The Price of Tailoring the Index to Your Data: Poisoning Attacks on Learned Index Structures

Summary: First study of data poisoning on learned index structures, training on a CDF causing cascading errors across the model. Attacks on RMI and two-stage models yield up to 300x and 3000x error inflation, revealing security risks of data-tailored indexes. (summarized by gpt-5-nano on Feb 09 2026)

Paper ID: 6320
Venue: SIGMOD
Year: 2022
Pagerank: 5.5713508e-05
Overall Rank: 5,310 | 63.10%
DOI: 10.1145/3514221.3517867

Incoming Non-self Citations Over Time

Authors

Incoming Citations (Sorted by Pagerank)

Showing 11 of 11 citing papers.

Rank	Citing Paper	Year	Venue	Pagerank
5,072	Learned Index: A Comprehensive Experimental Evaluation	2023	VLDB	5.7121108e-05
5,455	Grafite: Taming Adversarial Queries with Optimal Range Filters	2024	SIGMOD	5.4965299e-05
8,221	Sieve: A Learned Data-Skipping Index for Data Analytics	2023	VLDB	4.5511941e-05
8,668	Algorithmic Complexity Attacks on Dynamic Learned Indexes	2024	VLDB	4.4671214e-05
9,215	PACE: Poisoning Attacks on Learned Cardinality Estimation	2024	SIGMOD	4.3679174e-05
9,826	PLATON: Top-down R-tree Packing with Learned Partition Policy	2023	SIGMOD	4.2710095e-05
9,901	Robustness of Updatable Learning-based Index Advisors against Poisoning Attack	2024	SIGMOD	4.2539423e-05
10,038	Understanding Robustness Issues of Updatable Learned Indexes: [Experiments & Analysis]	2026	SIGMOD	4.1905499e-05
10,282	Toward Drift-Aware Database Benchmarking	2026	VLDB	4.1905499e-05
10,407	VEGA: An Active-tuning Learned Index with Group-Wise Learning Granularity	2025	SIGMOD	4.1905499e-05
10,488	Data Enhancement for Binary Classification of Relational Data	2025	SIGMOD	4.1905499e-05

Outgoing Citations (Sorted by Pagerank)

Showing 15 of 15 cited papers.

Citations counted here include only citations to other VLDB/SIGMOD/CIDR/PODS papers in this database.

Rank	Cited Paper	Year	Venue	Pagerank
101	The Case for Learned Index Structures	2018	SIGMOD	0.00049778866
183	Automatic Database Management System Tuning Through Large-scale Machine Learning	2017	SIGMOD	0.00036859633
704	Query-based Workload Forecasting for Self-Driving Database Management Systems	2018	SIGMOD	0.00017785557
796	SageDB: A Learned Database System	2019	CIDR	0.00016541749
819	ALEX: An Updatable Adaptive Learned Index	2020	SIGMOD	0.00016237497
844	The PGM-index: a fully-dynamic compressed learned index with provable worst-case bounds	2020	VLDB	0.00015964123
1,365	FITing-Tree: A Data-aware Index Structure	2019	SIGMOD	0.00012379754
1,438	Benchmarking Learned Indexes	2021	VLDB	0.00011965956
1,464	Learning Multi-dimensional Indexes	2020	SIGMOD	0.0001184772
1,801	H2O: A Hands-free Adaptive Store	2014	SIGMOD	0.00010485628
1,887	Tsunami: A Learned Multi-dimensional Index for Correlated Data and Skewed Workloads	2021	VLDB	0.00010201938
2,606	Design Continuums and the Path Toward Self-Designing Key-Value Stores that Know and Learn	2019	CIDR	8.4621503e-05
2,734	Efficiently Searching In-Memory Sorted Arrays: Revenge of the Interpolation Search?	2019	SIGMOD	8.2082721e-05
2,868	Designing Succinct Secondary Indexing Mechanism by Exploiting Column Correlations	2019	SIGMOD	7.9856878e-05
6,440	From Auto-tuning One Size Fits All to Self-designed and Learned Data-intensive Systems	2019	SIGMOD	5.0546781e-05

Semantically Similar Papers

Overall Rank	Paper	Year	Venue	Pagerank
4,069	CDFShop: Exploring and Optimizing Learned Index Structures	2020	SIGMOD	6.4744708e-05
1,438	Benchmarking Learned Indexes	2021	VLDB	0.00011965956
5,072	Learned Index: A Comprehensive Experimental Evaluation	2023	VLDB	5.7121108e-05
5,343	Learned Index Benefits: Machine Learning Based Index Performance Estimation	2022	VLDB	5.5582234e-05
10,087	High Performance or Low Memory? An Updatable Learned Index Framework for Time-Space Tradeoff	2026	SIGMOD	4.1905499e-05
9,215	PACE: Poisoning Attacks on Learned Cardinality Estimation	2024	SIGMOD	4.3679174e-05
6,723	A Critical Analysis of Recursive Model Indexes	2022	VLDB	4.9449538e-05
101	The Case for Learned Index Structures	2018	SIGMOD	0.00049778866
9,901	Robustness of Updatable Learning-based Index Advisors against Poisoning Attack	2024	SIGMOD	4.2539423e-05
8,668	Algorithmic Complexity Attacks on Dynamic Learned Indexes	2024	VLDB	4.4671214e-05