@inproceedings {291058,
	author = {Kunal Mukherjee and Joshua Wiedemeier and Tianhao Wang and James Wei and Feng Chen and Muhyun Kim and Murat Kantarcioglu and Kangkook Jee},
	title = {Evading {Provenance-Based} {ML} Detectors with Adversarial System Actions},
	booktitle = {32nd USENIX Security Symposium (USENIX Security 23)},
	year = {2023},
	isbn = {978-1-939133-37-3},
	address = {Anaheim, CA},
	pages = {1199--1216},
	url = {https://www.usenix.org/conference/usenixsecurity23/presentation/mukherjee},
	publisher = {USENIX Association},
	month = aug
}
@inproceedings {206180,
	author = {Warren He and James Wei and Xinyun Chen and Nicholas Carlini and Dawn Song},
	title = {Adversarial Example Defense: Ensembles of Weak Defenses are not Strong},
	booktitle = {11th USENIX Workshop on Offensive Technologies (WOOT 17)},
	year = {2017},
	address = {Vancouver, BC},
	url = {https://www.usenix.org/conference/woot17/workshop-program/presentation/he},
	publisher = {USENIX Association},
	month = aug
}
