Robust Backdoor Detection for Deep Learning via Topological Evolution Dynamics

A backdoor attack in deep learning inserts a hidden backdoor in the model to trigger malicious behavior upon specific input patterns. Existing detection approaches assume a metric space (for either the original inputs or their latent representations) in which normal samples and malicious samples are separable. We show that this assumption has a severe limitation by introducing a novel SSDT (Source-Specific and Dynamic-Triggers) backdoor, which obscures the difference between normal samples and malicious samples. To overcome this limitation, we move beyond looking for a perfect metric space that would work for different deep-learning models, and instead resort to more robust topological constructs. We propose TED (Topological Evolution Dynamics) as a model-agnostic basis for robust backdoor detection. The main idea of TED is to view a deep-learning model as a dynamical system that evolves inputs to outputs. In such a dynamical system, a benign input follows a natural evolution trajectory similar to other benign inputs. In contrast, a malicious sample displays a distinct trajectory, since it starts close to benign samples but eventually shifts towards the neighborhood of attacker-specified target samples to activate the backdoor. Extensive evaluations are conducted on vision and natural language datasets across different network architectures. The results demonstrate that TED not only achieves a high detection rate, but also significantly outperforms existing state-of-the-art detection approaches, particularly in addressing the sophisticated SSDT attack. The code to reproduce the results is made public on GitHub.Comment: 18 pages. To appear in IEEE Symposium on Security and Privacy 202

Early-onset convulsive seizures induced by brain hypoxia-ischemia in aging mice: effects of anticonvulsive treatments

Sherpa Romeo green journal. Open access article. Creative Commons Attribution License applies.Aging is associated with an increased risk of seizures/epilepsy. Stroke(ischemic or hemorrhagic) and cardiac arrest related brain injury are two major causative factors for seizure development in this patient population. With either etiology, seizures area poor prognostic factor. In spite of this, the underlying pathophysiology of seizure development is not well understood. In addition, a standardized treatment regimen with anticonvulsants and outcome assessments following treatment has yet to be established for these post-ischemic seizures. Previous studies have modeled post-ischemic seizures in adult rodents, but similar studies in aging/aged animals, a group that mirrors a higher risk elderly population, remain sparse. Our study therefore aimed to investigate early-onset seizures in aging animals using a hypoxia-ischemia (HI) model. Male C57 black mice18-20-month-old underwent a unilateral occlusion of the common carotid artery followed by a systemic hypoxic episode (8% O2 for 30 min). Early-onset seizures were detected using combined behavioral and electroencephalographic (EEG) monitoring. Brain injury was assessed histologically at different times post HI. Convulsive seizures were observed in 65% of aging mice post-HI but not in control aging mice following either sham surgery or hypoxiaalone. These seizures typically occurred within hours of HI and behaviorally consisted of jumping, fast running, barrel-rolling, and/or falling (loss of the righting reflex) with limb spasms. No evident discharges during any convulsive seizures were seen on cortical-hippocampal EEG recordings. Seizure development was closely associated with acute mortality and severe brain injury on brain histological analysis. Intra-peritoneal injections of lorazepam and fosphenytoin suppressed seizures and improved survival but only when applied prior to seizure onset and not after. These findings together suggest that seizures are a major contributing factor to acute mortality in aging mice following severe brain ischemia and that early anticonvulsive treatment may prevent seizure genesis and improve overall outcomes.Ye

Alterations in brain structure and function associated with pediatric growth hormone deficiency: A multi-modal magnetic resonance imaging study

IntroductionPediatric growth hormone deficiency (GHD) is a disease resulting from impaired growth hormone/insulin-like growth factor-1 (IGF-1) axis but the effects of GHD on children’s cognitive function, brain structure and brain function were not yet fully illustrated.MethodsFull Wechsler Intelligence Scales for Children, structural imaging, diffusion tensor imaging, and resting-state functional magnetic resonance imaging were assessed in 11 children with GHD and 10 matched healthy controls.Results(1) The GHD group showed moderate cognitive impairment, and a positive correlation existed between IGF-1 levels and cognitive indices. (2) Mean diffusivity was significantly increased in both corticospinal tracts in GHD group. (3) There were significant positive correlations between IGF-1 levels and volume metrics of left thalamus, left pallidum and right putamen but a negative correlation between IGF-1 levels and cortical thickness of the occipital lobe. And IGF-1 levels negatively correlated with fractional anisotropy in the superior longitudinal fasciculus and right corticospinal tract. (4) Regional homogeneity (ReHo) in the left hippocampus/parahippocampal gyrus was negatively correlated with IGF-1 levels; the amplitude of low-frequency fluctuation (ALFF) and ReHo in the paracentral lobe, postcentral gyrus and precentral gyrus were also negatively correlated with IGF-1 levels, in which region ALFF fully mediates the effect of IGF-1 on working memory index.ConclusionMultiple subcortical, cortical structures, and regional neural activities might be influenced by serum IGF-1 levels. Thereinto, ALFF in the paracentral lobe, postcentral gyrus and precentral gyrus fully mediates the effect of IGF-1 on the working memory index

Etiologic Diagnosis of Lower Respiratory Tract Bacterial Infections Using Sputum Samples and Quantitative Loop-Mediated Isothermal Amplification

Etiologic diagnoses of lower respiratory tract infections (LRTI) have been relying primarily on bacterial cultures that often fail to return useful results in time. Although DNA-based assays are more sensitive than bacterial cultures in detecting pathogens, the molecular results are often inconsistent and challenged by doubts on false positives, such as those due to system- and environment-derived contaminations. Here we report a nationwide cohort study on 2986 suspected LRTI patients across P. R. China. We compared the performance of a DNA-based assay qLAMP (quantitative Loop-mediated isothermal AMPlification) with that of standard bacterial cultures in detecting a panel of eight common respiratory bacterial pathogens from sputum samples. Our qLAMP assay detects the panel of pathogens in 1047(69.28%) patients from 1533 qualified patients at the end. We found that the bacterial titer quantified based on qLAMP is a predictor of probability that the bacterium in the sample can be detected in culture assay. The relatedness of the two assays fits a logistic regression curve. We used a piecewise linear function to define breakpoints where latent pathogen abruptly change its competitive relationship with others in the panel. These breakpoints, where pathogens start to propagate abnormally, are used as cutoffs to eliminate the influence of contaminations from normal flora. With help of the cutoffs derived from statistical analysis, we are able to identify causative pathogens in 750 (48.92%) patients from qualified patients. In conclusion, qLAMP is a reliable method in quantifying bacterial titer. Despite the fact that there are always latent bacteria contaminated in sputum samples, we can identify causative pathogens based on cutoffs derived from statistical analysis of competitive relationship

Interaction of Mesoporous Silica Nanoparticles with Human Red Blood Cell Membranes: Size and Surface Effects

The interactions of mesoporous silica nanoparticles (MSNs) of different particle sizes and surface properties with human red blood cell (RBC) membranes were investigated by membrane filtration, flow cytometry, and various microscopic techniques. Small MCM-41-type MSNs (∼100 nm) were found to adsorb to the surface of RBCs without disturbing the membrane or morphology. In contrast, adsorption of large SBA-15-type MSNs (∼600 nm) to RBCs induced a strong local membrane deformation leading to spiculation of RBCs, internalization of the particles, and eventual hemolysis. In addition, the relationship between the degree of MSN surface functionalization and the degree of its interaction with RBC, as well as the effect of RBC−MSN interaction on cellular deformability, were investigated. The results presented here provide a better understanding of the mechanisms of RBC−MSN interaction and the hemolytic activity of MSNs and will assist in the rational design of hemocompatible MSNs for intravenous drug delivery and in vivo imaging