Privacy Risks of Securing Machine Learning Models against Adversarial Examples

The arms race between attacks and defenses for machine learning models has come to a forefront in recent years, in both the security community and the privacy community. However, one big limitation of previous research is that the security domain and the privacy domain have typically been considered separately. It is thus unclear whether the defense methods in one domain will have any unexpected impact on the other domain. In this paper, we take a step towards resolving this limitation by combining the two domains. In particular, we measure the success of membership inference attacks against six state-of-the-art defense methods that mitigate the risk of adversarial examples (i.e., evasion attacks). Membership inference attacks determine whether or not an individual data record has been part of a model's training set. The accuracy of such attacks reflects the information leakage of training algorithms about individual members of the training set. Adversarial defense methods against adversarial examples influence the model's decision boundaries such that model predictions remain unchanged for a small area around each input. However, this objective is optimized on training data. Thus, individual data records in the training set have a significant influence on robust models. This makes the models more vulnerable to inference attacks. To perform the membership inference attacks, we leverage the existing inference methods that exploit model predictions. We also propose two new inference methods that exploit structural properties of robust models on adversarially perturbed data. Our experimental evaluation demonstrates that compared with the natural training (undefended) approach, adversarial defense methods can indeed increase the target model's risk against membership inference attacks.Comment: ACM CCS 2019, code is available at https://github.com/inspire-group/privacy-vs-robustnes

Compendium of TCDD-mediated transcriptomic response datasets in mammalian model systems

2,3,7,8-tetrachlorodibenzo-p-dioxin (TCDD) is the most potent congener of the dioxin class of environmental contaminants. Exposure to TCDD causes a wide range of toxic outcomes, ranging from chloracne to acute lethality. The severity of toxicity is highly dependent on the aryl hydrocarbon receptor (AHR). Binding of TCDD to the AHR leads to changes in transcription of numerous genes. Studies evaluating the transcriptional changes brought on by TCDD may provide valuable insight into the role of the AHR in human health and disease. We therefore compiled a collection of transcriptomic datasets that can be used to aid the scientific community in better understanding the transcriptional effects of ligand-activated AHR.Peer reviewe

Phosphate release contributes to the rate-limiting step for unwinding by an RNA helicase

RNA helicases function in numerous aspects of RNA biology. These enzymes are RNA-stimulated ATPases that translocate on RNA and unwind or remodel structured RNA in an ATP-dependent fashion. How ATP and the ATPase cycle fuel the work performed by helicases is not completely clear. The hepatitis C virus RNA helicase, NS3, is an important model system for this class of enzymes. NS3 binding to a single-/double-strand RNA or DNA junction leads to ATP-independent melting of the duplex and formation of a complex capable of ATP-dependent unwinding by using a spring-loaded mechanism. We have established an RNA substrate for NS3 that can be unwound in a single sub-step. Our studies are consistent with a model in which a single ATP binding and/or hydrolysis event sets the unwinding spring and phosphate dissociation contributes to release of the spring, thereby driving the power stroke used for unwinding

Decline in Estimated Glomerular Filtration Rate and Subsequent Risk of End-Stage Renal Disease and Mortality

Peer reviewedPostprin

The kidney failure risk equation:evaluation of novel input variables including eGFR estimated using the CKD-EPI 2021 equation in 59 cohorts

SIGNIFICANCE STATEMENT: The kidney failure risk equation (KFRE) uses age, sex, GFR, and urine albumin-to-creatinine ratio (ACR) to predict 2- and 5-year risk of kidney failure in populations with eGFR <60 ml/min per 1.73 m 2 . However, the CKD-EPI 2021 creatinine equation for eGFR is now recommended for use but has not been fully tested in the context of KFRE. In 59 cohorts comprising 312,424 patients with CKD, the authors assessed the predictive performance and calibration associated with the use of the CKD-EPI 2021 equation and whether additional variables and accounting for the competing risk of death improves the KFRE's performance. The KFRE generally performed well using the CKD-EPI 2021 eGFR in populations with eGFR <45 ml/min per 1.73 m 2 and was not improved by adding the 2-year prior eGFR slope and cardiovascular comorbidities. BACKGROUND: The kidney failure risk equation (KFRE) uses age, sex, GFR, and urine albumin-to-creatinine ratio (ACR) to predict kidney failure risk in people with GFR <60 ml/min per 1.73 m 2 . METHODS: Using 59 cohorts with 312,424 patients with CKD, we tested several modifications to the KFRE for their potential to improve the KFRE: using the CKD-EPI 2021 creatinine equation for eGFR, substituting 1-year average ACR for single-measure ACR and 1-year average eGFR in participants with high eGFR variability, and adding 2-year prior eGFR slope and cardiovascular comorbidities. We also assessed calibration of the KFRE in subgroups of eGFR and age before and after accounting for the competing risk of death. RESULTS: The KFRE remained accurate and well calibrated overall using the CKD-EPI 2021 eGFR equation. The other modifications did not improve KFRE performance. In subgroups of eGFR 45-59 ml/min per 1.73 m 2 and in older adults using the 5-year time horizon, the KFRE demonstrated systematic underprediction and overprediction, respectively. We developed and tested a new model with a spline term in eGFR and incorporating the competing risk of mortality, resulting in more accurate calibration in those specific subgroups but not overall. CONCLUSIONS: The original KFRE is generally accurate for eGFR <45 ml/min per 1.73 m 2 when using the CKD-EPI 2021 equation. Incorporating competing risk methodology and splines for eGFR may improve calibration in low-risk settings with longer time horizons. Including historical averages, eGFR slopes, or a competing risk design did not meaningfully alter KFRE performance in most circumstances

A molecular basis for the association of the HLA-DRB1 locus, citrullination, and rheumatoid arthritis

Rheumatoid arthritis (RA) is strongly associated with the human leukocyte antigen (HLA)- DRB1 locus that possesses the shared susceptibility epitope (SE) and the citrullination of self-antigens. We show how citrullinated aggrecan and vimentin epitopes bind to HLADRB1* 04:01/04. Citrulline was accommodated within the electropositive P4 pocket of HLA-DRB1*04:01/04, whereas the electronegative P4 pocket of the RA-resistant HLADRB1* 04:02 allomorph interacted with arginine or citrulline-containing epitopes. Peptide elution studies revealed P4 arginine-containing peptides from HLA-DRB1*04:02, but not from HLA-DRB1*04:01/04. Citrullination altered protease susceptibility of vimentin, thereby generating self-epitopes that are presented to T cells in HLA-DRB1*04:01+ individuals. Using HLA-II tetramers, we observed citrullinated vimentin- and aggrecan-specific CD4+ T cells in the peripheral blood of HLA-DRB1*04:01+ RA-affected and healthy individuals. In RA patients, autoreactive T cell numbers correlated with disease activity and were deficient in regulatory T cells relative to healthy individuals. These findings reshape our understanding of the association between citrullination, the HLA-DRB1 locus, and T cell autoreactivity in RA

Integrating genetic regulation and single-cell expression with GWAS prioritizes causal genes and cell types for glaucoma

Primary open-angle glaucoma (POAG), characterized by retinal ganglion cell death, is a leading cause of irreversible blindness worldwide. However, its molecular and cellular causes are not well understood. Elevated intraocular pressure (IOP) is a major risk factor, but many patients have normal IOP. Colocalization and Mendelian randomization analysis of &gt;240 POAG and IOP genome-wide association study (GWAS) loci and overlapping expression and splicing quantitative trait loci (e/sQTLs) in 49 GTEx tissues and retina prioritizes causal genes for 60% of loci. These genes are enriched in pathways implicated in extracellular matrix organization, cell adhesion, and vascular development. Analysis of single-nucleus RNA-seq of glaucoma-relevant eye tissues reveals that the POAG and IOP colocalizing genes and genome-wide associations are enriched in specific cell types in the aqueous outflow pathways, retina, optic nerve head, peripapillary sclera, and choroid. This study nominates IOP-dependent and independent regulatory mechanisms, genes, and cell types that may contribute to POAG pathogenesis.</p

Integrating genetic regulation and single-cell expression with GWAS prioritizes causal genes and cell types for glaucoma

Primary open-angle glaucoma (POAG), characterized by retinal ganglion cell death, is a leading cause of irreversible blindness worldwide. However, its molecular and cellular causes are not well understood. Elevated intraocular pressure (IOP) is a major risk factor, but many patients have normal IOP. Colocalization and Mendelian randomization analysis of &gt;240 POAG and IOP genome-wide association study (GWAS) loci and overlapping expression and splicing quantitative trait loci (e/sQTLs) in 49 GTEx tissues and retina prioritizes causal genes for 60% of loci. These genes are enriched in pathways implicated in extracellular matrix organization, cell adhesion, and vascular development. Analysis of single-nucleus RNA-seq of glaucoma-relevant eye tissues reveals that the POAG and IOP colocalizing genes and genome-wide associations are enriched in specific cell types in the aqueous outflow pathways, retina, optic nerve head, peripapillary sclera, and choroid. This study nominates IOP-dependent and independent regulatory mechanisms, genes, and cell types that may contribute to POAG pathogenesis.</p

Incidence of acute cerebrovascular events in patients with rheumatic or calcific mitral stenosis: a systematic review and meta-analysis

Background Patients with mitral stenosis (MS) may be predisposed to acute cerebrovascular events (ACE) and peripheral thromboembolic events (TEE). Concomitant atrial fibrillation (AF), mitral annular calcification (MAC) and rheumatic heart disease (RHD) are independent risk factors. Our aim was to evaluate the incidence of ACEs in MS patients and the implications of AF, MAC, and RHD on thromboembolic risks. Methods This systematic review was registered on PROSPERO (CRD42021291316). Six databases were searched from inception to 19th December 2021. The clinical outcomes were composite ACE, ischaemic stroke/transient ischaemic attack (TIA), and peripheral TEE. Results We included 16 and 9 papers, respectively, in our qualitative and quantitative analyses. The MS cohort with AF had the highest incidence of composite ACE (31.55%; 95%CI 3.60-85.03; I 2 =99%), followed by the MAC (14.85%; 95%CI 7.21-28.11; I 2 =98%), overall MS (8.30%; 95%CI 3.45-18.63; I 2 =96%) and rheumatic MS population (4.92%; 95%CI 3.53-6.83; I 2 =38%). Stroke/TIA were reported in 29.62% of the concomitant AF subgroup (95%CI 2.91-85.51; I 2 =99%) and in 7.11% of the overall MS patients (95%CI 1.91-23.16; I 2 =97%). However, the heterogeneity of the pooled incidence of clinical outcomes in all groups, except the rheumatic MS group, were substantial and significant. The logit-transformed proportion of composite ACE increased by 0.0141 (95% CI 0.0111-0.0171; p<0.01) per year of follow-up. Conclusion In the MS population, MAC and concomitant AF are risk factors for the development of ACE. The scarcity of data in our systematic review reflects the need for further studies to explore thromboembolic risks in all MS subtypes

Genome of Pythium myriotylum Uncovers an Extensive Arsenal of Virulence-Related Genes among the Broad-Host-Range Necrotrophic Pythium Plant Pathogens

The Pythium (Peronosporales, Oomycota) genus includes devastating plant pathogens that cause widespread diseases and severe crop losses. Here, we have uncovered a far greater arsenal of virulence factor-related genes in the necrotrophic Pythium myriotylum than in other Pythium plant pathogens. The genome of a plant-virulent P. myriotylum strain (~70 Mb and 19,878 genes) isolated from a diseased rhizome of ginger (Zingiber officinale) encodes the largest repertoire of putative effectors, proteases, and plant cell wall-degrading enzymes (PCWDEs) among the studied species. P. myriotylum has twice as many predicted secreted proteins than any other Pythium plant pathogen. Arrays of tandem duplications appear to be a key factor of the enrichment of the virulence factor-related genes in P. myriotylum. The transcriptomic analysis performed on two P. myriotylum isolates infecting ginger leaves showed that proteases were a major part of the upregulated genes along with PCWDEs, Nep1-like proteins (NLPs), and elicitin-like proteins. A subset of P. myriotylum NLPs were analyzed and found to have necrosis-inducing ability from agroinfiltration of tobacco (Nicotiana benthamiana) leaves. One of the heterologously produced infection-upregulated putative cutinases found in a tandem array showed esterase activity with preferences for longer-chain-length substrates and neutral to alkaline pH levels. Our results allow the development of science-based targets for the management of P. myriotylum-caused disease, as insights from the genome and transcriptome show that gene expansion of virulence factor-related genes play a bigger role in the plant parasitism of Pythium spp. than previously thought. IMPORTANCE Pythium species are oomycetes, an evolutionarily distinct group of filamentous fungus-like stramenopiles. The Pythium genus includes several pathogens of important crop species, e.g., the spice ginger. Analysis of our genome from the plant pathogen Pythium myriotylum uncovered a far larger arsenal of virulence factor-related genes than found in other Pythium plant pathogens, and these genes contribute to the infection of the plant host. The increase in the number of virulence factor-related genes appears to have occurred through the mechanism of tandem gene duplication events. Genes from particular virulence factor-related categories that were increased in number and switched on during infection of ginger leaves had their activities tested. These genes have toxic activities toward plant cells or activities to hydrolyze polymeric components of the plant. The research suggests targets to better manage diseases caused by P. myriotylum and prompts renewed attention to the genomics of Pythium plant pathogens