Confidence Is All You Need for MI Attacks

In this evolving era of machine learning security, membership inference attacks have emerged as a potent threat to the confidentiality of sensitive data. In this attack, adversaries aim to determine whether a particular point was used during the training of a target model. This paper proposes a new method to gauge a data point's membership in a model's training set. Instead of correlating loss with membership, as is traditionally done, we have leveraged the fact that training examples generally exhibit higher confidence values when classified into their actual class. During training, the model is essentially being 'fit' to the training data and might face particular difficulties in generalization to unseen data. This asymmetry leads to the model achieving higher confidence on the training data as it exploits the specific patterns and noise present in the training data. Our proposed approach leverages the confidence values generated by the machine learning model. These confidence values provide a probabilistic measure of the model's certainty in its predictions and can further be used to infer the membership of a given data point. Additionally, we also introduce another variant of our method that allows us to carry out this attack without knowing the ground truth(true class) of a given data point, thus offering an edge over existing label-dependent attack methods.Comment: 2 pages, 1 figur

Stereotactic Radiosurgery Practice Patterns for Brain Metastases in the United States: A National Survey

Background: Stereotactic radiosurgery (SRS) has emerged as an important modality for the treatment of intracranial metastases. There are currently few established guidelines delineating indications for SRS use and fewer still regarding plan evaluation in the treat- ment of multiple brain metastases. Methods: An 18 question electronic survey was distributed to radiation oncologists at National Cancer Institute (NCI) designated cancer centers in the US (60). Centers without radiation oncologists were excluded. Physicians who indicated that they do not prescribe SRS were excluded from the remaining survey questions. Sign test and Chi-square test were used to determine if responses differed significantly from random distribution. Results: 116 of the 697 radiation oncologists surveyed completed the questionnaire, representing 51 institutions. 62% reported treating patients with brain metastases using SRS. Radiation oncologists prescribing SRS most commonly treat CNS (66.2%) and lung (49.3%) malignancies. SRS was used more frequently for \u3c10 brain metastases (73.7%; p\u3c.0001) and whole brain radiation therapy (WBRT) for \u3e10 brain metastases (82.5%; p\u3c.0001). The maximum number of lesions physicians were willing to treat with SRS without WBRT was 1-4 (40.4%) and 5-10 (42.4%) (p\u3c.0001 compared to 11-15, 16-20 and no limit). The most important criteria for choosing SRS or WBRT were number of lesions (p\u3c.0001) and performance status (p=.016). The most common margin for SRS was 0 mm (49.1%; p=.0021). The most common dose constraints other than critical structure was conformity index (84.2%) and brain V12 (61.4%). The LINAC was the most common treatment modality (54.4%) and mono-isocenter technique for multiple brain metastases was commonly used (43.9%; p=.23). Most departments do not have a policy for brain metastases treatment (64.9%; p=.024). Conclusions: This is one of the first national surveys assessing the use of SRS for brain metastases in clinical practice. These data highlight some clinical considerations for physicians treating brain metastases with SRS. Summary: This is among the first national surveys to assess the use of SRS for brain metastases in clinical practice. Specifically, radiation oncologist reported increasingly using SRS instead of WBRT for treating \u3c10 metastases, with the LINAC being the most common modality. Further, treatment parameters considered the most important included 0 mm margins, conformity index, brain V12, and mono- isocenter technique for multiple brain metastases. These results may provide context regarding the use of SRS for brain metastases in clinical practice

Prognostic nomogram for bladder cancer with brain metastases: a National Cancer Database analysis.

BACKGROUND: This study aimed to establish and validate a nomogram for predicting brain metastasis in patients with bladder cancer (BCa) and assess various treatment modalities using a primary cohort comprising 234 patients with clinicopathologically-confirmed BCa from 2004 to 2015 in the National Cancer Database. METHODS: Machine learning method and Cox model were used for nomogram construction. For BCa patients with brain metastasis, surgery of the primary site, chemotherapy, radiation therapy, palliative care, brain confinement of metastatic sites, and the Charlson/Deyo Score were predictive features identified for building the nomogram. RESULTS: For the original 169 patients considered in the model, the areas under the receiver operating characteristic curve (AUC) were 0.823 (95% CI 0.758-0.889, P \u3c 0.001) and 0.854 (95% CI 0.785-0.924, P \u3c 0.001) for 0.5- and 1-year overall survival respectively. In the validation cohort, the nomogram displayed similar AUCs of 0.838 (95% CI 0.738-0.937, P \u3c 0.001) and 0.809 (95% CI 0.680-0.939, P \u3c 0.001), respectively. The high and low risk groups had median survivals of 1.91 and 5.09 months for the training cohort and 1.68 and 8.05 months for the validation set, respectively (both P \u3c 0.0001). CONCLUSIONS: Our prognostic nomogram provides a useful tool for overall survival prediction as well as assessing the risk and optimal treatment for BCa patients with brain metastasis

Phase I Study of Ipilimumab Combined with Whole Brain Radiation Therapy or Radiosurgery for Melanoma Patients with Brain Metastases

Purpose: We performed a phase I study to determine the maximum tolerable dose (MTD) and safety of ipilimumab with stereotactic radiosurgery (SRS) or whole brain radiotherapy (WBRT) in patients with brain metastases (BM) from melanoma. Methods: Based on intracranial (IC) disease burden, patients were treated with WBRT (Arm A) or SRS (Arm B). Ipilimumab starting dose was 3 mg/kg (every 3 weeks, starting on day 3 of WBRT or 2 days after SRS). Ipilimumab was escalated to 10 mg/kg using a two-stage, 3+3 design. The primary endpoint was to determine the MTD of ipilimumab combined with radiotherapy. Secondary endpoints were overall survival (OS), IC and extracranial (EC) control, progression free survival (PFS), and toxicity. This trial is regis- tered with ClinicalTrials.gov, number NCT01703507. Results: Characteristics of the 16 patients enrolled between 2011 and 2014 were: mean age, 60; median BM, 2 (1 to \u3e10); number with EC disease, 13 (81%). Treatment included WBRT (n=5), SRS (n=11), ipilimumab 3mg/kg (n=7), 10 mg/kg (n=9). Median follow-up was 8 months (Arm A) and 10.5 months (Arm B). There were 21 grade 1-2 neuro- toxic effects with no dose-limiting toxicities (DLTs). One patient experienced grade 3 neurotoxicity prior to ipilimumab administration. Ten additional grade 3 toxicities were reported with gastrointestinal (n=5, 31%) as the most common. There were no grade 4/5 toxicities. Median PFS and OS, respectively, in Arm A were 2.5 months and 8 months, and in Arm B were 2.1 months and not reached. Conclusion: Concurrent ipilimumab 10 mg/kg with SRS is safe. The WBRT arm was closed early due to slow accrual, but demonstrated safety with ipilimumab 3 mg/kg. No patient experienced DLT. Larger studies with ipilimumab 10 mg/kg and SRS are warranted

Temozolomide Rechallenge in Patients With Recurrent High-Grade Glioma Treated With Re-Irradiation

PURPOSE/OBJECTIVE(S): To evaluate the clinical role of temozolomide rechallenge (TMZ) in patients with recurrent high-grade glioma (HGG) treated with re-irradiation (re-RT) regardless of surgical status. MATERIALS/METHODS: Single-center retrospective review of patients with a primary diagnosis of World Health Organization (WHO) Grade III anaplastic astrocytoma or Grade IV GBM treated from 2008 to 2016 for disease recurrence with re-RT (35 Gy in 10 fractions) with and without temozolomide rechallenge. Baseline characteristics were analyzed with pairwise tests. OS/PFS were assessed with the Kaplan-Meier method and multivariable cox regression models for OS. RESULTS: Two hundred and thirty patients were treated with re-irradiation (n = 67 with and n = 163 without concurrent TMZ), with a median follow-up of 13.4 months. Baseline characteristics were similar between the two groups. TMZ rechallenge did not improve OS (HR 0.81 [0.51-1.3] P = 0.39). Univariate regression analysis showed that higher KPS both at diagnosis and recurrence correlated with improved survival, whereas increasing histology grade of initial and recurrent disease and volume of recurrence were correlated with worse OS. Multivariate regression analysis showed primary tumor location to be a significant predictor of OS (P = 0.004) with occipital lobe lesions (P \u3c 0.001) and in-field recurrence (P \u3c 0.001) to be most favorably correlated with OS. CONCLUSION: TMZ rechallenge in patients with recurrent HGG treated with re-irradiation offered no survival benefit. Our findings suggest that patient selection may be important in TMZ rechallenge. Further studies in identifying this group of patients are warranted