Researcher profile

Marco Melis

Marco Melis contributes to research discovery and scholarly infrastructure.

ResearcherAffiliation not importedOpen to collaborate

Trust snapshot

Quick read

Trust 15 - UnverifiedVerification L1Unclaimed author
3works
0followers
5topics
4close collaborators

Actions

Decide how to stay connected

Follow researcher0

Identity and collaboration

How to connect with this researcher

Claiming links this public author record to a researcher profile and unlocks direct collaboration workflows.

Log in to claim

Direct collaboration

Open a focused conversation when the fit is right

Claim this author entity first to unlock direct invitations.

Research graph

See the researcher in context

Open full explorer

Inspect adjacent work, topics, institutions and collaborators without jumping out to a separate graph page.

Building this graph slice

BZPEER is loading the nearby papers, people, topics and institutions for this page.

Published work

3 published item(s)

preprint2022arXiv

Gauge-invariant coefficients in perturbative quantum gravity

Heat kernel methods are useful for studying properties of quantum gravity. We recompute here the first three heat kernel coefficients in perturbative quantum gravity with cosmological constant to ascertain which ones are correctly reported in the literature. They correspond to the counterterms needed to renormalize the one-loop effective action in four dimensions. They may be evaluated at arbitrary dimensions $D$, in which case they identify only a subset of the divergences appearing in the effective action for $D\geq 6$. Generically, these coefficients depend on the gauge-fixing choice adopted in quantizing the Einstein-Hilbert action. However, they become gauge-invariant once evaluated on-shell, i.e. using Einstein's field equations with cosmological constant. We identify them and use them as a benchmark for checking alternative approaches to perturbative quantum gravity. One such approach describes the graviton in first-quantization through the use of the action of the ${\cal N}=4$ spinning particle, characterized by four supersymmetries on the worldline and a set of worldline gauge invariances. This description has been used for computing the gauge-invariant coefficients as well. We verify their correctness at $D=4$, but find a mismatch at arbitrary $D$ when comparing with the benchmark fixed earlier. We interpret this result as signaling that the path integral quantization of the ${\cal N}=4$ spinning particle should be amended. We perform this task by fixing the correct counterterm that must be used in the worldline path integral quantization of the ${\cal N}=4$ spinning particle to make it consistent in arbitrary dimensions.

preprint2022arXiv

secml: A Python Library for Secure and Explainable Machine Learning

We present \texttt{secml}, an open-source Python library for secure and explainable machine learning. It implements the most popular attacks against machine learning, including test-time evasion attacks to generate adversarial examples against deep neural networks and training-time poisoning attacks against support vector machines and many other algorithms. These attacks enable evaluating the security of learning algorithms and the corresponding defenses under both white-box and black-box threat models. To this end, \texttt{secml} provides built-in functions to compute security evaluation curves, showing how quickly classification performance decreases against increasing adversarial perturbations of the input data. \texttt{secml} also includes explainability methods to help understand why adversarial attacks succeed against a given model, by visualizing the most influential features and training prototypes contributing to each decision. It is distributed under the Apache License 2.0 and hosted at \url{https://github.com/pralab/secml}.

preprint2020arXiv

Deep Neural Rejection against Adversarial Examples

Despite the impressive performances reported by deep neural networks in different application domains, they remain largely vulnerable to adversarial examples, i.e., input samples that are carefully perturbed to cause misclassification at test time. In this work, we propose a deep neural rejection mechanism to detect adversarial examples, based on the idea of rejecting samples that exhibit anomalous feature representations at different network layers. With respect to competing approaches, our method does not require generating adversarial examples at training time, and it is less computationally demanding. To properly evaluate our method, we define an adaptive white-box attack that is aware of the defense mechanism and aims to bypass it. Under this worst-case setting, we empirically show that our approach outperforms previously-proposed methods that detect adversarial examples by only analyzing the feature representation provided by the output network layer.