View in EDS

Indiscriminate disruption of conditional inference on multivariate Gaussians.

Saved in:
Bibliographic Details
Title: Indiscriminate disruption of conditional inference on multivariate Gaussians.
Authors: Caballero, William N.1 (AUTHOR) william.caballero@afit.edu, LaRosa, Matthew2 (AUTHOR) matthew.larosa@duke.edu, Fisher, Alexander A.3 (AUTHOR) alexander.fisher@duke.edu, Tarokh, Vahid2 (AUTHOR) vahid.tarokh@duke.edu
Source: European Journal of Operational Research. Nov2025, Vol. 327 Issue 1, p191-202. 12p.
Subjects: Distribution (Probability theory), Machine learning, Inference (Logic), Decision making, Mathematical variables, Scientific observation, Quadratic programming
Abstract: The multivariate Gaussian distribution underpins myriad operations-research, decision-analytic, and machine-learning models (e.g., Bayesian optimization, Gaussian influence diagrams, and variational autoencoders). However, despite recent advances in adversarial machine learning (AML), inference for Gaussian models in the presence of an adversary is notably understudied. Therefore, we consider a self-interested attacker who wishes to disrupt a decisionmaker's conditional inference and subsequent actions by corrupting a set of evidentiary variables. To avoid detection, the attacker also desires the attack to appear plausible wherein plausibility is determined by the density of the corrupted evidence. We consider white- and grey-box settings such that the attacker has complete and incomplete knowledge about the decisionmaker's underlying multivariate Gaussian distribution, respectively. Select instances are shown to reduce to quadratic and stochastic quadratic programs, and structural properties are derived to inform solution methods. We assess the impact and efficacy of these attacks in three examples, including, a real estate evaluation application, an interest rate prediction task, and the use of linear Gaussian state space models. Each example leverages an alternative underlying model, thereby highlighting the attacks' broad applicability. Through these applications, we also juxtapose the behavior of the white- and grey-box attacks to understand how uncertainty and structure affect attacker behavior. • Adversarial machine learning is adopted to a foundational statistical setting. • Multiple attacks are created under varied attacker information conditions. • Theoretical properties are derived to inform subsequent solution methods. • Computational testing is performed to compare and contrast attack efficacy. • Disparate case studies are performed to illustrate the attacks' broad applicability. [ABSTRACT FROM AUTHOR]
Copyright of European Journal of Operational Research is the property of Elsevier B.V. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Engineering Source
FullText Text:
  Availability: 0
Header DbId: egs
DbLabel: Engineering Source
An: 187171751
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Indiscriminate disruption of conditional inference on multivariate Gaussians.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Caballero%2C+William+N%2E%22">Caballero, William N.</searchLink><relatesTo>1</relatesTo> (AUTHOR)<i> william.caballero@afit.edu</i><br /><searchLink fieldCode="AR" term="%22LaRosa%2C+Matthew%22">LaRosa, Matthew</searchLink><relatesTo>2</relatesTo> (AUTHOR)<i> matthew.larosa@duke.edu</i><br /><searchLink fieldCode="AR" term="%22Fisher%2C+Alexander+A%2E%22">Fisher, Alexander A.</searchLink><relatesTo>3</relatesTo> (AUTHOR)<i> alexander.fisher@duke.edu</i><br /><searchLink fieldCode="AR" term="%22Tarokh%2C+Vahid%22">Tarokh, Vahid</searchLink><relatesTo>2</relatesTo> (AUTHOR)<i> vahid.tarokh@duke.edu</i>
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22European+Journal+of+Operational+Research%22">European Journal of Operational Research</searchLink>. Nov2025, Vol. 327 Issue 1, p191-202. 12p.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Distribution+%28Probability+theory%29%22">Distribution (Probability theory)</searchLink><br /><searchLink fieldCode="DE" term="%22Machine+learning%22">Machine learning</searchLink><br /><searchLink fieldCode="DE" term="%22Inference+%28Logic%29%22">Inference (Logic)</searchLink><br /><searchLink fieldCode="DE" term="%22Decision+making%22">Decision making</searchLink><br /><searchLink fieldCode="DE" term="%22Mathematical+variables%22">Mathematical variables</searchLink><br /><searchLink fieldCode="DE" term="%22Scientific+observation%22">Scientific observation</searchLink><br /><searchLink fieldCode="DE" term="%22Quadratic+programming%22">Quadratic programming</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: The multivariate Gaussian distribution underpins myriad operations-research, decision-analytic, and machine-learning models (e.g., Bayesian optimization, Gaussian influence diagrams, and variational autoencoders). However, despite recent advances in adversarial machine learning (AML), inference for Gaussian models in the presence of an adversary is notably understudied. Therefore, we consider a self-interested attacker who wishes to disrupt a decisionmaker's conditional inference and subsequent actions by corrupting a set of evidentiary variables. To avoid detection, the attacker also desires the attack to appear plausible wherein plausibility is determined by the density of the corrupted evidence. We consider white- and grey-box settings such that the attacker has complete and incomplete knowledge about the decisionmaker's underlying multivariate Gaussian distribution, respectively. Select instances are shown to reduce to quadratic and stochastic quadratic programs, and structural properties are derived to inform solution methods. We assess the impact and efficacy of these attacks in three examples, including, a real estate evaluation application, an interest rate prediction task, and the use of linear Gaussian state space models. Each example leverages an alternative underlying model, thereby highlighting the attacks' broad applicability. Through these applications, we also juxtapose the behavior of the white- and grey-box attacks to understand how uncertainty and structure affect attacker behavior. • Adversarial machine learning is adopted to a foundational statistical setting. • Multiple attacks are created under varied attacker information conditions. • Theoretical properties are derived to inform subsequent solution methods. • Computational testing is performed to compare and contrast attack efficacy. • Disparate case studies are performed to illustrate the attacks' broad applicability. [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of European Journal of Operational Research is the property of Elsevier B.V. and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=187171751
RecordInfo BibRecord:
  BibEntity:
    Identifiers:
      – Type: doi
        Value: 10.1016/j.ejor.2025.06.011
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 12
        StartPage: 191
    Subjects:
      – SubjectFull: Distribution (Probability theory)
        Type: general
      – SubjectFull: Machine learning
        Type: general
      – SubjectFull: Inference (Logic)
        Type: general
      – SubjectFull: Decision making
        Type: general
      – SubjectFull: Mathematical variables
        Type: general
      – SubjectFull: Scientific observation
        Type: general
      – SubjectFull: Quadratic programming
        Type: general
    Titles:
      – TitleFull: Indiscriminate disruption of conditional inference on multivariate Gaussians.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Caballero, William N.
      – PersonEntity:
          Name:
            NameFull: LaRosa, Matthew
      – PersonEntity:
          Name:
            NameFull: Fisher, Alexander A.
      – PersonEntity:
          Name:
            NameFull: Tarokh, Vahid
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 16
              M: 11
              Text: Nov2025
              Type: published
              Y: 2025
          Identifiers:
            – Type: issn-print
              Value: 03772217
          Numbering:
            – Type: volume
              Value: 327
            – Type: issue
              Value: 1
          Titles:
            – TitleFull: European Journal of Operational Research
              Type: main
ResultId 1