Source author record

Kazuki Koga

Kazuki Koga appears in the imported research catalog. Authorship, coauthor and topic links are available while profile ownership is still unclaimed.

ResearcherUnclaimed source record

Computer Vision Cryptography and Security Machine Learning math.NA Numerical Analysis

Catalog footprint

What is connected

2works

5topics

1close collaborators

Actions

Connect this record

Open graph Browse works

Inspect adjacent papers, topics, institutions and collaborators without losing the researcher page.

Building this map preview

BZPEER is loading the nearby papers, people, topics and institutions for this page.

preprint2022arXiv

Numerical reparametrization of periodic planar curves via curvature interpolation

A novel static algorithm is proposed for numerical reparametrization of periodic planar curves. The method identifies a monitor function of the arclength variable with the true curvature of an open planar curve and considers a simple interpolation between the object and the unit circle at the curvature level. Since a convenient formula is known for tangential velocity that maintains the equidistribution rule with curvature-type monitor functions, the strategy enables to compute the correspondence between the arclength and another spatial variable by evolving the interpolated curve. With a certain normalization, velocity information in the motion is obtained with spectral accuracy while the resulting parametrization remains unchanged. Then, the algorithm extracts a refined representation of the input curve by sampling its arclength parametrization whose Fourier coefficients are directly accessed through a simple change of variables. As a validation, improvements to spatial resolution are evaluated by approximating the invariant coefficients from downsampled data and observing faster global convergence to the original shape.

preprint2021arXiv

Simple black-box universal adversarial attacks on medical image classification based on deep neural networks

Universal adversarial attacks, which hinder most deep neural network (DNN) tasks using only a small single perturbation called a universal adversarial perturbation (UAP), is a realistic security threat to the practical application of a DNN. In particular, such attacks cause serious problems in medical imaging. Given that computer-based systems are generally operated under a black-box condition in which only queries on inputs are allowed and outputs are accessible, the impact of UAPs seems to be limited because well-used algorithms for generating UAPs are limited to a white-box condition in which adversaries can access the model weights and loss gradients. Nevertheless, we demonstrate that UAPs are easily generatable using a relatively small dataset under black-box conditions. In particular, we propose a method for generating UAPs using a simple hill-climbing search based only on DNN outputs and demonstrate the validity of the proposed method using representative DNN-based medical image classifications. Black-box UAPs can be used to conduct both non-targeted and targeted attacks. Overall, the black-box UAPs showed high attack success rates (40% to 90%), although some of them had relatively low success rates because the method only utilizes limited information to generate UAPs. The vulnerability of black-box UAPs was observed in several model architectures. The results indicate that adversaries can also generate UAPs through a simple procedure under the black-box condition to foil or control DNN-based medical image diagnoses, and that UAPs are a more realistic security threat.