SafeNet: The Unreasonable Effectiveness of Ensembles in Private Collaborative Learning

Secure multiparty computation (MPC) has been proposed to allow multiple mutually distrustful data owners to jointly train machine learning (ML) models on their combined data. However, by design, MPC protocols faithfully compute the training functionality, which the adversarial ML community has shown to leak private information and can be tampered with in poisoning attacks. In this work, we argue that model ensembles, implemented in our framework called SafeNet, are a highly MPC-amenable way to avoid many adversarial ML attacks. The natural partitioning of data amongst owners in MPC training allows this approach to be highly scalable at training time, provide provable protection from poisoning attacks, and provably defense against a number of privacy attacks. We demonstrate SafeNet's efficiency, accuracy, and resilience to poisoning on several machine learning datasets and models trained in end-to-end and transfer learning scenarios. For instance, SafeNet reduces backdoor attack success significantly, while achieving $39\times$ faster training and $36 \times$ less communication than the four-party MPC framework of Dalskov et al. Our experiments show that ensembling retains these benefits even in many non-iid settings. The simplicity, cheap setup, and robustness properties of ensembling make it a strong first choice for training ML models privately in MPC

SNAP: Efficient Extraction of Private Properties with Poisoning

Property inference attacks allow an adversary to extract global properties of the training dataset from a machine learning model. Such attacks have privacy implications for data owners sharing their datasets to train machine learning models. Several existing approaches for property inference attacks against deep neural networks have been proposed, but they all rely on the attacker training a large number of shadow models, which induces a large computational overhead. In this paper, we consider the setting of property inference attacks in which the attacker can poison a subset of the training dataset and query the trained target model. Motivated by our theoretical analysis of model confidences under poisoning, we design an efficient property inference attack, SNAP, which obtains higher attack success and requires lower amounts of poisoning than the state-of-the-art poisoning-based property inference attack by Mahloujifar et al. For example, on the Census dataset, SNAP achieves 34% higher success rate than Mahloujifar et al. while being 56.5x faster. We also extend our attack to infer whether a certain property was present at all during training and estimate the exact proportion of a property of interest efficiently. We evaluate our attack on several properties of varying proportions from four datasets and demonstrate SNAP's generality and effectiveness. An open-source implementation of SNAP can be found at https://github.com/johnmath/snap-sp23.Comment: 28 pages, 16 figure

The Effects of Protein Kinase C Beta II Peptide Modulation on Superoxide Release in Rat Polymorphonuclear Leukocytes

Phorbol 12-myristate 13-acetate (PMA; a diacylglycerol mimetic) is known to augment polymorphonuclear leukocyte (PMN) superoxide (SO) release via protein kinase C (PKC) activation. However, the role of PKC beta II (βII) mediating this response is not known. It’s known that myristic acid (myr-) conjugation facilitates intracellular delivery of the cargo sequence, and that putative PKCβII activator and inhibitor peptides work by augmenting or attenuating PKCβII translocation to cell membrane substrates (e.g. NOX-2). Therefore, we hypothesize that myr- conjugated PKCβII peptide-activator (N-myr-SVEIWD; myr-PKCβ+) would increase PMA-induced rat PMN SO release, whereas, myr-PKCβII peptide-inhibitor (N-myr-SLNPEWNET; myr-PKCβ-) would attenuate this response compared to non-drug treated controls. Rat PMNs (5x106) were incubated for 15min at 370C in the presence/absence of myr-PKCβ+/- (20 μM) or SO dismutase (SOD;10μg/mL; n=8) as positive control. PMA (100nM) induced PMN SO release was measured spectrophotometrically at 550nm via reduction of ferricytochrome c for 390 sec. PMN SO release increased absorbance to 0.39±0.04 in non-drug treated controls (n=28), and 0.49±0.05 in myr-PKCβ+(n=16). This response was significantly increased from 180 seconds to 240 seconds (p\u3c0.05). By contrast, myr-PKCβ- (0.26±0.03; n=14) significantly attenuated PMA-induced SO release compared to non-drug controls and myr-PKCβ+ (p\u3c0.05). SOD-treated samples showed \u3e90% reduction of PMA-induced SO release and was significantly different from all groups (p\u3c0.01). Cell viability ranged between 94± to 98±2% in all groups as determined by 0.2% trypan blue exclusion. Preliminary results suggest that myr-PKCβ- significantly attenuates PMA-induced SO release, whereas myr-PKCβ+ significantly augments PMA-induced SO release, albeit transiently. Additional dose response and western blot experiments are planned with myr-PKCβ+/- in PMA-induced PMN SO release assays. This research was supported by the Department of Bio-Medical Sciences and the Division of Research at PCOM and by Young Therapeutics, LLC

Ballistic magnetoresistance in nickel single-atom conductors

Large ballistic magnetoresistance (BMR) has been measured in Ni single-atom conductors electrodeposited between microfabricated thin films. These measurements irrefutably eliminate any magnetostriction related artifacts in the BMR effect.Comment: 12 pages, 3 Figure

Protein Kinase C Beta II Peptide Inhibitor Elicits Robust Effects on Attenuating Myocardial Ischemia/Reperfusion Injury

Reperfusion injury contributes to myocardial tissue damage following a heart attack partly due to the generation of reactive oxygen species (ROS) upon cardio-angioplasty. Protein kinase C beta II (PKCβII) inhibition during reperfusion with peptide inhibitor (N-myr-SLNPEWNET; PKCβII-) decreases ROS release and leukocyte infiltration in rat hind-limb and myocardial ischemia/reperfusion (I/R) studies, respectively. However, the role of activating PKCβII during reperfusion has not been previously determined. In this study, we hypothesize that myristoylated (myr)-PKCβII- will decrease infarct size and improve post-reperfused cardiac function compared to untreated controls, whereas PKCβII peptide activator (N-myr-SVEIWD; myr-PKCβII+) will show no improvement compared to control. Myristoylation of PKCβII peptides facilitate their entry into the cell in order to affect PKCβII activity by either augmenting or attenuating its translocation to cell membrane proteins, such as NOX-2. Isolated perfused rat hearts were subjected to global I(30min)/R(50min) and infused with myr-PKCβII+ (20μM; n=9), myr-PKCβII- (20µM; n=8), or plasma (control; n=9) at reperfusion. Hearts were frozen (-20oC), sectioned and stained using 1% triphenyltetrazolium chloride to differentiate necrotic tissue. The measurement of Left ventricular (LV) cardiac function was determined using a pressure transducer and infarct size was calculated as percent dead tissue vs. total heart tissue weight. Myr-PKCβII- significantly improved LV end-diastolic pressure 37±7 mmHg compared to control (58±5; p\u3c0.01) and myr-PKCβII+ (58±4; p\u3c0.01). Myr-PKCβII- significantly reduced infarct size to 14±3% compared to control (26±5%; p\u3c0.01), while myr-PKCβII+ (25±3%) showed no difference. The data indicate that myr-PKCβII- may be a putative treatment to reduce myocardial reperfusion injury when given to heart attack patients during cardio-angioplasty. Future studies are planned to determine infarct size by Image J analysis

Speed breeding is a powerful tool to accelerate crop research and breeding

The growing human population and a changing environment have raised significant concern for global food security, with the current improvement rate of several important crops inadequate to meet future demand1. This slow improvement rate is attributed partly to the long generation times of crop plants. Here, we present a method called ‘speed breeding’, which greatly shortens generation time and accelerates breeding and research programmes. Speed breeding can be used to achieve up to 6 generations per year for spring wheat (Triticum aestivum), durum wheat (T. durum), barley (Hordeum vulgare), chickpea (Cicer arietinum) and pea (Pisum sativum), and 4 generations for canola (Brassica napus), instead of 2–3 under normal glasshouse conditions. We demonstrate that speed breeding in fully enclosed, controlled-environment growth chambers can accelerate plant development for research purposes, including phenotyping of adult plant traits, mutant studies and transformation. The use of supplemental lighting in a glasshouse environment allows rapid generation cycling through single seed descent (SSD) and potential for adaptation to larger-scale crop improvement programs. Cost saving through light-emitting diode (LED) supplemental lighting is also outlined. We envisage great potential for integrating speed breeding with other modern crop breeding technologies, including high-throughput genotyping, genome editing and genomic selection, accelerating the rate of crop improvement

Fast-transient Searches in Real Time with ZTFReST: Identification of Three Optically Discovered Gamma-Ray Burst Afterglows and New Constraints on the Kilonova Rate

The most common way to discover extragalactic fast transients, which fade within a few nights in the optical, is via follow-up of gamma-ray burst and gravitational-wave triggers. However, wide-field surveys have the potential to identify rapidly fading transients independently of such external triggers. The volumetric survey speed of the Zwicky Transient Facility (ZTF) makes it sensitive to objects as faint and fast fading as kilonovae, the optical counterparts to binary neutron star mergers, out to almost 200 Mpc. We introduce an open-source software infrastructure, the ZTF REaltime Search and Triggering, ZTFReST, designed to identify kilonovae and fast transients in ZTF data. Using the ZTF alert stream combined with forced point-spread-function photometry, we have implemented automated candidate ranking based on their photometric evolution and fitting to kilonova models. Automated triggering, with a human in the loop for monitoring, of follow-up systems has also been implemented. In 13 months of science validation, we found several extragalactic fast transients independently of any external trigger, including two supernovae with post-shock cooling emission, two known afterglows with an associated gamma-ray burst (ZTF20abbiixp, ZTF20abwysqy), two known afterglows without any known gamma-ray counterpart (ZTF20aajnksq, ZTF21aaeyldq), and three new fast-declining sources (ZTF20abtxwfx, ZTF20acozryr, ZTF21aagwbjr) that are likely associated with GRB200817A, GRB201103B, and GRB210204A. However, we have not found any objects that appear to be kilonovae. We constrain the rate of GW170817-like kilonovae to R < 900 Gpc-3 yr-1 (95% confidence). A framework such as ZTFReST could become a prime tool for kilonova and fast-transient discovery with the Vera Rubin Observatory