Image Super-Resolution as a Defense Against Adversarial Attacks

Convolutional Neural Networks have achieved significant success across multiple computer vision tasks. However, they are vulnerable to carefully crafted, human-imperceptible adversarial noise patterns which constrain their deployment in critical security-sensitive systems. This paper proposes a computationally efficient image enhancement approach that provides a strong defense mechanism to effectively mitigate the effect of such adversarial perturbations. We show that deep image restoration networks learn mapping functions that can bring off-the-manifold adversarial samples onto the natural image manifold, thus restoring classification towards correct classes. A distinguishing feature of our approach is that, in addition to providing robustness against attacks, it simultaneously enhances image quality and retains models performance on clean images. Furthermore, the proposed method does not modify the classifier or requires a separate mechanism to detect adversarial images. The effectiveness of the scheme has been demonstrated through extensive experiments, where it has proven a strong defense in gray-box settings. The proposed scheme is simple and has the following advantages: (1) it does not require any model training or parameter optimization, (2) it complements other existing defense mechanisms, (3) it is agnostic to the attacked model and attack type and (4) it provides superior performance across all popular attack algorithms. Our codes are publicly available at https://github.com/aamir-mustafa/super-resolution-adversarial-defense.Comment: Published in IEEE Transactions in Image Processin

Palatini Formalism of 5-Dimensional Kaluza-Klein Theory

The Einstein field equations can be derived in $n$ dimensions ($n>2$) by the variations of the Palatini action. The Killing reduction of 5-dimensional Palatini action is studied on the assumption that pentads and Lorentz connections are preserved by the Killing vector field. A Palatini formalism of 4-dimensional action for gravity coupled to a vector field and a scalar field is obtained, which gives exactly the same fields equations in Kaluza-Klein theory.Comment: 10 page

Lack of allele-specific efficacy of a bivalent AMA1 malaria vaccine

<p>Abstract</p> <p>Background</p> <p>Extensive genetic diversity in vaccine antigens may contribute to the lack of efficacy of blood stage malaria vaccines. Apical membrane antigen-1 (AMA1) is a leading blood stage malaria vaccine candidate with extreme diversity, potentially limiting its efficacy against infection and disease caused by <it>Plasmodium falciparum </it>parasites with diverse forms of AMA1.</p> <p>Methods</p> <p>Three hundred Malian children participated in a Phase 2 clinical trial of a bivalent malaria vaccine that found no protective efficacy. The vaccine consists of recombinant AMA1 based on the 3D7 and FVO strains of <it>P. falciparum </it>adjuvanted with aluminum hydroxide (AMA1-C1). The gene encoding AMA1 was sequenced from <it>P. falciparum </it>infections experienced before and after immunization with the study vaccine or a control vaccine. Sequences of <it>ama1 </it>from infections in the malaria vaccine and control groups were compared with regard to similarity to the vaccine antigens using several measures of genetic diversity. Time to infection with parasites carrying AMA1 haplotypes similar to the vaccine strains with respect to immunologically important polymorphisms and the risk of infection with vaccine strain haplotypes were compared.</p> <p>Results</p> <p>Based on 62 polymorphic AMA1 residues, 186 unique <it>ama1 </it>haplotypes were identified among 315 <it>ama1 </it>sequences that were included in the analysis. Eight infections had <it>ama1 </it>sequences identical to 3D7 while none were identical to FVO. Several measures of genetic diversity showed that <it>ama1 </it>sequences in the malaria vaccine and control groups were comparable both at baseline and during follow up period. Pre- and post-immunization <it>ama1 </it>sequences in both groups all had a similar degree of genetic distance from FVO and 3D7 <it>ama1</it>. No differences were found in the time of first clinical episode or risk of infection with an AMA1 haplotype similar to 3D7 or FVO with respect to a limited set of immunologically important polymorphisms found in the cluster 1 loop of domain I of AMA1.</p> <p>Conclusion</p> <p>This Phase 2 trial of a bivalent AMA1 malaria vaccine found no evidence of vaccine selection or strain-specific efficacy, suggesting that the extreme genetic diversity of AMA1 did not account for failure of the vaccine to provide protection.</p