Limited Query Black-box Adversarial Attacks in the Real World
We study the creation of physical adversarial examples, which are robust to real-world transformations, using a limited number of queries to the target black-box neural networks. We observe that robust models tend to be especially susceptible to foreground manipulations, which motivates our novel Foreground attack. We demonstrate that gradient priors are a useful signal for black-box attacks and therefore introduce an improved version of the popular SimBA. We also propose an algorithm for transferable attacks that selects the most similar surrogates to the target model. Our black-box attacks outperform state-of-the-art approaches they are based on and support our belief that the concept of model similarity could be leveraged to build strong attacks in a limited-information setting.
Limited Query Black-box Adversarial Attacks in the Real World
We study the creation of physical adversarial examples, which are robust to real-world transformations, using a limited number of queries to the target black-box neural networks. We observe that robust models tend to be especially susceptible to foreground manipulations, which motivates our novel Foreground attack. We demonstrate that gradient priors are a useful signal for black-box attacks and therefore introduce an improved version of the popular SimBA. We also propose an algorithm for transferable attacks that selects the most similar surrogates to the target model. Our black-box attacks outperform state-of-the-art approaches they are based on and support our belief that the concept of model similarity could be leveraged to build strong attacks in a limited-information setting.
PVA unveiled the actual role of starch in the Briggs-Rauscher reaction
The Briggs Rauscher reaction (BR reaction) is one of the famous oscillating reactions; the aqueous mixture of KIO3, H2SO4, H2O2, C3H4O4, MnSO4, and starch exhibit color change between yellow and blue-purple repeatedly. The blue-purple color formation is due to the iodine test reaction caused by inclusions of polyiodides such as I3- and I5- in the helical structure of starch. Therefore, starch has been regarded as only an indicator in the BR reaction. But our seniors have found that the oscillation did not last without starch. They hypothesized that starch’s linear helical framework is necessary to elongate the lifetime of the oscillating reaction. If this hypothesis is correct, similar BR-type oscillations must be observed when other polymers with helical structures are used instead of starch. We found the literature which reports that polyvinyl alcohol (PVA) forms a helical structure and indicates the iodine test reaction. In our research, we studied the BR reactions using PVA, with different saponification degrees and viscosities. First, we studied the correlation between the structural features of PVA and the iodine color reaction by spectroscopic approach, exhibiting that PVA with low saponification form helical structures and show the iodine color reactions, which gives red color solutions. Second, we found that additions of the helical-structured PVA to the reaction solution instead of starch induces the BR-type oscillating reactions, while PVA without helical structure induces only a few numbers of oscillations. This is the world-first example of the oscillating reaction using PVA. The oscillation that lasted for 6 minutes with 23 oscillations was almost the same as that of the general BR reaction using starch. We concluded that the polymers with helical structures are intrinsic to elongate the lifetime of the BR reaction. Furthermore, we found that the addition of K3[Fe(CN)6], which has a high redox activity, in the reaction solution with PVA drastically elongated the lifetime (50 min) and increased the numbers of the oscillations (nearly 100 times). This result suggests that the oxidation-reduction reactions by the ferricyanide ion promotes the redox process of iodine and iodide ions.
What is the relationship between angular velocity and power efficiency of a twin blanded single rotor helicopter system, in hover?
A traditional helicopter requires 60 - 80% more power to hover than when in forward or lateral flight, making the manoeuvre extremely power inefficient. To maximise efficiency, industrially many properties of the helicopter and rotor have been changed and tested, for example: optimising blade shape, fuselage shape and changing weights of different helicopter components. This report in particular aims to find a relationship between power efficiency and angular velocity for a twin bladed hovering helicopter with a single rotor. The angular velocity of a blade measures the frequency of its revolution about a fixed point. A theoretical approach was first taken and then justified with empirical data. Firstly, a model for power efficiency was derived with William Froude’s momentum and blade element theory. The efficiency equations incorporated the thrust and power coefficients. Therefore, the research focused on determining values for these coefficients by manipulating equations, using industrial specifications and simulations from the XFOIL software. In order to validate the accuracy for such theoretically generated data, an experiment was conducted for a comparison. The theoretical and empirical data were concurrent, as they followed a similar trend and the empirical values overlapped within the theoretical error bars. The power efficiency for different angular velocities were then found by substituting values for the coefficients. The results demonstrated a positive relationship; where, as angular velocity increases, power efficiency increases too, then plateaus and repeats the same trend once again. The research raises many questions and could be extended by determining if a similar relationship exists for tri-copters and quadcopters.
Development of an Android Application for Triage Prediction in Hospital Emergency Departments
Triage is the process by which nurses manage hospital emergency departments by assigning patients varying degrees of urgency. While triage algorithms such as the Emergency Severity Index (ESI) have been standardized worldwide, many of them are highly inconsistent, which could endanger the lives of thousands of patients. One way to improve on nurses’ accuracy is to use machine learning models (ML), which can learn from past data to make predictions. We tested six ML models: random forest, XGBoost, logistic regression, support vector machines, k-nearest neighbors, and multilayer perceptron. These models were tasked with predicting whether a patient would be admitted to the intensive care unit (ICU), another unit in the hospital, or be discharged. After training on data from more than 30,000 patients and testing using 10-fold cross-validation, we found that all six models outperformed ESI. Of the six, the random forest model achieved the highest average accuracy in predicting both ICU admission (81% vs. 69% using ESI; p<0.001) and hospitalization (75% vs. 57%; p<0.001). These models were then added to an Android application, which would accept patient data, predict their triage, and then add them to a priority-ordered waiting list. This approach may offer significant advantages over conventional triage: mainly, it has a higher accuracy than nurses and returns predictions instantaneously. It could also stand-in for triage nurses entirely in disasters, where medical personnel must deal with a large influx of patients in a short amount of time.
The Use of Brine Shrimp to Test for Water Pollutants
The use of brine shrimp nauplii to test for the overall toxicity of sediment samples is proposed. Brine shrimp nauplii were cultured with different concentrations of heavy metals, including chromium (III), copper (II), nickel, lead and zinc, and organic pollutants, including triclosan, oxybenzone, octinoxate and bisphenol A. The brine shrimp nauplii were observed under a dissection microscope to determine the death rate. Results showed that brine shrimp nauplii are more sensitive to copper, cadmium, bisphenol A and oxybenzone. The LC50 (24h) are 55.5, 24.9, 5.6 and 2.7 ppm respectively. Zinc is likely to have synergistic toxic effect with nickel or lead. The synergistic toxic effects of other heavy metals and organic pollutants should be confirmed with further investigations. Brine shrimp nauplii were treated with extracts from sediment samples collected from the oyster culture zone of the Deep Bay, namely Pak Nei, Sha Kiu Tsuen and Hang Hau Tsuen. The sediment samples were extracted with neutral sodium acetate to dissolve the exchangeable heavy metal ions and some organic pollutants. The death rate of brine shrimp nauplii treated with the sediment extract of Hang Hau Tsuen was similar to 1 ppm PBA. It was also about 10 to 20% higher than that of the other two sites (Pak Nei and Sha Kiu Tsuen). Since Hang Hau Tsuen is closer to the residential area and Lau Fau Shan Seafood Market than the other two sites, its sediment sample is likely to have a higher level of environmental pollutants. The results suggest that brine shrimp nauplii may be used as a biomarker to monitor the environmental changes in the overall level of pollutants in sediment samples.