Stochastic Substitute Training: A Gray-box Approach to Craft Adversarial Examples Against Gradient Obfuscation Defenses

It has been shown that adversaries can craft example inputs to neural networks which are similar to legitimate inputs but have been created to purposely cause the neural network to misclassify the input. These adversarial examples are crafted, for example, by calculating gradients of a carefully defined loss function with respect to the input. As a countermeasure, some researchers have tried to design robust models by blocking or obfuscating gradients, even in white-box settings. Another line of research proposes introducing a separate detector to attempt to detect adversarial examples. This approach also makes use of gradient obfuscation techniques, for example, to prevent the adversary from trying to fool the detector. In this paper, we introduce stochastic substitute training, a gray-box approach that can craft adversarial examples for defenses which obfuscate gradients. For those defenses that have tried to make models more robust, with our technique, an adversary can craft adversarial examples with no knowledge of the defense. For defenses that attempt to detect the adversarial examples, with our technique, an adversary only needs very limited information about the defense to craft adversarial examples. We demonstrate our technique by applying it against two defenses which make models more robust and two defenses which detect adversarial examples.Comment: Accepted by AISec '18: 11th ACM Workshop on Artificial Intelligence and Security. Source code at https://github.com/S-Mohammad-Hashemi/SS

Improved Chondrogenic Differentiation of rAAV SOX9-Modified Human MSCs Seeded in Fibrin-Polyurethane Scaffolds in a Hydrodynamic Environment

[Abstract] The repair of focal articular cartilage defects remains a problem. Combining gene therapy with tissue engineering approaches using bone marrow-derived mesenchymal stem cells (MSCs) may allow the development of improved options for cartilage repair. Here, we examined whether a three-dimensional fibrin-polyurethane scaffold provides a favorable environment for the effective chondrogenic differentiation of human MSCs (hMSCs) overexpressing the cartilage-specific SOX9 transcription factor via recombinant adeno-associated virus (rAAV) -mediated gene transfer cultured in a hydrodynamic environment in vitro. Sustained SOX9 expression was noted in the constructs for at least 21 days, the longest time point evaluated. Such spatially defined SOX9 overexpression enhanced proliferative, metabolic, and chondrogenic activities compared with control (reporter lacZ gene transfer) treatment. Of further note, administration of the SOX9 vector was also capable of delaying premature hypertrophic and osteogenic differentiation in the constructs. This enhancement of chondrogenesis by spatially defined overexpression of human SOX9 demonstrate the potential benefits of using rAAV-modified hMSCs seeded in fibrin-polyurethane scaffolds as a promising approach for implantation in focal cartilage lesions to improve cartilage repair.This research was funded by a grant from the Collaborative Research Partner Acute Cartilage Injury Program of AO Foundation, Davos, Switzerland (Henning Madry, Magali Cucchiarini, David Eglin, Mauro Alini, Martin J. Stoddart. We thank R.J. Samulski (The Gene Therapy Center, University of North Carolina, Chapel Hill, NC, USA), X. Xiao (The Gene Therapy Center, University of Pittsburgh, Pittsburgh, PA), and E.F. Terwilliger (Division of Experimental Medicine, Harvard Institutes of Medicine and Beth Israel Deaconess Medical Center, Boston, MA) for providing the genomic AAV-2 plasmid clones and the 293 cell line, and G. Scherer (Institute for Human Genetics and Anthropology, Albert-Ludwig University, Freiburg, Germany) for the human SOX) sequenc

Improved Chondrogenic Differentiation of rAAV SOX9-Modified Human MSCs Seeded in Fibrin-Polyurethane Scaffolds in a Hydrodynamic Environment

The repair of focal articular cartilage defects remains a problem. Combining gene therapy with tissue engineering approaches using bone marrow-derived mesenchymal stem cells (MSCs) may allow the development of improved options for cartilage repair. Here, we examined whether a three-dimensional fibrin-polyurethane scaffold provides a favorable environment for the effective chondrogenic differentiation of human MSCs (hMSCs) overexpressing the cartilage-specific SOX9 transcription factor via recombinant adeno-associated virus (rAAV) -mediated gene transfer cultured in a hydrodynamic environment in vitro. Sustained SOX9 expression was noted in the constructs for at least 21 days, the longest time point evaluated. Such spatially defined SOX9 overexpression enhanced proliferative, metabolic, and chondrogenic activities compared with control (reporter lacZ gene transfer) treatment. Of further note, administration of the SOX9 vector was also capable of delaying premature hypertrophic and osteogenic differentiation in the constructs. This enhancement of chondrogenesis by spatially defined overexpression of human SOX9 demonstrate the potential benefits of using rAAV-modified hMSCs seeded in fibrin-polyurethane scaffolds as a promising approach for implantation in focal cartilage lesions to improve cartilage repair

Subjective self-assessment of physical activity is negatively affected by monitoring awareness in subjects with mild cognitive impairment : A crossover randomised controlled trial

Publisher Copyright: © 2021 Verduci Editore s.r.l. All rights reserved.OBJECTIVE: Physical activity plays an important role in maintaining mental and physical health. This study assessed the effect of physical activity monitoring awareness on the physical activity level and subjective self-assessment of physical activity in middle-aged subjects with normal cognitive function (NCF) and mild cognitive impairment (MCI). PATIENTS AND METHODS: Thirty-five subjects aged 50-65 years with NCF and MCI were randomised into two experimental groups, each taking part in two one-week intervention periods. Subjects in group A were not aware that their physical activity was monitored in the first week (phase I) and were aware of the monitoring in the second week (phase II), whereas it was the opposite order for group B. Physical activity was assessed using the ActiGraph GT9X accelerometer and International Physical Activity Questionnaire (IPAQ). RESULTS: A total of 32 subjects (MCI: n = 12, NCF: n = 20) completed both intervention periods, with MCI subjects having significantly lower objectively assessed physical activity than NCF participants. Moreover, subjectively assessed physical activity in the MCI group was significantly higher when the participants were unaware of physical activity monitoring. A significant phase-group interaction was found in total (MET-min/d: P = 0.0072; min/d: P = 0.0194) and moderate (MET-min/d: P = 0.0015; min/d: P = 0.0020) physical activity as well as energy expenditure (p = 0.0366) assessed by the IPAQ and in the percentage of sedentary behaviour (p = 0.0330) and the average number of steps (p = 0.0342) assessed by ActiGraph. CONCLUSIONS: The awareness of physical activity assessment might decrease the ability to subjectively assess physical activity in subjects with MCI.Peer reviewe

Privacy Risks of Securing Machine Learning Models against Adversarial Examples

The arms race between attacks and defenses for machine learning models has come to a forefront in recent years, in both the security community and the privacy community. However, one big limitation of previous research is that the security domain and the privacy domain have typically been considered separately. It is thus unclear whether the defense methods in one domain will have any unexpected impact on the other domain. In this paper, we take a step towards resolving this limitation by combining the two domains. In particular, we measure the success of membership inference attacks against six state-of-the-art defense methods that mitigate the risk of adversarial examples (i.e., evasion attacks). Membership inference attacks determine whether or not an individual data record has been part of a model's training set. The accuracy of such attacks reflects the information leakage of training algorithms about individual members of the training set. Adversarial defense methods against adversarial examples influence the model's decision boundaries such that model predictions remain unchanged for a small area around each input. However, this objective is optimized on training data. Thus, individual data records in the training set have a significant influence on robust models. This makes the models more vulnerable to inference attacks. To perform the membership inference attacks, we leverage the existing inference methods that exploit model predictions. We also propose two new inference methods that exploit structural properties of robust models on adversarially perturbed data. Our experimental evaluation demonstrates that compared with the natural training (undefended) approach, adversarial defense methods can indeed increase the target model's risk against membership inference attacks.Comment: ACM CCS 2019, code is available at https://github.com/inspire-group/privacy-vs-robustnes

Safety and dose modification for patients receiving niraparib

Background: Niraparib is a poly(ADP-ribose) polymerase (PARP) inhibitor approved in the United States and Europe for maintenance treatment of adult patients with recurrent epithelial ovarian, fallopian tube, or primary peritoneal cancer who are in complete or partial response to platinum-based chemotherapy. In the pivotal ENGOT-OV16/NOVA trial, the dose reduction rate due to TEAE was 68.9%, and the discontinuation rate due to TEAE was 14.7%, including 3.3% due to thrombocytopenia. A retrospective analysis was performed to identify clinical parameters that predict dose reductions. Patients and methods: All analyses were performed on the safety population, comprising all patients who received at least one dose of study drug. Patients were analyzed according to the study drug consumed (ie, as treated). A predictive modeling method (decision trees) was used to identify important variables for predicting the likelihood of developing grade ≥3 thrombocytopenia within 30 days after the first dose of niraparib and determine cutoff points for chosen variables. Results: Following dose modification, 200 mg was the most commonly administered dose in the ENGOT-OV16/NOVA trial. Baseline platelet count and baseline body weight were identified as risk factors for increased incidence of grade ≥3 thrombocytopenia. Patients with a baseline body weight <77 kg or a baseline platelet count <150,000/μL in effect received an average daily dose approximating 200 mg (median = 207 mg) due to dose interruption and reduction. Progression-free survival in patients who were dose reduced to either 200 mg or 100 mg was consistent with that of patients who remained at the 300 mg starting dose. Conclusions: The analysis presented suggests that patients with baseline body weight of < 77 kg or baseline platelets of < 150,000/μL may benefit from a starting dose of 200 mg per day. (ClinicalTrials.gov ID: NCT01847274)

Avelumab Alone or in Combination With Chemotherapy Versus Chemotherapy Alone in Platinum-Resistant or Platinum-Refractory Ovarian Cancer (JAVELIN Ovarian 200): An Open-Label, Three-Arm, Randomised, Phase 3 Study

The majority of patients with ovarian cancer will experience relapse and develop platinum-resistant disease after being treated with frontline platinum-based chemotherapy. Treatment options for platinum-resistance or platinum-refractory disease are very limited, usually involving nonplatinum chemotherapy, and they are associated with poor objective response rates and life expectancy

Changes in disease burden in Poland between 1990–2017 in comparison with other Central European countries: A systematic analysis for the Global Burden of Disease Study 2017

Background Systematic collection of mortality/morbidity data over time is crucial for monitoring trends in population health, developing health policies, assessing the impact of health programs. In Poland, a comprehensive analysis describing trends in disease burden for major conditions has never been published. The Global Burden of Diseases, Injuries, and Risk Factors Study (GBD) provides data on the burden of over 300 diseases in 195 countries since 1990. We used the GBD database to undertake an assessment of disease burden in Poland, evaluate changes in population health between 1990–2017, and compare Poland with other Central European (CE) countries

Global, regional, and national comparative risk assessment of 79 behavioural, environmental and occupational, and metabolic risks or clusters of risks, 1990-2015: a systematic analysis for the Global Burden of Disease Study 2015

SummaryBackground The Global Burden of Diseases, Injuries, and Risk Factors Study 2015 provides an up-to-date synthesis of the evidence for risk factor exposure and the attributable burden of disease. By providing national and subnational assessments spanning the past 25 years, this study can inform debates on the importance of addressing risks in context. Methods We used the comparative risk assessment framework developed for previous iterations of the Global Burden of Disease Study to estimate attributable deaths, disability-adjusted life-years (DALYs), and trends in exposure by age group, sex, year, and geography for 79 behavioural, environmental and occupational, and metabolic risks or clusters of risks from 1990 to 2015. This study included 388 risk-outcome pairs that met World Cancer Research Fund-defined criteria for convincing or probable evidence. We extracted relative risk and exposure estimates from randomised controlled trials, cohorts, pooled cohorts, household surveys, census data, satellite data, and other sources. We used statistical models to pool data, adjust for bias, and incorporate covariates. We developed a metric that allows comparisons of exposure across risk factors—the summary exposure value. Using the counterfactual scenario of theoretical minimum risk level, we estimated the portion of deaths and DALYs that could be attributed to a given risk. We decomposed trends in attributable burden into contributions from population growth, population age structure, risk exposure, and risk-deleted cause-specific DALY rates. We characterised risk exposure in relation to a Socio-demographic Index (SDI). Findings Between 1990 and 2015, global exposure to unsafe sanitation, household air pollution, childhood underweight, childhood stunting, and smoking each decreased by more than 25%. Global exposure for several occupational risks, high body-mass index (BMI), and drug use increased by more than 25% over the same period. All risks jointly evaluated in 2015 accounted for 57·8% (95% CI 56·6–58·8) of global deaths and 41·2% (39·8–42·8) of DALYs. In 2015, the ten largest contributors to global DALYs among Level 3 risks were high systolic blood pressure (211·8 million [192·7 million to 231·1 million] global DALYs), smoking (148·6 million [134·2 million to 163·1 million]), high fasting plasma glucose (143·1 million [125·1 million to 163·5 million]), high BMI (120·1 million [83·8 million to 158·4 million]), childhood undernutrition (113·3 million [103·9 million to 123·4 million]), ambient particulate matter (103·1 million [90·8 million to 115·1 million]), high total cholesterol (88·7 million [74·6 million to 105·7 million]), household air pollution (85·6 million [66·7 million to 106·1 million]), alcohol use (85·0 million [77·2 million to 93·0 million]), and diets high in sodium (83·0 million [49·3 million to 127·5 million]). From 1990 to 2015, attributable DALYs declined for micronutrient deficiencies, childhood undernutrition, unsafe sanitation and water, and household air pollution; reductions in risk-deleted DALY rates rather than reductions in exposure drove these declines. Rising exposure contributed to notable increases in attributable DALYs from high BMI, high fasting plasma glucose, occupational carcinogens, and drug use. Environmental risks and childhood undernutrition declined steadily with SDI; low physical activity, high BMI, and high fasting plasma glucose increased with SDI. In 119 countries, metabolic risks, such as high BMI and fasting plasma glucose, contributed the most attributable DALYs in 2015. Regionally, smoking still ranked among the leading five risk factors for attributable DALYs in 109 countries; childhood underweight and unsafe sex remained primary drivers of early death and disability in much of sub-Saharan Africa. Interpretation Declines in some key environmental risks have contributed to declines in critical infectious diseases. Some risks appear to be invariant to SDI. Increasing risks, including high BMI, high fasting plasma glucose, drug use, and some occupational exposures, contribute to rising burden from some conditions, but also provide opportunities for intervention. Some highly preventable risks, such as smoking, remain major causes of attributable DALYs, even as exposure is declining. Public policy makers need to pay attention to the risks that are increasingly major contributors to global burden. Funding Bill & Melinda Gates Foundation