Adversarial Sample Detection for Deep Neural Network through Model Mutation Testing

Deep neural networks (DNN) have been shown to be useful in a wide range of applications. However, they are also known to be vulnerable to adversarial samples. By transforming a normal sample with some carefully crafted human imperceptible perturbations, even highly accurate DNN make wrong decisions. Multiple defense mechanisms have been proposed which aim to hinder the generation of such adversarial samples. However, a recent work show that most of them are ineffective. In this work, we propose an alternative approach to detect adversarial samples at runtime. Our main observation is that adversarial samples are much more sensitive than normal samples if we impose random mutations on the DNN. We thus first propose a measure of `sensitivity' and show empirically that normal samples and adversarial samples have distinguishable sensitivity. We then integrate statistical hypothesis testing and model mutation testing to check whether an input sample is likely to be normal or adversarial at runtime by measuring its sensitivity. We evaluated our approach on the MNIST and CIFAR10 datasets. The results show that our approach detects adversarial samples generated by state-of-the-art attacking methods efficiently and accurately.Comment: Accepted by ICSE 201

MicroRNA-194 inhibits epithelial to mesenchymal transition of endometrial cancer cells by targeting oncogene BMI-1

<p>Abstract</p> <p>Background</p> <p>Epithelial-mesenchymal transition (EMT) is the key process driving cancer metastasis. Oncogene/self renewal factor BMI-1 has been shown to induce EMT in cancer cells. Recent studies have implied that noncoding microRNAs (miRNAs) act as crucial modulators for EMT. The aims of this study was to determine the roles of BMI-1 in inducing EMT of endometrial cancer (EC) cells and the possible role of miRNA in controlling BMI-1 expression.</p> <p>Methods and results</p> <p>We evaluated the expression of BMI-1 gene in a panel of EC cell lines, and detected a strong association with invasive capability. Stable silencing of BMI-1 in invasive mesenchymal-type EC cells up-regulated the epithelial marker E-cadherin, down-regulated mesenchymal marker Vimentin, and significantly reduced cell invasion <it>in vitro</it>. Furthermore, we discovered that the expression of BMI-1 was suppressed by miR-194 via direct binding to the BMI-1 3'-untranslated region 3'-UTR). Ectopic expression of miR-194 in EC cells induced a mesenchymal to epithelial transition (MET) by restoring E-cadherin, reducing Vimentin expression, and inhibiting cell invasion <it>in vitro</it>. Moreover, BMI-1 knockdown inhibited <it>in vitro </it>EC cell proliferation and clone growth, correlated with either increased p16 expression or decreased expression of stem cell and chemoresistance markers (SOX-2, KLF4 and MRP-1).</p> <p>Conclusion</p> <p>These findings demonstrate the novel mechanism for BMI-1 in contributing to EC cell invasion and that repression of BMI-1 by miR-194 could have a therapeutic potential to suppress EC metastasis.</p

Correction : Control of PD-L1 expression by miR-140/142/340/383 and oncogenic activation of the OCT4-miR-18a pathway in cervical cancer.

This research was supported by a grant from the Department of Women’s Health Educational System, JSPS Grant-in-Aid for Scientific Research (C) (15K10697 and 16K11123) and the Science and Technology Planning Project of Guangdong Province, China (2014A020212124). We thank Dr. Zhujie Xu for experimental assistance. The authors declare that they have no conflict of interest.Peer reviewedPublisher PD

B7H3 As a Promoter of Metastasis and Promising Therapeutic Target

B7H3 (also known as CD276, an immune checkpoint molecule) is aberrantly overexpressed in many types of cancer, and such upregulation is generally associated with a poor clinical prognosis. Recent discoveries indicate a crucial role for B7H3 in promoting carcinogenesis and metastasis. This review will focus on the latest developments relating specifically to the oncogenic activity of B7H3 and will describe the upstream regulators and downstream effectors of B7H3 in cancer. Finally, we discuss the emerging roles of microRNAs (miRNAs) in inhibiting B7H3-mediated tumor promotion. Excellent recent studies have shed new light on the functions of B7H3 in cancer and identified B7H3 as a critical promoter of tumor cell proliferation, migration, invasion, epithelial-to-mesenchymal transition, cancer stemness, drug resistance, and the Warburg effect. Numerous miRNAs are reported to regulate the expression of B7H3. Our meta-analysis of miRNA database revealed that 17 common miRNAs potentially interact with B7H3 mRNA. The analysis of the TCGA ovarian cancer dataset indicated that low miR-187 and miR-489 expression was associated with poor prognosis. Future studies aimed at delineating the precise cellular and molecular mechanisms underpinning B7H3-mediated tumor promotion will provide further insights into the cell biology of tumor development. In addition, inhibition of B7H3 signaling, to be used alone or in combination with other treatments, will contribute to improvements in clinical practice and benefit cancer patients

Denervation as a Common Mechanism Underlying Different Pulmonary Vein Isolation Strategies for Paroxysmal Atrial Fibrillation: Evidenced by Heart Rate Variability after Ablation

Backgrounds. Segmental and circumferential pulmonary vein isolations (SPVI and CPVI) have been demonstrated to be effective therapies for paroxysmal atrial fibrillation (PAF). PVI is well established as the endpoint of different ablation techniques, whereas it may not completely account for the long-term success. Methods. 181 drug-refractory symptomatic PAF patients were referred for segmental or circumferential PVI (SPVI = 67; CPVI = 114). Heart rate variability (HRV) was assessed before and after the final ablation. Results. After following up for 62.23±12.75 months, patients underwent 1.41±0.68 procedures in average, and the success rates in SPVI and CPVI groups were comparable. 119 patients were free from AF recurrence (SPVI-S, n=43; CPVI-S, n=76). 56 patients had recurrent episodes (SPVI-R, n=21; CPVI-R, n=35). Either ablation technique decreased HRV significantly. Postablation SDNN and rMSSD were significantly lower in SPVI-S and CPVI-S subgroups than in SPVI-R and CPVI-R subgroups (SPVI-S versus SPVI-R: SDNN 91.8±32.6 versus 111.5±36.2 ms, rMSSD 47.4±32.3 versus 55.2±35.2 ms; CPVI-S versus CPVI-R: SDNN 83.0±35.6 versus 101.0±40.7 ms, rMSSD 41.1±22.9 versus 59.2±44.8 ms; all P<0.05). Attenuation of SDNN and rMSSD remained for 12 months in SPVI-S and CPVI-S subgroups, whereas it recovered earlier in SPVI-R and CPVI-R subgroups. Multivariate logistic regression analysis identified SDNN as the only predictor of long-term success. Conclusions. Beyond PVI, denervation may be a common mechanism underlying different ablation strategies for PAF