Researcher profile

Bryan Kim

Bryan Kim contributes to research discovery and scholarly infrastructure.

ResearcherAffiliation not importedOpen to collaborate

Trust snapshot

Quick read

Trust 13 - UnverifiedVerification L1Unclaimed author
2works
0followers
3topics
4close collaborators

Actions

Decide how to stay connected

Follow researcher0

Identity and collaboration

How to connect with this researcher

Claiming links this public author record to a researcher profile and unlocks direct collaboration workflows.

Log in to claim

Direct collaboration

Open a focused conversation when the fit is right

Claim this author entity first to unlock direct invitations.

Research graph

See the researcher in context

Open full explorer

Inspect adjacent work, topics, institutions and collaborators without jumping out to a separate graph page.

Building this graph slice

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Published work

2 published item(s)

preprint2020arXiv

Investigating a Deep Learning Method to Analyze Images from Multiple Gamma-ray Telescopes

Imaging atmospheric Cherenkov telescope (IACT) arrays record images from air showers initiated by gamma rays entering the atmosphere, allowing astrophysical sources to be observed at very high energies. To maximize IACT sensitivity, gamma-ray showers must be efficiently distinguished from the dominant background of cosmic-ray showers using images from multiple telescopes. A combination of convolutional neural networks (CNNs) with a recurrent neural network (RNN) has been proposed to perform this task. Using CTLearn, an open source Python package using deep learning to analyze data from IACTs, with simulated data from the upcoming Cherenkov Telescope Array (CTA), we implement a CNN-RNN network and find no evidence that sorting telescope images by total amplitude improves background rejection performance.

preprint2020arXiv

Live Trojan Attacks on Deep Neural Networks

Like all software systems, the execution of deep learning models is dictated in part by logic represented as data in memory. For decades, attackers have exploited traditional software programs by manipulating this data. We propose a live attack on deep learning systems that patches model parameters in memory to achieve predefined malicious behavior on a certain set of inputs. By minimizing the size and number of these patches, the attacker can reduce the amount of network communication and memory overwrites, with minimal risk of system malfunctions or other detectable side effects. We demonstrate the feasibility of this attack by computing efficient patches on multiple deep learning models. We show that the desired trojan behavior can be induced with a few small patches and with limited access to training data. We describe the details of how this attack is carried out on real systems and provide sample code for patching TensorFlow model parameters in Windows and in Linux. Lastly, we present a technique for effectively manipulating entropy on perturbed inputs to bypass STRIP, a state-of-the-art run-time trojan detection technique.