Privacy Risks of Securing Machine Learning Models against Adversarial Examples

The arms race between attacks and defenses for machine learning models has come to a forefront in recent years, in both the security community and the privacy community. However, one big limitation of previous research is that the security domain and the privacy domain have typically been considered separately. It is thus unclear whether the defense methods in one domain will have any unexpected impact on the other domain. In this paper, we take a step towards resolving this limitation by combining the two domains. In particular, we measure the success of membership inference attacks against six state-of-the-art defense methods that mitigate the risk of adversarial examples (i.e., evasion attacks). Membership inference attacks determine whether or not an individual data record has been part of a model's training set. The accuracy of such attacks reflects the information leakage of training algorithms about individual members of the training set. Adversarial defense methods against adversarial examples influence the model's decision boundaries such that model predictions remain unchanged for a small area around each input. However, this objective is optimized on training data. Thus, individual data records in the training set have a significant influence on robust models. This makes the models more vulnerable to inference attacks. To perform the membership inference attacks, we leverage the existing inference methods that exploit model predictions. We also propose two new inference methods that exploit structural properties of robust models on adversarially perturbed data. Our experimental evaluation demonstrates that compared with the natural training (undefended) approach, adversarial defense methods can indeed increase the target model's risk against membership inference attacks.Comment: ACM CCS 2019, code is available at https://github.com/inspire-group/privacy-vs-robustnes

Activity-Independent Prespecification of Synaptic Partners in the Visual Map of Drosophila

SummarySpecifying synaptic partners and regulating synaptic numbers are at least partly activity-dependent processes during visual map formation in all systems investigated to date [1–5]. In Drosophila, six photoreceptors that view the same point in visual space have to be sorted into synaptic modules called cartridges in order to form a visuotopically correct map [6, 7]. Synapse numbers per photoreceptor terminal and cartridge are both precisely regulated [8–10]. However, it is unknown whether an activity-dependent mechanism or a genetically encoded developmental program regulates synapse numbers. We performed a large-scale quantitative ultrastructural analysis of photoreceptor synapses in mutants affecting the generation of electrical potentials (norpA, trp;trpl), neurotransmitter release (hdc, syt), vesicle endocytosis (synj), the trafficking of specific guidance molecules during photoreceptor targeting (sec15), a specific guidance receptor required for visual map formation (Dlar), and 57 other novel synaptic mutants affecting 43 genes. Remarkably, in all these mutants, individual photoreceptors form the correct number of synapses per presynaptic terminal independently of cartridge composition. Hence, our data show that each photoreceptor forms a precise and constant number of afferent synapses independently of neuronal activity and partner accuracy. Our data suggest cell-autonomous control of synapse numbers as part of a developmental program of activity-independent steps that lead to a “hard-wired” visual map in the fly brain

Spatial contrast sensitivity in adolescents with autism spectrum disorders

Adolescents with autism spectrum disorders (ASD) and typically developing (TD) controls underwent a rigorous psychophysical assessment that measured contrast sensitivity to seven spatial frequencies (0.5-20 cycles/degree). A contrast sensitivity function (CSF) was then fitted for each participant, from which four measures were obtained: visual acuity, peak spatial frequency, peak contrast sensitivity, and contrast sensitivity at a low spatial frequency. There were no group differences on any of the four CSF measures, indicating no differential spatial frequency processing in ASD. Although it has been suggested that detail-oriented visual perception in individuals with ASD may be a result of differential sensitivities to low versus high spatial frequencies, the current study finds no evidence to support this hypothesis

Nivolumab in Advanced Hepatocellular Carcinoma: Safety Profile and Select Treatment-Related Adverse Events From the CheckMate 040 Study

Background. CheckMate 040 assessed the efficacy and safety of nivolumab in patients with advanced hepatocellular carcinoma (HCC). Understanding the safety profile of nivolumab is needed to support the management of treatment-related adverse events (TRAEs). This analysis assessed the safety of nivolumab monotherapy in the phase I/II, open-label CheckMate 040 study. Materials and Methods. Select TRAEs (sTRAEs; TRAEs with potential immunologic etiology requiring more frequent monitoring) occurring between first dose and 30 days after last dose were analyzed in patients in the dose-escalation and -expansion phases. Time to onset (TTO), time to resolution (TTR), and recurrence of sTRAEs were assessed, and the outcome of treatment with immune-modulating medication (IMM) was evaluated. Results. The analysis included 262 patients. The most common sTRAE was skin (35.5%), followed by gastrointestinal (14.5%) and hepatic (14.1%) events; the majority were grade 1/2, with 10.7% of patients experiencing grade 3/4 events. One patient had grade 5 pneumonitis. Median (range) TTO ranged from 3.6 (0.1–59.9) weeks for skin sTRAEs to 47.6 (47.1–48.0) weeks for renal sTRAEs. Overall, 68% of sTRAEs resolved, with median (range) TTR ranging from 3.7 (0.1–123.3+) weeks for gastrointestinal sTRAEs to 28.4 (0.1–79.1) weeks for endocrine sTRAEs. Most gastrointestinal and all hepatic events resolved with treatment in accordance with established toxicity management algorithms. In 57 patients (40%), sTRAEs were managed with IMM. Reoccurrence of sTRAEs was uncommon following rechallenge with nivolumab. Conclusion. Nivolumab demonstrated a manageable safety profile in this analysis of patients with advanced HCC. A majority of sTRAEs resolved with treatment

Multi-ancestry study of blood lipid levels identifies four loci interacting with physical activity.

Many genetic loci affect circulating lipid levels, but it remains unknown whether lifestyle factors, such as physical activity, modify these genetic effects. To identify lipid loci interacting with physical activity, we performed genome-wide analyses of circulating HDL cholesterol, LDL cholesterol, and triglyceride levels in up to 120,979 individuals of European, African, Asian, Hispanic, and Brazilian ancestry, with follow-up of suggestive associations in an additional 131,012 individuals. We find four loci, in/near CLASP1, LHX1, SNTA1, and CNTNAP2, that are associated with circulating lipid levels through interaction with physical activity; higher levels of physical activity enhance the HDL cholesterol-increasing effects of the CLASP1, LHX1, and SNTA1 loci and attenuate the LDL cholesterol-increasing effect of the CNTNAP2 locus. The CLASP1, LHX1, and SNTA1 regions harbor genes linked to muscle function and lipid metabolism. Our results elucidate the role of physical activity interactions in the genetic contribution to blood lipid levels

Dynamin I phosphorylation by GSK3 controls activity-dependent bulk endocytosis of synaptic vesicles.

Glycogen synthase kinase 3 (GSK3) is a critical enzyme in neuronal physiology; however, it is not yet known whether it has any specific role in presynaptic function. We found that GSK3 phosphorylates a residue on the large GTPase dynamin I (Ser-774) both in vitro and in primary rat neuronal cultures. This was dependent on prior phosphorylation of Ser-778 by cyclin-dependent kinase 5. Using both acute inhibition with pharmacological antagonists and silencing of expression with short hairpin RNA, we found that GSK3 was specifically required for activity-dependent bulk endocytosis (ADBE) but not clathrin-mediated endocytosis. Moreover we found that the specific phosphorylation of Ser-774 on dynamin I by GSK3 was both necessary and sufficient for ADBE. These results demonstrate a presynaptic role for GSK3 and they indicate that a protein kinase signaling cascade prepares synaptic vesicles for retrieval during elevated neuronal activity

Cell-Type Independent MYC Target Genes Reveal a Primordial Signature Involved in Biomass Accumulation

The functions of key oncogenic transcription factors independent of context have not been fully delineated despite our richer understanding of the genetic alterations in human cancers. The MYC oncogene, which produces the Myc transcription factor, is frequently altered in human cancer and is a major regulatory hub for many cancers. In this regard, we sought to unravel the primordial signature of Myc function by using high-throughput genomic approaches to identify the cell-type independent core Myc target gene signature. Using a model of human B lymphoma cells bearing inducible MYC, we identified a stringent set of direct Myc target genes via chromatin immunoprecipitation (ChIP), global nuclear run-on assay, and changes in mRNA levels. We also identified direct Myc targets in human embryonic stem cells (ESCs). We further document that a Myc core signature (MCS) set of target genes is shared in mouse and human ESCs as well as in four other human cancer cell types. Remarkably, the expression of the MCS correlates with MYC expression in a cell-type independent manner across 8,129 microarray samples, which include 312 cell and tissue types. Furthermore, the expression of the MCS is elevated in vivo in Eμ-Myc transgenic murine lymphoma cells as compared with premalignant or normal B lymphocytes. Expression of the MCS in human B cell lymphomas, acute leukemia, lung cancers or Ewing sarcomas has the highest correlation with MYC expression. Annotation of this gene signature reveals Myc's primordial function in RNA processing, ribosome biogenesis and biomass accumulation as its key roles in cancer and stem cells

Lack of effects of typical and atypical antipsychotics in DARPP-32 and NCS-1 levels in PC12 cells overexpressing NCS-1

<p>Abstract</p> <p>Background</p> <p>Schizophrenia is the major psychiatry disorder, which the exact cause remains unknown. However, it is well known that dopamine-mediated neurotransmission imbalance is associated with this pathology and the main target of antipsychotics is the dopamine receptor D₂. Recently, it was described alteration in levels of two dopamine signaling related proteins in schizophrenic prefrontal cortex (PFC): Neuronal Calcium Sensor-1 (NCS-1) and DARPP-32. NCS-1, which is upregulated in PFC of schizophrenics, inhibits D₂internalization. DARPP-32, which is decreased in PFC of schizophrenics, is a key downstream effector in transducing dopamine signaling. We previously demonstrated that antipsychotics do not change levels of both proteins in rat's brain. However, since NCS-1 and DARPP-32 levels are not altered in wild type rats, we treated wild type PC12 cells (PC12 WT) and PC12 cells stably overexpressing NCS-1 (PC12 Clone) with antipsychotics to investigate if NCS-1 upregulation modulates DARPP-32 expression in response to antipsychotics treatment.</p> <p>Results</p> <p>We chronically treated both PC12 WT and PC12 Clone cells with typical (Haloperidol) or atypical (Clozapine and Risperidone) antipsychotics for 14 days. Using western blot technique we observed that there is no change in NCS-1 and DARPP-32 protein levels in both PC12 WT and PC12 Clone cells after typical and atypical antipsychotic treatments.</p> <p>Conclusions</p> <p>Because we observed no alteration in NCS-1 and DARPP-32 levels in both PC12 WT and Clone cells treated with typical or atypical antipsychotics, we suggest that the alteration in levels of both proteins in schizophrenic's PFC is related to psychopathology but not with antipsychotic treatment.</p

Integrating 5-Hydroxymethylcytosine into the Epigenomic Landscape of Human Embryonic Stem Cells

Covalent modification of DNA distinguishes cellular identities and is crucial for regulating the pluripotency and differentiation of embryonic stem (ES) cells. The recent demonstration that 5-methylcytosine (5-mC) may be further modified to 5-hydroxymethylcytosine (5-hmC) in ES cells has revealed a novel regulatory paradigm to modulate the epigenetic landscape of pluripotency. To understand the role of 5-hmC in the epigenomic landscape of pluripotent cells, here we profile the genome-wide 5-hmC distribution and correlate it with the genomic profiles of 11 diverse histone modifications and six transcription factors in human ES cells. By integrating genomic 5-hmC signals with maps of histone enrichment, we link particular pluripotency-associated chromatin contexts with 5-hmC. Intriguingly, through additional correlations with defined chromatin signatures at promoter and enhancer subtypes, we show distinct enrichment of 5-hmC at enhancers marked with H3K4me1 and H3K27ac. These results suggest potential role(s) for 5-hmC in the regulation of specific promoters and enhancers. In addition, our results provide a detailed epigenomic map of 5-hmC from which to pursue future functional studies on the diverse regulatory roles associated with 5-hmC

Hox cluster duplication in the basal teleost Hiodon alosoides (Osteoglossomorpha)

Large-scale—even genome-wide—duplications have repeatedly been invoked as an explanation for major radiations. Teleosts, the most species-rich vertebrate clade, underwent a “fish-specific genome duplication” (FSGD) that is shared by most ray-finned fish lineages. We investigate here the Hox complement of the goldeye (Hiodon alosoides), a representative of Osteoglossomorpha, the most basal teleostean clade. An extensive PCR survey reveals that goldeye has at least eight Hox clusters, indicating a duplicated genome compared to basal actinopterygians. The possession of duplicated Hox clusters is uncoupled to species richness. The Hox system of the goldeye is substantially different from that of other teleost lineages, having retained several duplicates of Hox genes for which crown teleosts have lost at least one copy. A detailed analysis of the PCR fragments as well as full length sequences of two HoxA13 paralogs, and HoxA10 and HoxC4 genes places the duplication event close in time to the divergence of Osteoglossomorpha and crown teleosts. The data are consistent with—but do not conclusively prove—that Osteoglossomorpha shares the FSGD