فهرست مطالب محمد خالویی

Nowadays the most commonly used method in various tasks of machine learning and artificial intelligence are neural networks. In spite of their different uses, neural networks and Deep neural networks (DNNs) have some vulnerabilities. A little distortion or adversarial perturbation in the input data for both additive and non-additive cases can be led to change the output of the trained model, and this could be a kind of DNN vulnerability. Despite the imperceptibility of the mentioned disturbance for human beings, DNN is vulnerable to these changes. Creating and applying any malicious perturbation named “attack”, penetrates DNNs and makes them incapable of doing the duty assigned to them. In this paper different attack approaches were categorized based on the signal applied in the attack procedure. Some approaches use the gradient signal for detecting the vulnerability of DNN and try to create a powerful attack. The other ones create a perturbation in a blind situation and change a portion of the input to create a potential malicious perturbation. Adversarial attacks include both black-box and White-box situations. White-box situation focuses on training loss function and the architecture of the model but black box situation focuses on the approximation of the main model and dealing with the restriction of the input-output model request. Making a deep neural network resilient against attacks is named “defense”. Defense approaches are divided into three categories. One of them tries to modify the input, the other one makes some changes in the developed model and also changes the loss function of the model. In the third defense approach some networks are first used for purification and refinement of the input before passing it to the main network. Furthermore, an analytical approach was presented for the entanglement and disentanglement representation of inputs of the trained model. The gradient is a very powerful signal usually used in learning and an attacking approaches. Besides, adversarial training is a well-known approach in changing a loss function method to defend against adversarial attacks. In this study the most recent research on the vulnerability of DNN through a critical literature review was presented. Literature and our experiments indicate that the projected gradient descent (PGD) and AutoAttack methods are successful approaches in the l2 and l∞  bounded attacks, respectively. Furthermore, our experiments indicate that AutoAttack is much more time-consuming than the other methods. In the defense concept, different experiments were conducted to compare different attacks in the adversarial training approaches. Our experimental results indicate that the PGD is much more efficient in adversarial training than the fast gradient sign method (FGSM) and its deviations like MIFGSM and covers a wider range of generalizations of the trained model on predefined datasets. Furthermore, AutoAttack integration with adversarial training works well, but it is not efficient in low epoch numbers. Aside from that, it has been proven that adversarial training is time-consuming. Furthermore, we released our code for researchers or individuals interested in extending or evaluating predefined models for standard and adversarial machine learning projects. A more detailed description of the framework can be found at https://github.com/khalooei/Robustness-framework .

Dominant and rare events detection is one of the most important subjects of image and video analysis field. Due to inaccessibility to all rare events, detecting of them is a challenging task. Today, deep networks are the best tool for video modeling but due to inaccessibility to tagged data of rare data, usual learning of a deep convolutional network is not possible. Due to the success of generative adversarial networks, in this paper an end-to-end deep network based on generative adversarial networks is presented for detecting rare events. This network is competitively trained only by dominant events. To evaluate performance of proposed method, two standard datasets: UCSDped1 and UCSDped2 are utilized. The proposed method can detect rare event with 0.2 and 0.17 equal error rate with the processing speed of 300 frames per second on the mentioned data respectively. In addition to end-to-end structure of the network and its simple train and test phase, this result is comparable to advanced methods results.

Assessing the attitude of medical students who has passed basic sciences, toward research and research activities in basic sciences, can provide a powerful basis for future interventions and improvement in their attitudes. In this study in Isfahan Medical School, the attitude of newcomer medical students toward research and specially research in basic sciences has been investigated at the completion of physiopathology courses. This is a descriptive cross-sectional study performed on all newcomer medical ‎students in physiopathology course after basic science courses in Isfahan ‎University of Medical Sciences in year 2010 (n=65). The instrument was a researcher made ‎questionnaire including 33 questions. The questionnaire was validated through face and content validity and its reliability was confirmed based on Cronbach’s Alpha (0.85). We used student T-test, Spearman and Pearson correlation coefficient for statistical analysis. The mean of research understanding was 5.9± 1.49 out of eight. There was a significant positive relationship between previous research activities and the score of research understanding. There was also a significant relationship between interest toward research and doing research in clinical fields among students interested in research activities. Students showed a positive attitude toward research. However, they were more interested in clinical research rather than basic research and most students interested in research activities preferred clinical studies as their future activities. Offering MD-PhD dual degree training programs and recruiting physician scientist in them could introduce some career opportunities in this field and also train the demanding researchers for research centers in Iran medical research centers.