,Large margin classification for combating disguise attacks on spam filters

• 作 者: Xi-chuan ZHOU Hai-bin SHEN Zhi-yong HUANG Guo-jun LI
• 机 构: College of Communications Engineering, Chongqing University, Chongqing 400044, China“,”Institute of
• 出 处: 浙江大学学报（英文版）（C辑：计算机与电子）
• 发表日期: 2012年3期
• 关键词: Large margin Spam filtering Second-order cone programming (SOCP) Adversarial cla

This paper addresses the challenge of large margin classification for spam filtering in the presence of an adversary who disguises the spam mails to avoid being detected.In practice,the adversary may strategically add good words indicative of a legitimate message or remove bad words indicative of spam.We assume that the adversary could afford to modify a spam message only to a certain extent,without damaging its utility for the spammer.Under this assumption,we present a large margin approach for classification of spam messages that may be disguised.The proposed classifier is formulated as a second-order cone programming optimization.We performed a group of experiments using the TREC 2006 Spam Corpus.Results showed that the performance of the standard support vector machine (SVM) degrades rapidly when more words are injected or removed by the adversary,while the proposed approach is more stable under the disguise attack.