Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers

Malware classifiers are subject to training-time exploitation due to the need to regularly retrain using samples collected from the wild. Recent work has demonstrated the feasibility of backdoor attacks against malware classifiers, and yet the stealthiness of such attacks is not well understood. In this paper, we focus on Android malware classifiers and investigate backdoor attacks under the clean-label setting (i.e., attackers do not have complete control over the training process or the labeling of poisoned data). Empirically, we show that existing backdoor attacks against malware classifiers are still detectable by recent defenses such as MNTD. To improve stealthiness, we propose a new attack, Jigsaw Puzzle (JP), based on the key observation that malware authors have little to no incentive to protect any other authors' malware but their own. As such, Jigsaw Puzzle learns a trigger to complement the latent patterns of the malware author's samples, and activates the backdoor only when the trigger and the latent pattern are pieced together in a sample. We further focus on realizable triggers in the problem space (e.g., software code) using bytecode gadgets broadly harvested from benign software. Our evaluation confirms that Jigsaw Puzzle is effective as a backdoor, remains stealthy against state-of-the-art defenses, and is a threat in realistic settings that depart from reasoning about feature-space-only attacks. We conclude by exploring promising approaches to improve backdoor defenses

Is It Overkill? Analyzing Feature-Space Concept Drift in Malware Detectors

Concept drift is a major challenge faced by machine learning-based malware detectors when deployed in practice. While existing works have investigated methods to detect concept drift, it is not yet well understood regarding the main causes behind the drift. In this paper, we design experiments to empirically analyze the impact of feature-space drift (new features introduced by new samples) and compare it with data-space drift (data distribution shift over existing features). Surprisingly, we find that data-space drift is the dominating contributor to the model degradation over time while feature-space drift has little to no impact. This is consistently observed over both Android and PE malware detectors, with different feature types and feature engineering methods, across different settings. We further validate this observation with recent online learning based malware detectors that incrementally update the feature space. Our result indicates the possibility of handling concept drift without frequent feature updating, and we further discuss the open questions for future research

Measurement of Permanent Electric Dipole Moments of Charged Hadrons in Storage Rings

Permanent Electric Dipole Moments (EDMs) of elementary particles violate two fundamental symmetries: time reversal invariance (T) and parity (P). Assuming the CPT theorem this implies CP-violation. The CP-violation of the Standard Model is orders of magnitude too small to be observed experimentally in EDMs in the foreseeable future. It is also way too small to explain the asymmetry in abundance of matter and anti-matter in our universe. Hence, other mechanisms of CP violation outside the realm of the Standard Model are searched for and could result in measurable EDMs. Up to now most of the EDM measurements were done with neutral particles. With new techniques it is now possible to perform dedicated EDM experiments with charged hadrons at storage rings where polarized particles are exposed to an electric field. If an EDM exists the spin vector will experience a torque resulting in change of the original spin direction which can be determined with the help of a polarimeter. Although the principle of the measurement is simple, the smallness of the expected effect makes this a challenging experiment requiring new developments in various experimental areas. Complementary efforts to measure EDMs of proton, deuteron and light nuclei are pursued at Brookhaven National Laboratory and at Forschungszentrum Juelich with an ultimate goal to reach a sensitivity of 10^{-29} e cm.Comment: 8 pages, 2 figure

The Adaptive Cycle As a Lens for Service Learning – Community Engagement Partnerships

This paper deploys the adaptive cycle as a construct to understand the dynamics of community engagement and partnership building during an international service-learning project. A multi-disciplinary team of USA-based university students collaborated with a local community in Zambia to build two ventilated improved pit (VIP) latrines. Post-field project reflection challenged the ‘product-first’ view commonly held in service learning projects.  Time was a central point of post-field reflection. Through critical scrutiny, the team came to recognize that contextually sensitive relationship building had been essential in enabling community ownership of the project.  The construct of the adaptive cycle provided a crucial analytical tool for tracing the process through which partners from very different backgrounds achieved a sense of common purpose and opened the way for an understanding of community engagement as weaving a thread through the complex dynamics of partnership. The adaptive cycle may be useful in the preparation and implementation framework for other service learning projects emanating from institutions of higher education

Geometric-phase-induced false electric dipole moment signals for particles in traps

Theories are developed to evaluate Larmor frequency shifts, derived from geometric phases, in experiments to measure electric dipole moments (EDMs) of trapped, atoms, molecules and neutrons. A part of these shifts is proportional to the applied electric field and can be interpreted falsely as an electric dipole moment. A comparison is made between our theoretical predictions for these shifts and some results from our recent experiments, which shows agreement to within the experimental errors of 15 %. The comparison also demonstrates that some trapped particle EDM experiments have reached the sensitivity where stringent precautions are needed to minimise and control such false EDMs. Computer simulations of these processes are also described. They give good agreement with the analytical results and they extend the study by investigating the influence of varying surface reflection laws in the hard walled traps considered. They also explore the possibility to suppress such false EDMs by introducing collisions with buffer gas particles. Some analytic results for frequency shifts proportional to the square of the E-field are also given and there are results for the averaging of the B-field in the absence of an E-field

An Improved Experimental Limit on the Electric Dipole Moment of the Neutron

An experimental search for an electric-dipole moment (EDM) of the neutron has been carried out at the Institut Laue-Langevin (ILL), Grenoble. Spurious signals from magnetic-field fluctuations were reduced to insignificance by the use of a cohabiting atomic-mercury magnetometer. Systematic uncertainties, including geometric-phase-induced false EDMs, have been carefully studied. Two independent approaches to the analysis have been adopted. The overall results may be interpreted as an upper limit on the absolute value of the neutron EDM of |d_n| < 2.9 x 10^{-26} e cm (90% CL).Comment: 5 pages, 2 figures. The published PRL is slightly more terse (e.g. no section headings) than this version, due to space constraints. Note a small correction-to-a-correction led to an adjustment of the final limit from 3.0 to 2.9 E-26 e.cm compared to the first version of this preprin

Measurement of the neutron electric dipole moment by crystal diffraction

An experiment using a prototype setup to search for the neutron electric dipole moment by measuring spin-rotation in a non-centrosymmetric crystal (quartz) was carried out to investigate statistical sensitivity and systematic effects of the method. It has been demonstrated that the concept of the method works. The preliminary result of the experiment is $d_{\rm n}=(2.5\pm 6.5)\cdot 10^{-24}$ e$\cdot$cm. The experiment showed that an accuracy of $\sim 2.5\cdot 10^{-26}$ e$\cdot$cm can be obtained in 100 days data taking, using available quartz crystals and neutron beams.Comment: 13 pages, 4 figure

Kinetics of photoelectrochemical oxidation of methanol on hematite photoanodes

The kinetics of photoelectrochemical (PEC) oxidation of methanol, as a model organic substrate, on α-Fe2O3 photoanodes are studied using photoinduced absorption spectroscopy and transient photocurrent measurements. Methanol is oxidized on α-Fe2O3 to formaldehyde with near unity Faradaic efficiency. A rate law analysis under quasi-steady-state conditions of PEC methanol oxidation indicates that rate of reaction is second order in the density of surface holes on hematite and independent of the applied potential. Analogous data on anatase TiO2 photoanodes indicate similar second-order kinetics for methanol oxidation with a second-order rate constant 2 orders of magnitude higher than that on α-Fe2O3. Kinetic isotope effect studies determine that the rate constant for methanol oxidation on α-Fe2O3 is retarded ∼20-fold by H/D substitution. Employing these data, we propose a mechanism for methanol oxidation under 1 sun irradiation on these metal oxide surfaces and discuss the implications for the efficient PEC methanol oxidation to formaldehyde and concomitant hydrogen evolution

Gravitational depolarization of ultracold neutrons: comparison with data

We compare the expected effects of so-called gravitationally enhanced depolarization of ultracold neutrons to measurements carried out in a spin-precession chamber exposed to a variety of vertical magnetic-field gradients. In particular, we have investigated the dependence upon these field gradients of spin-depolarization rates and also of shifts in the measured neutron Larmor precession frequency. We find excellent qualitative agreement, with gravitationally enhanced depolarization accounting for several previously unexplained features in the data

Assessing stratospheric transport in the CMAM30 simulations using ACE-FTS measurements

Stratospheric transport in global circulation models and chemistry–climate models is an important component in simulating the recovery of the ozone layer as well as changes in the climate system. The Brewer–Dobson circulation is not well constrained by observations and further investigation is required to resolve uncertainties related to the mechanisms driving the circulation. This study has assessed the specified dynamics mode of the Canadian Middle Atmosphere Model (CMAM30) by comparing to the Atmospheric Chemistry Experiment Fourier transform spectrometer (ACE-FTS) profile measurements of CFC-11 (CCl3F), CFC-12 (CCl2F2), and N2O. In the CMAM30 specified dynamics simulation, the meteorological fields are nudged using the ERA-Interim reanalysis and a specified tracer was employed for each species, with hemispherically defined surface measurements used as the boundary condition. A comprehensive sampling technique along the line of sight of the ACE-FTS measurements has been utilized to allow for direct comparisons between the simulated and measured tracer concentrations. The model consistently overpredicts tracer concentrations of CFC-11, CFC-12, and N2O in the lower stratosphere, particularly in the northern hemispheric winter and spring seasons. The three mixing barriers investigated, including the polar vortex, the extratropical tropopause, and the tropical pipe, show that there are significant inconsistencies between the measurements and the simulations. In particular, the CMAM30 simulation underpredicts mixing efficiency in the tropical lower stratosphere during the June–July–August season