Research question
How did adversarial machine learning develop before and after deep learning?
Key findings
- Traces evasion and poisoning attacks back to 2004 spam-filter work - Frames security evaluation as threat modelling plus proactive attack simulation
