]
* [45] [PERSON]; [PERSON]; [PERSON] Machine Learning with Membership Privacy Using Adversarial Regularization. In Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security (CCS '18), Toronto, ON, Canada, 15-19 October 2018; pp. 634-646. [CrossRef]
* [46] [PERSON]; [PERSON]; [PERSON] Model Inversion Attacks That Exploit Confidence Information and Basic Countermeasures. In Proceedings of the 22 nd ACM SIGSAC Conference on Computer and Communications Security (CCS '15), Denver, CO, USA, 12-16 October 2015; pp. 1322-1333. [CrossRef]
* [47] [PERSON]; [PERSON] Anomaly detection with robust deep autoencoders. In Proceedings of the 23 rd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Halifax, NS, Canada, 13-17 August 2017; pp. 665-674. * [48] [PERSON]; [PERSON] [PERSON]; [PERSON] Adversarial machine learning at scale. _arXiv_**2016**, arXiv:1611.01236. * [49] [PERSON]; [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] Ensemble adversarial training: Attacks and defenses. _arXiv_**2017**, arXiv:1705.07204. * [50] [PERSON]; [PERSON]; [PERSON] Fast is better than free: Revisiting adversarial training. _arXiv_**2020**, arXiv:2001.03994. * [51] [PERSON] [PERSON]; [PERSON]; [PERSON] Toward generating a new intrusion detection dataset and intrusion traffic characterization. In Proceedings of the 4 th International Conference on Information Systems Security and Privacy (ICISSP), Funchal, Madeira, Portugal, 22-24 January 2018; pp.