Feature Cross-Substitution in Adversarial Classification
The security of machine learning