SEARCH · Search NASA
Results for “Data Poisoning”
Search indexed NASA NTRS and DOE OSTI research on propulsion, heat transfer, battery materials and energy systems. Follow report and document links to the original sources.
Quote a phrase for an exact phrase match. Source license links do not imply unrestricted reuse.
Systematic Evaluation of Backdoor Data Poisoning Attacks on Image Classifiers
Backdoor data poisoning attacks have recently been demonstrated in computer vision research as a potential safety risk for machine learning (ML) systems. Traditional data poisoning attacks manipulate training data to induce unreliability of an ML model, whereas backdoor data poisoning attacks maintain system performance unless the MLmodel is presented with an input containing an embedded“trigger” that provides a predetermined response advantageous to the adversary. Our work builds upon prior back-door data-poisoning research for ML image classifiers and systematically assesses different experimental conditions including types of trigger patterns, persistence of trigger patterns during retraining, poisoning strategies, architectures (ResNet-50, NasNet, NasNet-Mobile), datasets (Flowers, CIFAR-10), and potential defensive regularization techniques (Contrastive Loss, Logit Squeezing, Manifold Mixup,Soft-Nearest-Neighbors Loss). Experiments yield four key findings. First, the success rate of backdoor poisoning at-tacks varies widely, depending on several factors, including model architecture, trigger pattern and regularization technique. Second, we find that poisoned models are hard to detect through performance inspection alone. Third, regularization typically reduces backdoor success rate, although it can have no effect or even slightly increase it, depending on the form of regularization. Finally, backdoors inserted through data poisoning can be rendered ineffective after just a few epochs of additional training on a small set of clean data without affecting the model’s performance.
A Compound Data Poisoning Technique with Significant Adversarial Effects on Transformer-based Sentiment Classification Tasks
Transformer-based models have demonstrated much success in various natural language processing tasks. However, they are often vulnerable to adversarial attacks, such as data poisoning, which can intentionally fool the model into generating incorrect results. In this article, we present a novel, compound variant of a data poisoning attack on a transformer-based model that maximizes the poisoning effect while minimizing the scope of poisoning. Here we do so by combining the established data poisoning technique (label flipping) with a novel adversarial artifact selection and insertion technique aimed at minimizing detectability and the scope of the poisoning footprint. We find that by using a combination of these two techniques, we achieve a state-of-the-art attack success rate of approximately 90% while poisoning only 0.5% of the original training set, thus minimizing the scope and detectability of the poisoning action. These findings have the potential to advance the development of better data poisoning detection methods.
Quantifying the robustness of deep multispectral segmentation models against natural perturbations and data poisoning
In overhead image segmentation tasks, including additional spectral bands beyond the traditional RGB channels can improve model performance. However, it is still unclear how incorporating this additional data impacts model robustness to adversarial attacks and natural perturbations. For adversarial robustness, the additional in-formation could improve the model’s ability to distinguish malicious inputs, or simply provide new attack avenues and vulnerabilities. For natural perturbations, the additional information could better inform model decisions and weaken perturbation effects or have no significant influence at all. In this work, we seek to characterize the performance and robustness of a multispectral (RGB and near infrared) image segmentation model subjected to adversarial attacks and natural perturbations. While existing adversarial and natural robustness research has focused primarily on digital perturbations, we prioritize on creating realistic perturbations designed with physical world conditions in mind. For adversarial robustness, we focus on data poisoning attacks whereas for natural robustness, we focus on extending ImageNet-C common corruptions for fog and snow that coherently and self-consistently perturbs the input data. Overall, we find both RGB and multispectral models are vulnerable to data poisoning attacks regardless of input or fusion architectures and that while physically-realizable natural perturbations still degrade model performance, the impact differs based on fusion architecture and input data.
The use of analgesics for intentional self-poisoning: Trends in U.S. poison center data
In the U.S., intentional self-poisonings with analgesics that are available without a prescription increased from 2000 to 2018. Given concerns regarding mental health outcomes during the COVID-19 pandemic, we examined and compared trends in pediatric and adult intentional self-poisoning with acetaminophen, aspirin, ibuprofen, and naproxen from 2016 to 2021 using the National Poison Data System (NPDS) to see if these trends have continued. We extracted annual case counts of all suspected suicide attempts from intentional poisoning, and of suspected suicide attempts resulting in major effects or death, from the NPDS for non-prescription single ingredient adult formulation acetaminophen, non-prescription single ingredient adult formulation aspirin, single ingredient formulation ibuprofen, and single ingredient formulation naproxen. We enumerated the cases by year, age, and gender. Most cases of intentional self-poisoning within the review period involved acetaminophen and ibuprofen and the 13–19-year-olds constituted the highest proportion of intentional self-poisoning cases across age groups for all four analgesics. Cases involving females predominated cases involving males by 3:1 or greater. Here, the 13–19-year-old age group also represented the largest proportion of cases that resulted in major clinical effects or deaths. An increasing trend in suicide poisoning cases with acetaminophen and ibuprofen was observed in the 6-19-years age group and this trend appeared to exacerbate from 2020 to 2021 corresponding with the start of the COVID-19 pandemic period.
TrojAI Alternate Analysis
In this portion of the TrojAI evaluation, we focus on the cyber-network-c2-mar2024 dataset. Recall that in this round ResNet18 and ResNet34 neural networks (NN) were trained on the USTC-TFC2016 dataset with the aim of distinguishing between benign versus botnet command and control (c2) packets. A range of bytes from each packet was reformatted into a 28x28 pixel image, and the collection of reformatted packets served as the training (and testing) data for the two ResNet models. For some of the data a trigger watermark was strategically placed to affect various inputs to the NNs. This watermarked, or poisoned, data in turn created a poisoned, or trojaned NN. The data were poisoned in different ways ultimately creating different trojaned NNs. This collection of trojaned NNs was combined with various versions of not trojaned NNs and served as the training and testing data for the performers. The performers’ task was to construct a classifier to distinguish between the trojaned and not trojaned models. It was previously noted that the performers struggled with the cyber-network-c2-mar2024 dataset, motivating this investigation of potential reasons the performers experienced challenges.
Chromium Poisoning ERMINE Model Data
This is the data from the paper "Systematic and Predictive Trends to Chromium Poisoning in Solid Oxide Fuel Cell Cathodes" by Hokon Kim et al., appearing in the Journal of Power Sources. The files here are the microstructures, mesh files, and outputs from the ERMINE finite element model of chromium poisoning in SOFC cathodes. Further description can be found in Readme.rtf and in the paper..
Alkaloids are associated with increased microbial diversity and metabolic function in poison frogs
Shifts in host-associated microbiomes can impact both host and microbes. It is of interest to understand how perturbations, like the introduction of exogenous chemicals, impact microbiomes. In poison frogs (family Dendrobatidae), the skin microbiome is exposed to alkaloids that the frogs sequester for defense. These alkaloids are antimicrobial; however, their effect on the frogs’ skin microbiome is unknown. To test this, we characterized microbial communities from field-collected dendrobatid frogs. Then, we conducted a laboratory experiment to monitor the effect of the alkaloid decahydroquinoline (DHQ) on the microbiome of two frog species with contrasting alkaloid loads in nature. In both datasets, we found that alkaloid-exposed microbiomes were more phylogenetically diverse, with an increase in diversity among rare taxa. Further, to better understand the isolate-specific response to alkaloids, we cultured microbial isolates from poison frog skin and found that many isolates exhibited enhanced growth or were not impacted by the addition of DHQ. To further explore the microbial response to alkaloids, we sequenced the metagenomes from high- and low-alkaloid frogs and observed a greater diversity of genes associated with nitrogen and carbon metabolism in high-alkaloid frogs. From these data, we hypothesized that some strains may metabolize the alkaloids. We used stable isotope tracing coupled to nanoSIMS (nanoscale secondary ion mass spectrometry), which supported the idea that some of these isolates are able to metabolize DHQ. Together, these data suggest that poison frog alkaloids open new niches for skin-associated microbes with specific adaptations, such as alkaloid metabolism, that enable survival in this environment.
Model Residuals as Shields: A Two-Level Formulation to Defend Smart Grids From Poisoning Attacks
The advancement of smart grids presents both vast opportunities and heightened cybersecurity risks. Data-driven defense mechanisms, though designed as a shield against these threats, can fall prey to poisoning attacks. We delve into regression settings, underscoring the imperative to fortify defenses against a spectrum of poison ratios, notably those above 0.5—an issue scarcely addressed in prior studies. Recognizing the susceptibilities of smart grids and their manipulable sensors, we exploit the very intent of poisoning attacks, compromising model accuracy, as our defense mechanism. Our proposed two-level optimization framework discerns between poisoned and authentic data based on model residuals, outperforming or matching existing methods in 72% to 77% of precision and 75% to 80% of recalls across various poisoning attacks, poison ratios, and datasets. Once the authentic data are identified, the trained model is adaptable for a variety of applications. Comprehensive evaluations on different smart grid datasets, pitted against myriad poisoning schemes, validate our methodology’s edge over existing methods. Here, we also shed light on the implications of model misspecification originating from temporal auto-correlation, a common feature in Internet of Things and smart grid data.
Neutronic Consideration of TREAT Facility Fuel SiC Recladding
The Transient Reactor Test (TREAT) Facility is an air-cooled reactor composed of graphite-urania fuel encapsulated in zirconium alloy canisters and surrounded by ~2 ft (~61 cm) of nuclear grade graphite. The primary role of TREAT is to provide in-pile nuclear-heated safety research via transient testing [1]. Benchmark efforts have demonstrated sensitivity of TREAT neutronics models to graphite cross section data and key neutron poisons found in the fuel assemblies [2]. During fabrication of TREAT fuel assemblies, a small concentration of boron was inadvertently introduced with variable concentration into the aggregate of fuel blocks prepared for TREAT use. The concentration of boron, and its respective uncertainty, represent the most sensitive component in a neutronics study; unfortunately, nothing can be done to reduce or otherwise mitigate its impact. Hydrogen in the fuel blocks reduces the mean free path of the core and its true quantity and uncertainty is approximated. The hydrogen remains from pitch binder used in the fuel fabrication process and was not completely released due to incomplete fuel graphitization. Destructive fuel testing is necessary to quantify the actual hydrogen content and to improve benchmark model quality. A third neutron poison of some significance is the hafnium impurity in the Zircaloy-3 (Zry-3) assembly cladding. The quantity of hafnium is expected to be within nominal manufacturing limits for nuclear grade zircaloy. Recladding the fuel assemblies with material that is less neutron absorbing is expected to benefit reactor neutron economy. Moreover, TREAT’s total transient energy is restricted based on the rate of Zry-3 oxidation in TREAT’s air coolant environment. Hence, cladding with more benign air reaction kinetics could dramatically uprate the facility’s experimental capability. Silicon carbide (SiC) has been proposed as a candidate material for recladding TREAT assemblies, as SiC/SiC demonstrate favorable properties within nuclear environments [3]. The current operational limits of TREAT are restricted by the oxidation of Zry-3. Change of the cladding to SiC could feasibly double the current temperature limitation. Recladding opportunities allow for previously damaged fuel assemblies to be returned to service, as Zry-3 is not commercially available. The initial effort required to consider proceeding with any recladding effort is to neutronically characterize key reactor parameters while replacing Zry-3 with SiC. A characterization summary, with respective results, is provided herein.
Testing the Jump Finding Code for NEXUS Qubit Analysis
At Fermilab, the NEXUS dilution refrigerator is repeating the same experiment from Wilen et al. 1 underground to further investigate the effect of ionizing radiation and cosmic ray muons on qubit decoherence. This refrigerator is 100m underground in the MINOS cavern to significantly lower the incident rate of cosmic ray muons, meaning the majority of incidents is due to ionizing radiation. To gain a better understanding of how the rate of ionizing radiation affects the qubits, we use 4 radiation configurations to collect data from the chip. In this work, we examine the efficiency of our jump detection code to find jumps of various sizes. We do so using simulated data with a known number of injected jumps of known sizes. These jumps are charge offsets of the qubit, thought to be due to quasiparticle poisoning. To test this, we run the jump finding code on an array of simulated data in which two main parameters, the smoothing factor and the threshold at which a charge offset is considered a jump, are changed to test an array of these parameters. We then perform a χ2 analysis to find the best combination of these two parameters.
FY25 Mid-Year Report: FNCL Enhancements Implementation
During the first half of FY25 the FNCL team has made consistent progress toward the completion of our project goals. The FNCL prototype panel design has been successfully applied to a fully instrumented 3-panel system which is actively under construction. The FNCL Demonstrator System contains solid scintillators instrumented with SiPMs, which operate on an updated CAEN digitizer, requires no high-voltage, and has a smaller overall footprint. The onboard software will include the LLNL-developed GMM-PSD signal processing. Later this year the system will be experimentally tested alongside the baseline FNCL instrument at LLNLs ISSA facility. In addition to a full systems test, the performance of a DD generator for active interrogation measurements compared to the standard AmLi source will be established for both systems. The data collected at the ISSA facility will be used to experimentally validate the FNCL-Fast Isotopic Fuel Assay’s (FIFA) capability to measure U-235 loading and to predict gadolinium poison content with passive interrogation. The FNCL-FIFA modal was benchmarked with simulation-based data and a user-friendly GUI was added earlier this year. Three separate codes have been submitted to the LLNL ESW system for review prior to their transfers. These include the Predictive Modeling Response toolkit, GMM-PSD firmware beta version, and the FNCL-FIFA analysis package with GUI and user documentation.
Characterization of Humanized Mouse Model of Organophosphate Poisoning and Detection of Countermeasures via MALDI-MSI
Organophosphoate (OP) chemicals are known to inhibit the enzyme acetylcholinesterase (AChE). Studying OP poisoning is difficult because common small animal research models have serum carboxylesterase, which contributes to animals’ resistance to OP poisoning. Historically, guinea pigs have been used for this research; however, a novel genetically modified mouse strain (KIKO) was developed with nonfunctional serum carboxylase (Es1 KO) and an altered acetylcholinesterase (AChE) gene, which expresses the amino acid sequence of the human form of the same protein (AChE KI). KIKO mice were injected with 1xLD50 of an OP nerve agent or vehicle control with or without atropine. After one to three minutes, animals were injected with 35 mg/kg of the currently fielded Reactivator countermeasure for OP poisoning. Postmortem brains were imaged on a Bruker RapifleX ToF/ToF instrument. Data confirmed the presence of increased acetylcholine in OP-exposed animals, regardless of treatment or atropine status. More interestingly, we detected a small amount of Reactivator within the brain of both exposed and unexposed animals; it is currently debated if reactivators can cross the blood–brain barrier. Further, we were able to simultaneously image acetylcholine, the primary affected neurotransmitter, as well as determine the location of both Reactivator and acetylcholine in the brain. This study, which utilized sensitive MALDI-MSI methods, characterized KIKO mice as a functional model for OP countermeasure development.
Measurement of the energy-differential 35 Cl( n, p 0 ) 35 S cross section via the ratio with 6 Li( n, α ) 3 H
Knowledge of the neutron-induced 35 Cl (n, x) cross sections is vital to the design and certification of molten chloride fast reactors (MCFRs) since the 35 Cl (n, p 0 ) 35 S reaction is believed to be a significant reactor poison. However, recently published measurements are inconsistent with each other and with evaluation. Here, the goal of this work is to measure the 35 Cl (n, p 0 ) reaction cross section using a technique that is different from recent measurements. The experiment was conducted at Lawrence Berkeley National Laboratory's (LBNL) 88-Inch Cyclotron using thick target deuteron breakup from a 14 MeV deuteron beam. Energy-differential 35 Cl (n, p 0 ) 35 S cross sections were obtained via ratio with the 6 Li (n, a) 3 H reaction using an active target experiment with a Cs 2 LiYCl 6 (CLYC) scintillator. The 35 Cl (n, p 0 ) reaction cross section was measured from 2.02 to 7.46 MeV. The results are consistent with Kuvin et al., confirming a roughly 50% reduction in magnitude relative to the ENDF/B-VIII.0 evaluation. These data provide new insight into the role of natural Cl as an MCFR poison. The reduction of the 35 Cl (n, p 0 ) reaction cross section compared to evaluation suggests that MCFR criticality is less sensitive to Cl enrichment. This may in turn reduce building and operating costs since isotope separation may not be needed.
Linking Spatiotemporal Biological Data to Predict Harmful Algal Blooms
Cyanobacterial Harmful Algal Blooms (cHABs) have significant impacts on an affected region’s economy, ecology, and human health. The blooms can release toxins that kill fish and poison water for people and animals. The global adverse effects of cHABs are exacerbated by the consequences of climate change and increased pollution. Though the phenomena are well documented, scientists’ efforts to mitigate the damage are hampered by insufficient predictive models and incomplete granular knowledge of cHAB community structure. With a goal of leveraging bioinformatics and machine learning tools to better understand and predict cHABs, we are first exploring water sample data sets. Using nearly four thousand samples from the National Center for Biotechnology Information Sequence Read Archive (NCBI-SRA) across 16 years with latitude and longitude embedded in the metadata, we mapped the location of the samples onto a Lake Erie shape file. We combined information about location, date, and community taxa in the NCBI samples to discover factors that determine cHAB features. The data are separated into three distinct zones, with the majority pooled at the southwest end of the lake and occurring in 2017. The samples are rich in biological data; our next steps are to carry out whole genome sequence analysis and use the community profiles as part of our predictive machine learning model.
Epidemiological Investigation of a Mortality Event in a Translocated Gopher Tortoise (Gopherus polyphemus) Population in Northwest Florida
Nokuse Plantation, a 22,055 ha private conservation preserve in northwest Florida, is a recipient site for gopher tortoises translocated from development sites in Florida. Since 2006, Nokuse has received over 5,000 tortoises from multiple development sites. During 2013–2015, 52 tortoises were found sick (n = 14) or dead (n = 38) in multiple soft-release enclosures in which tortoises consistently exhibited clinical signs, with additional sick (n = 5) and dead (n = 5) tortoises presenting similarly during 2016–2017. When found alive, tortoises behaved abnormally (e.g., frequently out of burrows during cold weather, pacing along enclosure fencing), appeared emaciated, were lethargic, and had developed redness under plastron scutes. Similar numbers of male (n = 28) and female (n = 32) tortoises were recovered along with two of unidentified sex, including mainly adults (n = 59) and three subadults. Physical examination, blood analysis, and other diagnostics were indicative of starvation and dehydration. Most sick tortoises provided with supportive care recovered. Necropsy findings generally confirmed starvation, with no evidence of infectious pathogens or contaminants. There were no apparent differences in quality of habitat, plant community, or soil or water among affected and unaffected enclosures. Botanical surveys indicated adequate forage quality and quantity, with no poisonous exotic or native plants detected. No land management practices changed prior to this event. Analysis of epidemiological data and demographic factors from before and during this mortality event identified initial density of tortoises in the enclosures as exerting the strongest influence on detection of tortoise morbidity and mortality. We believe that the stress associated with mixing tortoises from different populations and at higher densities during translocation impacted an individual tortoise’s ability to obtain or absorb adequate nutrients from foraging, ultimately leading to a wasting condition consistent with starvation. Based on our findings, we recommend a maximum of 3 gopher tortoises per ha in soft-release enclosures for translocation, but further research is warranted to investigate the complexity of stress and social pressures associated with translocation.
Constraining the impact of chlorine as a neutron absorber in next-gen fast reactor designs
The role of chlorine as a neutron poison and as a seed for producing radioactive waste in nuclear systems has driven a renewed interest to improve its nuclear data uncertainties. Additionally, basic and applied science programs that use CLYC (Cs 2 LiYCl 6 :Ce) detectors for neutron spectroscopy and monitoring are also very sensitive to any change in chlorine nuclear data for simulations of the detector response. In this work, sensitivities relevant for these different applications are addressed through simulations of the efficiency of CLYC detectors in a fast fission spectrum when applying new chlorine nuclear data as input. These simulations are validated by an experimental measurement using CLYC detectors coupled to an ionization chamber loaded with a 252 Cf spontaneous fission source. The results are then used to obtain the first reliable direct measurement of the 35 Cl(n,p 0 ) and summed Cl(n,p+n,α) fission spectrum average cross sections, found to be 54.7(32) and 105.0(98) mb, respectively. The results are within uncertainty of calculated fission spectrum averaged cross sections based on recently re-evaluated chlorine nuclear data, which confirm recent impact studies performed for the Molten Chloride Reactor Experiment. Meanwhile, there currently exists only one published criticality benchmark experiment that is sufficiently sensitive to chlorine nuclear data. Discrepancies are found with this set of criticality safety benchmarks, which are more sensitive to thermal and epithermal neutron energies than the energies, above 100 keV, tested in this current work. Hence, there is still a need to re-evaluate the chlorine nuclear data at lower energies to assess these discrepancies. Interpretation of the data from future “faster” criticality benchmarks, which are needed for next-gen fast reactor designs, benefit from the improved constraints on the chlorine nuclear data validated in this work.
Preliminary Design of a New Pulsed-Neutron Die--Away Experiments with Absorbers (IER-552 CED-1)
This report presents the preliminary design (CED-1) of IER-552, pulsed-neutron die-away (PNDA) experiments with absorbers, to be conducted by Lawrence Livermore National Laboratory (LLNL). The goal of the PNDA experiments with absorbing materials is to produce high-quality, low-cost integral benchmarks that can be used to validate cross sections that are high priority nuclear data for the Department of Energy’s Nuclear Criticality Safety Program (NCSP). PNDA experiments can be used to generate nuclear data validation benchmarks quickly and cheaply, as they do not require fissile material or a nuclear facility to conduct them. The original PNDA experiments were set up at LLNL under IER-501. Extending the PNDA experiments to include absorbing materials leverages existing facilities and resources at LLNL to validate cross sections, with a basic experiment design that uses a neutron generator to impinge a short, mono-energetic neutron pulse on a poisoned, moderating target sample. The neutron pulse lasts 100 µs, after which the neutron population in the sample reaches thermal equilibrium and later spatial equilibrium. In this fully equilibrized state, the neutron population has a characteristic decay-time eigenvalue. The eigenvalue can be used as an integral parameter to validate nuclear data involved with neutron scattering and absorption. Two observables can be measured: the neutron population and the population of secondary γ-rays produced by inelastic and capture reactions. This report explores the feasibility of both approaches. For γ-ray measurements, this allows for direct measurement of reactions of interest for validation. During the neutron burst time, inelastic (prompt) γ-rays dominate, and these data can be isolated for validation of neutron inelastic scattering data. After the pulse ends, neutron capture (delayed) γ-rays dominate and are produced by many reaction channels as neutrons slow down to thermal energies. Two sets of γ-ray spectra (inelastic, capture) can be produced for validation. Additionally, the time-dependent decay of the capture γ-ray population when the neutron population is thermalized and in its fundamental mode can be used for validation. Two experiments can be imagined where pulsed neutrons are used to validate the nuclear data of absorbing materials. The first integrates well into the existing PNDA testbed at LLNL. The absorber material would be introduced into a moderating target and the same neutron generator, neutron detectors, electronics, and shielding box used for IER-501 would be employed. From the same experimental setup, many absorbing materials can be validated by simply changing the neutron poison in the moderator. The only significant modification would be the introduction of a γ-ray detector. Such an experiment would primarily serve to validate nuclear data in the thermal energy range. The second kind of experiment would validate the fast and epithermal energy range. It would involve pulsing neutron into a bare assembly of the absorber material and measuring the die-away of neutrons. The fast leakage of such an assembly requires nanosecond neutron-generator pulse widths and fast detectors/electronics that could measure ~200 ns die-away curves. This kind of experiment would ideally be performed at a cyclotron, like that available at Lawrence Berkeley National Laboratory.