Robustness Verification of Support Vector Machines

We study the problem of formally verifying the robustness to adversarial examples of support vector machines (SVMs), a major machine learning model for classification and regression tasks. Following a recent stream of works on formal robustness verification of (deep) neural networks, our approach relies on a sound abstract version of a given SVM classifier to be used for checking its robustness. This methodology is parametric on a given numerical abstraction of real values and, analogously to the case of neural networks, needs neither abstract least upper bounds nor widening operators on this abstraction. The standard interval domain provides a simple instantiation of our abstraction technique, which is enhanced with the domain of reduced affine forms, which is an efficient abstraction of the zonotope abstract domain. This robustness verification technique has been fully implemented and experimentally evaluated on SVMs based on linear and nonlinear (polynomial and radial basis function) kernels, which have been trained on the popular MNIST dataset of images and on the recent and more challenging Fashion-MNIST dataset. The experimental results of our prototype SVM robustness verifier appear to be encouraging: this automated verification is fast, scalable and shows significantly high percentages of provable robustness on the test set of MNIST, in particular compared to the analogous provable robustness of neural networks

The PER model of abstract non-interference

Abstract. In this paper, we study the relationship between two models of secure information flow: the PER model (which uses equivalence relations) and the abstract non-interference model (which uses upper closure operators). We embed the lattice of equivalence relations into the lattice of closures, re-interpreting abstract non-interference over the lattice of equivalence relations. For narrow abstract non-interference, we show non-interference it is strictly less general. The relational presentation of abstract non-interference leads to a simplified construction of the most concrete harmless attacker. Moreover, the PER model of abstract noninterference allows us to derive unconstrained attacker models, which do not necessarily either observe all public information or ignore all private information. Finally, we show how abstract domain completeness can be used for enforcing the PER model of abstract non-interference

Adjunctive Brivaracetam in Focal Epilepsy: Real-World Evidence from the BRIVAracetam add-on First Italian netwoRk STudy (BRIVAFIRST)

Background: In randomized controlled trials, add-on brivaracetam (BRV) reduced seizure frequency in patients with drug-resistant focal epilepsy. Studies performed in a naturalistic setting are a useful complement to characterize the drug profile. Objective: This multicentre study assessed the effectiveness and tolerability of adjunctive BRV in a large population of patients with focal epilepsy in the context of real-world clinical practice. Methods: The BRIVAFIRST (BRIVAracetam add-on First Italian netwoRk STudy) was a retrospective, multicentre study including adult patients prescribed adjunctive BRV. Patients with focal epilepsy and 12-month follow-up were considered. Main outcomes included the rates of seizure\u2010freedom, seizure response ( 65 50% reduction in baseline seizure frequency), and treatment discontinuation. The incidence of adverse events (AEs) was also considered. Analyses by levetiracetam (LEV) status and concomitant use of strong enzyme-inducing antiseizure medications (EiASMs) and sodium channel blockers (SCBs) were performed. Results: A total of 1029 patients with a median age of 45 years (33\u201356) was included. At 12 months, 169 (16.4%) patients were seizure-free and 383 (37.2%) were seizure responders. The rate of seizure freedom was 22.3% in LEV-naive patients, 7.1% in patients with prior LEV use and discontinuation due to insufficient efficacy, and 31.2% in patients with prior LEV use and discontinuation due to AEs (p < 0.001); the corresponding values for 65 50% seizure frequency reduction were 47.9%, 29.7%, and 42.8% (p < 0.001). There were no statistically significant differences in seizure freedom and seizure response rates by use of strong EiASMs. The rates of seizure freedom (20.0% vs. 16.6%; p = 0.341) and seizure response (39.7% vs. 26.9%; p = 0.006) were higher in patients receiving SCBs than those not receiving SCBs; 265 (25.8%) patients discontinued BRV. AEs were reported by 30.1% of patients, and were less common in patients treated with BRV and concomitant SCBs than those not treated with SCBs (28.9% vs. 39.8%; p = 0.017). Conclusion: The BRIVAFIRST provided real-world evidence on the effectiveness of BRV in patients with focal epilepsy irrespective of LEV history and concomitant ASMs, and suggested favourable therapeutic combinations

Mesenchymal-epithelial signalling in tumour microenvironment: role of high-mobility group Box 1.

Glucose deprivation, hypoxia and acidosis are characteristic features of the central core of most solid tumours. Myofibroblasts are stromal cells present in many such solid tumours, including those of the colon, and are known to be involved in all stages of tumour progression. HMGB1 is a nuclear protein with an important role in nucleosome stabilisation and gene transcription; it is also released from immune cells and is involved in the inflammatory process. We report that the microenvironmental condition of glucose deprivation is responsible for the active release of HMGB1 from various types of cancer cell lines (HT-29, MCF-7 and A549) under normoxic conditions. Recombinant HMGB1 (10 ng/ml) triggered proliferation in myofibroblast cells via activation of PI3K and MEK1/2. Conditioned medium collected from glucose-deprived HT-29 colon cancer cells stimulated the migration and invasion of colonic myofibroblasts, and these processes were significantly inhibited by immunoneutralising antibodies to HMGB1, RAGE and TLR4, together with specific inhibitors of PI3K and MEK1/2. Our data suggest that HMGB1 released from cancer cells under glucose deprivation is involved in stimulating colonic myofibroblast migration and invasion and that this occurs through the activation of RAGE and TLR4, resulting in the activation of the MAPK and PI3K signalling pathways. Thus, HMGB1 might be released by cancer cells in areas of low glucose in solid tumours with the resulting activation of myofibroblasts and is a potential therapeutic target to inhibit solid tumour growth

Verifying Bounded Subset-Closed Hyperproperties

Hyperproperties are quickly becoming very popular in the context of systems security, due to their expressive power. They differ from classic trace properties since they are represented by sets of sets of executions instead of sets of executions. This allows us, for instance, to capture information flow security specifications, which cannot be expressed as trace properties, namely as predicates over single executions. In this work, we reason about how it is possible to move standard abstract interpretation-based static analysis methods, designed for trace properties, towards the verification of hyperproperties. In particular, we focus on the verification of bounded subset-closed hyperproperties which are easier to verify than generic hyperproperties. It turns out that a lot of interesting specifications (e.g., Non-Interference) lie in this category

An O(mlog⁡n)O(m\log n) Algorithm for Stuttering Equivalence and Branching Bisimulation

We provide a new algorithm to determine stuttering equivalence with time complexity $O(m \log n)$, where $n$ is the number of states and $m$ is the number of transitions of a Kripke structure. This algorithm can also be used to determine branching bisimulation in $O(m(\log |\mathit{Act}|+ \log n))$ time where $\mathit{Act}$ is the set of actions in a labelled transition system. Theoretically, our algorithm substantially improves upon existing algorithms which all have time complexity $O(m n)$ at best. Moreover, it has better or equal space complexity. Practical results confirm these findings showing that our algorithm can outperform existing algorithms with orders of magnitude, especially when the sizes of the Kripke structures are large. The importance of our algorithm stretches far beyond stuttering equivalence and branching bisimulation. The known $O(m n)$ algorithms were already far more efficient (both in space and time) than most other algorithms to determine behavioural equivalences (including weak bisimulation) and therefore it was often used as an essential preprocessing step. This new algorithm makes this use of stuttering equivalence and branching bisimulation even more attractive.Comment: A shortened version of this technical report has been published in the proceedings of TACAS 201

Sustained seizure freedom with adjunctive brivaracetam in patients with focal onset seizures

The maintenance of seizure control over time is a clinical priority in patients with epilepsy. The aim of this study was to assess the sustained seizure frequency reduction with adjunctive brivaracetam (BRV) in real-world practice. Patients with focal epilepsy prescribed add-on BRV were identified. Study outcomes included sustained seizure freedom and sustained seizure response, defined as a 100% and a ≥50% reduction in baseline seizure frequency that continued without interruption and without BRV withdrawal through the 12-month follow-up. Nine hundred ninety-four patients with a median age of 45 (interquartile range = 32–56) years were included. During the 1-year study period, sustained seizure freedom was achieved by 142 (14.3%) patients, of whom 72 (50.7%) were seizure-free from Day 1 of BRV treatment. Sustained seizure freedom was maintained for ≥6, ≥9, and 12 months by 14.3%, 11.9%, and 7.2% of patients from the study cohort. Sustained seizure response was reached by 383 (38.5%) patients; 236 of 383 (61.6%) achieved sustained ≥50% reduction in seizure frequency by Day 1, 94 of 383 (24.5%) by Month 4, and 53 of 383 (13.8%) by Month 7 up to Month 12. Adjunctive BRV was associated with sustained seizure frequency reduction from the first day of treatment in a subset of patients with uncontrolled focal epilepsy

Adjunctive Brivaracetam in Focal Epilepsy: Real-World Evidence from the BRIVAracetam add-on First Italian netwoRk STudy (BRIVAFIRST)

Background: In randomized controlled trials, add-on brivaracetam (BRV) reduced seizure frequency in patients with drug-resistant focal epilepsy. Studies performed in a naturalistic setting are a useful complement to characterize the drug profile. Objective: This multicentre study assessed the effectiveness and tolerability of adjunctive BRV in a large population of patients with focal epilepsy in the context of real-world clinical practice. Methods: The BRIVAFIRST (BRIVAracetam add-on First Italian netwoRk STudy) was a retrospective, multicentre study including adult patients prescribed adjunctive BRV. Patients with focal epilepsy and 12-month follow-up were considered. Main outcomes included the rates of seizure‐freedom, seizure response (≥ 50% reduction in baseline seizure frequency), and treatment discontinuation. The incidence of adverse events (AEs) was also considered. Analyses by levetiracetam (LEV) status and concomitant use of strong enzyme-inducing antiseizure medications (EiASMs) and sodium channel blockers (SCBs) were performed. Results: A total of 1029 patients with a median age of 45 years (33–56) was included. At 12 months, 169 (16.4%) patients were seizure-free and 383 (37.2%) were seizure responders. The rate of seizure freedom was 22.3% in LEV-naive patients, 7.1% in patients with prior LEV use and discontinuation due to insufficient efficacy, and 31.2% in patients with prior LEV use and discontinuation due to AEs (p < 0.001); the corresponding values for ≥ 50% seizure frequency reduction were 47.9%, 29.7%, and 42.8% (p < 0.001). There were no statistically significant differences in seizure freedom and seizure response rates by use of strong EiASMs. The rates of seizure freedom (20.0% vs. 16.6%; p = 0.341) and seizure response (39.7% vs. 26.9%; p = 0.006) were higher in patients receiving SCBs than those not receiving SCBs; 265 (25.8%) patients discontinued BRV. AEs were reported by 30.1% of patients, and were less common in patients treated with BRV and concomitant SCBs than those not treated with SCBs (28.9% vs. 39.8%; p = 0.017). Conclusion: The BRIVAFIRST provided real-world evidence on the effectiveness of BRV in patients with focal epilepsy irrespective of LEV history and concomitant ASMs, and suggested favourable therapeutic combinations