Government
On the Complementary Nature of Knowledge Graph Embedding, Fine Grain Entity Types, and Language Modeling
Patel, Rajat, Ferraro, Francis
We demonstrate the complementary natures of neural knowledge graph embedding, fine-grain entity type prediction, and neural language modeling. We show that a language model-inspired knowledge graph embedding approach yields both improved knowledge graph embeddings and fine-grain entity type representations. Our work also shows that jointly modeling both structured knowledge tuples and language improves both.
On the Power of Abstention and Data-Driven Decision Making for Adversarial Robustness
Balcan, Maria-Florina, Blum, Avrim, Sharma, Dravyansh, Zhang, Hongyang
What these results have in common is that changes that either are imperceptible or should be irrelevant to the classification task can lead to drastically different network behavior. One reason for this vulnerability to adversarial attack is the non-Lipschitzness property of typical neural networks: small but adversarial movements in the input space can often produce large perturbations in the feature space. In this work, we consider the question of whether non-Lipschitz networks are intrinsically vulnerable, or if they could still be made robust to adversarial attack, in an abstract but (we believe) instructive adversarial model. In particular, suppose an adversary, by making an imperceptible change to an input x, can cause its representation F (x) in feature space (the penultimate layer of the network) to move by an arbitrary amount: will such an adversary always win? Clearly if the adversary can modify F (x) by an arbitrary amount in an arbitrary direction, then yes. But what if the adversary can modify F (x) by an arbitrary amount but only in a random direction (which it cannot control)? In this case, we show an interesting dichotomy: if the classifier must output a classification on any input it is given, then yes the adversary will still win, no matter how well-separated the classes are in feature space and no matter what decision surface the classifier uses.
Wandering Within a World: Online Contextualized Few-Shot Learning
Ren, Mengye, Iuzzolino, Michael L., Mozer, Michael C., Zemel, Richard S.
We aim to bridge the gap between typical human and machine-learning environments by extending the standard framework of few-shot learning to an online, continual setting. In this setting, episodes do not have separate training and testing phases, and instead models are evaluated online while learning novel classes. As in the real world, where the presence of spatiotemporal context helps us retrieve learned skills in the past, our online few-shot learning setting also features an underlying context that changes throughout time. Object classes are correlated within a context and inferring the correct context can lead to better performance. Building upon this setting, we propose a new few-shot learning dataset based on large scale indoor imagery that mimics the visual experience of an agent wandering within a world. Furthermore, we convert popular few-shot learning approaches into online versions and we also propose a new contextual prototypical memory model that can make use of spatiotemporal contextual information from the recent past.
Perceptual Adversarial Robustness: Defense Against Unseen Threat Models
Laidlaw, Cassidy, Singla, Sahil, Feizi, Soheil
A key challenge in adversarial robustness is the lack of a precise mathematical characterization of human perception, used in the very definition of adversarial attacks that are imperceptible to human eyes. Most current attacks and defenses try to avoid this issue by considering restrictive adversarial threat models such as those bounded by $L_2$ or $L_\infty$ distance, spatial perturbations, etc. However, models that are robust against any of these restrictive threat models are still fragile against other threat models. To resolve this issue, we propose adversarial training against the set of all imperceptible adversarial examples, approximated using deep neural networks. We call this threat model the neural perceptual threat model (NPTM); it includes adversarial examples with a bounded neural perceptual distance (a neural network-based approximation of the true perceptual distance) to natural images. Through an extensive perceptual study, we show that the neural perceptual distance correlates well with human judgements of perceptibility of adversarial examples, validating our threat model. Under the NPTM, we develop novel perceptual adversarial attacks and defenses. Because the NPTM is very broad, we find that Perceptual Adversarial Training (PAT) against a perceptual attack gives robustness against many other types of adversarial attacks. We test PAT on CIFAR-10 and ImageNet-100 against five diverse adversarial attacks. We find that PAT achieves state-of-the-art robustness against the union of these five attacks, more than doubling the accuracy over the next best model, without training against any of them. That is, PAT generalizes well to unforeseen perturbation types. This is vital in sensitive applications where a particular threat model cannot be assumed, and to the best of our knowledge, PAT is the first adversarial defense with this property.
Extracting Angina Symptoms from Clinical Notes Using Pre-Trained Transformer Architectures
Eisman, Aaron S., Shah, Nishant R., Eickhoff, Carsten, Zerveas, George, Chen, Elizabeth S., Wu, Wen-Chih, Sarkar, Indra Neil
Anginal symptoms can connote increased cardiac risk and a need for change in cardiovascular management. This study evaluated the potential to extract these symptoms from physician notes using the Bidirectional Encoder from Transformers language model fine-tuned on a domain-specific corpus. The history of present illness section of 459 expert annotated primary care physician notes from consecutive patients referred for cardiac testing without known atherosclerotic cardiovascular disease were included. Notes were annotated for positive and negative mentions of chest pain and shortness of breath characterization. The results demonstrate high sensitivity and specificity for the detection of chest pain or discomfort, substernal chest pain, shortness of breath, and dyspnea on exertion. Small sample size limited extracting factors related to provocation and palliation of chest pain. This study provides a promising starting point for the natural language processing of physician notes to characterize clinically actionable anginal symptoms. Introduction Angina pectoris is a constellation of symptoms that portends inadequate oxygenation of cardiac muscle due to either a decrease in coronary blood supply, an increase in myocardial oxygen demand, or both.
Impact of Artificial Intelligence in Cybersecurity
Even though security solutions are becoming modern and robust, cyber threats are ever-evolving and always on the peak. The main reason for this is because the conventional methods to detect the malware are falling apart. Cybercriminals are regularly coming up with smarter ways to bypass the security programs and infect the network and systems with different kinds of malware. The thing is, currently, most antimalware or antivirus programs use the signature-based detection technique to catch the threats, which is ineffective in detecting the new threats. This is where Artificial Intelligence can come to rescue.
Explainable Artificial Intelligence (XAI)
This article was written by Dr. Matt Turek. Dramatic success in machine learning has led to a torrent of Artificial Intelligence (AI) applications. Continued advances promise to produce autonomous systems that will perceive, learn, decide, and act on their own. However, the effectiveness of these systems is limited by the machine's current inability to explain their decisions and actions to human users (Figure 1). The Department of Defense (DoD) is facing challenges that demand more intelligent, autonomous, and symbiotic systems.
RAISE 2020: Responsible artificial intelligence for social empowerment
The success of Digital India has set a new global benchmark for leveraging digital technologies for inclusive growth, good governance, and empowerment of common citizens. The benefits of digital technologies that were a luxury of affluent classes a few years ago have now become easily accessible to masses. Rapidly changing technology requires continuous evolution of systems, faster and adequate regulatory responses, and building capacities to meet emerging challenges. The advent of artificial intelligence is not merely an incremental change, but a major paradigm shift in the technology landscape, which must be viewed holistically and harnessed for the wellbeing of humanity. Data is the basic building block for any artificial intelligence system.
Ten Research Challenge Areas in Data Science · Harvard Data Science Review
To drive progress in the field of data science, we propose 10 challenge areas for the research community to pursue. Since data science is broad, with methods drawing from computer science, statistics, and other disciplines, and with applications appearing in all sectors, these challenge areas speak to the breadth of issues spanning science, technology, and society. We preface our enumeration with meta-questions about whether data science is a discipline. We then describe each of the 10 challenge areas. The goal of this article is to start a discussion on what could constitute a basis for a research agenda in data science, while recognizing that the field of data science is still evolving. Although data science builds on knowledge from computer science, engineering, mathematics, statistics, and other disciplines, data science is a unique field with many mysteries to unlock: fundamental scientific questions and pressing problems of societal importance.
The Government Is Serious About Creating Mind-Controlled Weapons
DARPA, the Department of Defense's research arm, is paying scientists to invent ways to instantly read soldiers' minds using tools like genetic engineering of the human brain, nanotechnology and infrared beams. Thought-controlled weapons, like swarms of drones that someone sends to the skies with a single thought or the ability to beam images from one brain to another. This week, DARPA (Defense Advanced Research Projects Agency) announced that six teams will receive funding under the Next-Generation Nonsurgical Neurotechnology (N3) program. Participants are tasked with developing technology that will provide a two-way channel for rapid and seamless communication between the human brain and machines without requiring surgery. "Imagine someone who's operating a drone or someone who might be analyzing a lot of data," said Jacob Robinson, an assistant professor of bioengineering at Rice University, who is leading one of the teams.