{"id":"W4284884156","doi":"10.2196/38440","title":"Exploiting Missing Value Patterns for a Backdoor Attack on Machine Learning Models of Electronic Health Records: Development and Validation Study","year":2022,"lang":"en","type":"article","venue":"JMIR Medical Informatics","topic":"Adversarial Robustness in Machine Learning","field":"Computer Science","cited_by":13,"is_retracted":false,"has_abstract":true,"ca_institutions":"","funders":"","keywords":"Backdoor; Computer science; Machine learning; Artificial intelligence; Data mining; Computer security","routes":{"ca_aff":false,"ca_fund":false,"ca_venue":true,"about_ca":false,"invisible_to_affiliation_only":true},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.01667107,0.001073442,0.0007164266,0.000691131,0.000358533,0.000715366,0.001526304,0.001583012,0.0008739163],"category_scores_gemma":[0.04564837,0.000536599,0.001179526,0.0004495673,0.000909292,0.00171063,0.002010374,0.002404993,0.000260727],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001148715,"about_ca_system_score_gemma":0.001297086,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006737075,"about_ca_topic_score_gemma":0.004324904,"domain_scores_codex":[0.9944858,0.003257733,0.0003480055,0.0005536492,0.001056107,0.0002987692],"domain_scores_gemma":[0.9406551,0.04478875,0.002756053,0.006221175,0.005070339,0.0005086862],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0004523312,0.0009195032,0.02745615,0.0002376514,0.0003636921,0.0001667904,0.0002349012,0.8838461,0.003100881,0.003368888,0.001135334,0.07871787],"study_design_scores_gemma":[0.00001288199,0.0001662896,0.001146544,0.00001190785,0.00001165419,0.00001970611,0.00001543191,0.9965364,0.001594462,0.0003610766,0.0001179028,0.000005827795],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"methods","genre_scores_codex":[0.7808177,0.0008690474,0.2147414,0.0006923201,0.00007075172,0.0002940089,0.0003325252,0.001080366,0.00110189],"genre_scores_gemma":[0.944867,0.0001724954,0.05377506,0.00005832937,0.00001151322,0.00007283797,0.0004986583,0.00003243569,0.0005115411],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.01667107,"threshold_uncertainty_score":0.08816612,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05934919064266191,"score_gpt":0.3395018828589073,"score_spread":0.2801526922162454,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}