Black-Box Attack-Based Security Evaluation Framework for Credit Card Fraud Detection Models

Published Online:https://doi.org/10.1287/ijoc.2023.1297

References

  • Abbasi A, Albrecht C, Vance A, Hansen J (2012) Metafraud: A meta-learning framework for detecting financial fraud. Management Inform. Systems Quart. 36(4):1293–1327.CrossrefGoogle Scholar
  • Biggio B, Corona I, Maiorca D, Nelson B, Srndić N, Laskov P, Giacinto G, Roli F (2013) Evasion attacks against machine learning at test time. Proc. 13th Joint Eur. Conf. Machine Learn. (Springer, Berlin), 387–402.Google Scholar
  • Biggio B, Roli F (2018) Wild patterns: Ten years after the rise of adversarial machine learning. Pattern Recognition 84(12):317–331.CrossrefGoogle Scholar
  • Brendel W, Jonas R (2017) Decision-based adversarial attacks: Reliable attacks against black-box machine learning models. Preprint, submitted December 12, https://arxiv.org/abs/1712.04248.Google Scholar
  • Brooks JP (2011) Support vector machines with the ramp loss and the hard margin loss. Oper. Res. 59(2):467–479.LinkGoogle Scholar
  • Cao SS, Yang XX, Chen C, Zhou J, Li XL, Qi Y (2019) Titant: Online real-time transaction fraud detection in ant financial. Proc. VLDB Endowment 12(12):2082–2093.Google Scholar
  • Chang N, Sheng ORL (2008) Decision-tree-based knowledge discovery: Single-vs. multi-decision-tree induction. INFORMS J. Comput. 20(1):46–54.LinkGoogle Scholar
  • Chen GK, Chen S, Fan LL, Du XN, Zhao Z, Song F, Liu Y (2021) Who is real bob? adversarial attacks on speaker recognition systems. Proc. 42nd IEEE Symp. Security Privacy (IEEE, Piscataway, NJ), 694–711.Google Scholar
  • Chen JB, Jordan MI, Wainwright MJ (2020) Hopskipjumpattack: A query-efficient decision-based attack. Proc. 41st IEEE Symp. Security Privacy (IEEE, Piscataway, NJ), 1277–1294.Google Scholar
  • Chen TQ, Guestrin C (2016) Xgboost: A scalable tree boosting system. Proc. 22nd ACM SIGKDD Internat. Conf. Knowledge Discovery Data Mining (ACM, New York), 785–794.Google Scholar
  • Das S, Du AY, Gopal R, Ramesh R (2011) Risk management and optimal pricing in online storage grids. Inform. Systems Res. 22(4):756–773.LinkGoogle Scholar
  • Du AY, Das S, Ramesh R (2013) Efficient risk hedging by dynamic forward pricing: A study in cloud computing. INFORMS J. Comput. 25(4):625–642.LinkGoogle Scholar
  • Esmaeili B, Azmoodeh A, Dehghantanha A, Karimipour H, Zolfaghari B, Hammoudeh M (2022) IIoT deep malware threat hunting: From adversarial example detection to adversarial scenario detection. IEEE Trans. Indust. Inform. 18(12):8477–8486.CrossrefGoogle Scholar
  • Finlayson SG, Bowers JD, Ito J, Zittrain JL, Beam AL, Kohane IS (2019) Adversarial attacks on medical machine learning. Science 363(6433):1287–1289.CrossrefGoogle Scholar
  • Han XT, Hu YX, Foschini L, Chinitz L, Jankelson L, Ranganath R (2020) Deep learning models for electrocardiograms are susceptible to adversarial attack. Nature Medicine 26(3):360–363.CrossrefGoogle Scholar
  • Heaven D (2019) Why deep-learning AIs are so easy to fool. Nature 574(7777):163–166.CrossrefGoogle Scholar
  • Kabadurmus O, Smith AE (2017) Evaluating reliability/survivability of capacitated wireless networks. IEEE Trans. Reliability 67(1):26–40.CrossrefGoogle Scholar
  • Li M, Zhou ZH (2007) Improve computer-aided diagnosis with machine learning techniques using undiagnosed samples. IEEE Trans. Systems Man Cybernetics A 37(6):1088–1098.CrossrefGoogle Scholar
  • Li PC, Yi JF, Zhang LJ (2018) Query-efficient black-box attack by active learning. Proc. 18th IEEE Internat. Conf. Data Mining (IEEE, Piscataway, NJ), 1200–1205.Google Scholar
  • Liu FT, Ting KM, Zhou ZH (2008) Isolation forest. Proc. 8th IEEE Internat. Conf. Data Mining (IEEE, Piscataway, NJ), 413–422.Google Scholar
  • Moosavi-Dezfooli SM, Fawzi A, Frossard P (2016) Deepfool: A simple and accurate method to fool deep neural networks. Proc. 30th IEEE Conf. Comput. Vision Pattern Recognition (IEEE, Piscataway, NJ), 2574–2582.Google Scholar
  • Narodytska N, Kasiviswanathan SP (2016) Simple black-box adversarial perturbations for deep networks. Preprint, submitted December 19, https://arxiv.org/abs/1612.06299.Google Scholar
  • Papernot N, McDaniel P, Goodfellow I (2016) Transferability in machine learning: From phenomena to black-box attacks using adversarial samples. Preprint, submitted May 24, https://arxiv.org/abs/1605.07277.Google Scholar
  • Phua C, Smith-Miles K, Lee VCS, Gayler R (2012) Resilient identity crime detection. IEEE Trans. Knowledge Data Engrg. 24(3):533–546.CrossrefGoogle Scholar
  • Salimans T, Goodfellow I, Zaremba W, Cheung V, Radford A, Chen X (2016) Improved techniques for training GANs. Proc. 30th Internat. Conf. Neural Inform. Processing Systems (ACM, New York), 2234–2242.Google Scholar
  • Schlegl T, Seeböck P, Waldstein SM, Schmidt-Erfurth U, Langs G (2017) Unsupervised anomaly detection with generative adversarial networks to guide marker discovery. Proc. 25th Internat. Conf. Inform. Processing Medical Imaging (Springer, Berlin), 146–157.Google Scholar
  • Springer JM, Mitchell M, Kenyon GT (2021) A little robustness goes a long way: Leveraging robust features for targeted transfer attacks. Proc. 35th Internat. Conf. Neural Inform. Processing Systems (ACM, New York), 9759–9773.Google Scholar
  • Syeda M, Zhang YQ, Yi P (2002) Parallel granular neural networks for fast credit card fraud detection. Proc. 11th IEEE Internat. Conf. Fuzzy Systems (IEEE, Piscataway, NJ), 572–577.Google Scholar
  • Szegedy C, Zaremba W, Sutskever I, Bruna J, Erhan D, Goodfellow I, Fergus R (2013) Intriguing properties of neural networks. Preprint, submitted December 21, https://arxiv.org/abs/1312.6199.Google Scholar
  • Vatsa V, Sural S, Majumdar AK (2005) A game-theoretic approach to credit card fraud detection. Proc. 1st Internat. Conf. Inform. Systems Security (Springer, Berlin), 263–276.Google Scholar
  • Xiao J, Jia YL, Jiang X, Wang SY (2020a) Circular complex-valued GMDH-type neural network for real-valued classification problems. IEEE Trans. Neural Networks Learn. Systems 31(12):5285–5299.CrossrefGoogle Scholar
  • Xiao J, Tian YH, Jia YL, Jiang X, Yu LA, Wang SY (2023) Black-box attack-based security evaluation framework for credit card fraud detection models. Version v2021.0076. URL http://dx.doi.org/10.5281/zenodo.7631457, https://github.com/INFORMSJoC/2021.0076.Google Scholar
  • Xiao J, Tian YH, Xie L, Jiang X, Huang J (2020b) A hybrid classification framework based on clustering. IEEE Trans. Indust. Inform. 16(4):2177–2188.CrossrefGoogle Scholar
  • Yuan XY, He P, Zhu QL, Li XL (2019) Adversarial examples: Attacks and defenses for deep learning. IEEE Trans. Neural Networks Learn. Systems 30(9):2805–2824.CrossrefGoogle Scholar
  • Zeager MF, Sridhar A, Fogal N, Adams S, Brown DE, Beling PA (2017) Adversarial learning in credit card fraud detection. Proc. 15th Systems Inform. Engrg. Design Sympos. (IEEE, Piscataway, NJ), 112–116.Google Scholar
  • Zhang B, Wang YD, Hou WX, Wu H, Wang JD, Okumura M, Shinozaki T (2021) Flexmatch: Boosting semi-supervised learning with curriculum pseudo labeling. Proc. 35th Internat. Conf. Neural Inform. Processing Systems (ACM, New York), 18408–18419.Google Scholar
  • Zong B, Song Q, Min MR, Cheng W, Lumezanu C, Cho D, Chen HF (2018) Deep autoencoding Gaussian mixture model for unsupervised anomaly detection. Proc. 6th Internat. Conf. Learn. Representations (ICLR, Appleton, WI), 1–19.Google Scholar
INFORMS site uses cookies to store information on your computer. Some are essential to make our site work; Others help us improve the user experience. By using this site, you consent to the placement of these cookies. Please read our Privacy Statement to learn more.