Feature Cross-Substitution in Adversarial Classification
Machine learning in adversarial environments