MTDeep: Boosting the Security of Deep Neural Nets Against Adversarial Attacks with Moving Target Defense

Present attack methods can make state-of-the-art classification systems based on deep neural networks misclassify every adversarially modified test example. The design of general defense strategies against a wide range of such attacks still remains a challenging problem. In this paper, we draw inspiration from the fields of cybersecurity and multi-agent systems and propose to leverage the concept of Moving Target Defense (MTD) in designing a meta-defense for 'boosting' the robustness of an ensemble of deep neural networks (DNNs) for visual classification tasks against such adversarial attacks. To classify an input image, a trained network is picked randomly from this set of networks by formulating the interaction between a Defender (who hosts the classification networks) and their (Legitimate and Malicious) users as a Bayesian Stackelberg Game (BSG). We empirically show that this approach, MTDeep, reduces misclassification on perturbed images in various datasets such as MNIST, FashionMNIST, and ImageNet while maintaining high classification accuracy on legitimate test images. We then demonstrate that our framework, being the first meta-defense technique, can be used in conjunction with any existing defense mechanism to provide more resilience against adversarial attacks that can be afforded by these defense mechanisms. Lastly, to quantify the increase in robustness of an ensemble-based classification system when we use MTDeep, we analyze the properties of a set of DNNs and introduce the concept of differential immunity that formalizes the notion of attack transferability.Comment: Accepted to the Conference on Decision and Game Theory for Security (GameSec), 201

Failure analysis of a steel motorcycle kickstand

Copyright @ 2009 Springer US.A fractured steel motorcycle kickstand was metallurgically investigated using a range of failure analysis tools [visual examination, energy dispersive X-ray (EDX) analysis, electron microprobe analysis (EPMA), scanning electron microscopy (SEM), fractography, optical microscopy, hardness testing and non-destructive testing (NDT)]. The steel kickstand’s composition, its microstructure, electron fractographs, and mechanical test results have been critically interpreted. Some evidence of wear damage, in the failed kickstand, was observed. The microstructural and fractographic analyses showed pre-existing micro-cracks which were believed to have grown to result in ductile failure followed by acceleration of corrosion. Recommendations have been made to avoid the failure of the motorcycle kickstand

Detecting Occlusions of Automobile Parts Being Inspected by a Camera System During Manufacturing Assembly

This thesis considers the problem of detecting occlusions in automobile parts on a moving assembly line in an automotive manufacturing plant. This work builds on the existing ``Visual Inspector\u27\u27 (VI) system developed as a joint research project between Clemson University and the BMW Spartanburg manufacturing plant. The goal is to develop a method that can successfully detect occlusions in real-time. VI is a detector and classifier system that uses video cameras to determine the correct installation of a part in the assembly line. In the current version of VI, an occluded part is flagged simply as `not OK\u27 - as if the part were not installed at all. The new algorithm developed aims to extend the functionality of VI to correctly identify occlusions - i.e., flag an obscured, but correctly-installed part as `occluded\u27 rather than as `not OK\u27. In this thesis, we provide a background of the current VI system deployed at the manufacturing plant. We then discuss the design of an algorithm that recognizes occlusions. Details of tests conducted to verify the correctness of the design, as well as the results of the tests run on real-world data from the plant are presented. Finally, we discuss the possible enhancements to this algorithm as part of future work

Detecting Occlusions of Automobile Parts Being Inspected by a Camera System During Manufacturing Assembly

This thesis considers the problem of detecting occlusions in automobile parts on a moving assembly line in an automotive manufacturing plant. This work builds on the existing ``Visual Inspector\u27\u27 (VI) system developed as a joint research project between Clemson University and the BMW Spartanburg manufacturing plant. The goal is to develop a method that can successfully detect occlusions in real-time. VI is a detector and classifier system that uses video cameras to determine the correct installation of a part in the assembly line. In the current version of VI, an occluded part is flagged simply as `not OK\u27 - as if the part were not installed at all. The new algorithm developed aims to extend the functionality of VI to correctly identify occlusions - i.e., flag an obscured, but correctly-installed part as `occluded\u27 rather than as `not OK\u27. In this thesis, we provide a background of the current VI system deployed at the manufacturing plant. We then discuss the design of an algorithm that recognizes occlusions. Details of tests conducted to verify the correctness of the design, as well as the results of the tests run on real-world data from the plant are presented. Finally, we discuss the possible enhancements to this algorithm as part of future work

Exploring Possibilties for a Right against Destruction for Architects

The courts and legal frameworks across the globe have not been unanimous as to whether the right against destruction should be a moral right or not for artists in general and for architects in particular. Both common law and civil law countries have been non-committal and lack uniformity in their approach in this regard. The right against destruction has been distinguished from other rights on the premise that there is no loss/detriment caused to the artist by the destruction of the creation. Despite its beneficent presence in the Copyright Act, 1957 the recent denial of moral rights against destruction to architects in the buildings envisioned and realised by them by the Delhi High Court needs a sound diagnosis and correction as it could have a cascading effect. In this, it deviates from a former ruling of the same (Delhi high court) court without making a substantial reference to it. It raises the issue of whether the basis for anti-destructive sentiment can be placed on the plank of public interest in the preservation of artistic works rather than on personality rights upon which the right to integrity is anchored. An assessment of these contexts will be useful to identify the limits on the right to destroy property particularly intellectual property in architecture

Effect of speed limit increase on crash rate on rural two-lane highways in Louisiana

Though the rural two lane roads are the low volume-less traveled roads, the majority of the crashes occur on these roads and the high speed of motor vehicles on these roads is suspected to be one of the main causes for this. This study focused on the development of a methodology to study the impact of a speed limit increase on the crash rate on the rural two lane roads in Louisiana. The Louisiana crash database obtained from the Louisiana Department of Transportation (LADOTD) was used to carry out the analysis. The analysis consisted of the comparison of crash rates of different severity and crash types before and after a speed limit change on rural road sections with same crash type. The comparison was done statistically using a single-tailed paired t-test on each of the homogeneous data groups established using the SPSS add-in, Answer Tree. Answer Tree Analysis ensured that the homogeneous groups established were controlled for the several factors contributing to high crash rates so that the effect of speed limit change alone could be captured, keeping the other factors unchanged within each homogeneous group. The roadway sections were divided into speed limit change and no speed change sections and the crash trends were observed and tested for significance in the no speed limit change sections. The speed limit change group was divided into before and after speed change sections and the after speed change crash rate values were adjusted for any significant trend in the corresponding cases. These final before and after crash rate values adjusted for the trend were compared statistically to test the null hypothesis that crash rate does not increase with speed limit increase, at 5% level of significance. Based on the results, the null hypothesis was rejected for 6 out of the 39 cases while we failed to reject the null hypothesis for the rest of the cases thus indicating that for these cases, we do not have sufficient evidence to say that the crash rate increased with a speed limit increase

A History of the Future: Time-Travel, Technology, Dystopia, and Postcolonial Anxiety in Vandana Singh’s “Delhi”

The paper examines postcolonial concerns arising in and through the science fiction, “Delhi,” by Vandana Singh as the author consciously deviates from generic conventions of the structures of Western science fiction. We argue that the protagonist in “Delhi” could be viewed as a postcolonial subject experiencing alienation and powerlessness. The character‟s postcolonial subjectivity is traced through Singh‟s manipulations of western science fiction tropes vis-à-vis time-travel, technology, dystopia, and narrative techniques. Using „abrogation‟ and „appropriation‟ (Ashcroft, Griffiths & Tiffin, 1989), and Ricoeur‟s Time and Narrative (1988), the paper analyses how postcolonial elements are foregrounded. It also examines the larger implications of engaging in a postcolonial reading of a science fiction text produced from a technologically developing Indian context

Pharmaceutico-Analytical Study of Agnikumara Rasa - A Kupipakwa Kalpana

Agnikumara Rasa is a Sagandha, Sagni, Kantastha Bahirdhuma Kupipakwa Rasayana mentioned in Rasakamadhenu under Sangrahani Chikitsa Adhikara. It is prepared under Kramagni Tapa for 18 hours as per classics. The core ingredients are Shuddha Parada, Shuddha Gandhaka, Shuddha Vatsanabha and Hamsapadi Swarasa. It is indicated in conditions like Sannipata Kasa, Shwasa, Kshaya, Panduroga and Mandagni. Even though a total of 50 formulations have been explained in classics under the name of Agnikumara Rasa, no research work has been done till date on this particular yoga explained in Rasakamadhenu