SearcharxivSearch

arXiv subjects

Kazuki Koga

Publications and source records attributed to Kazuki Koga.

6 recordsLinked to original sources

Local optimization of weak distance between compact surfaces on special Euclidean group

We consider local optimization of a weak distance between two compact surfaces embedded in the three-dimensional Euclidean space on its special Euclidean group. Identifying those objects with the associated surface measures, their discrepancy is quantified in terms of the inhomogeneous Sobolev norm of negative order via the Plancherel theorem. Then, applying an isometry to one surface corresponds to pushforwarding its surface measure and the distance can be regarded as a function on the Lie group. For appropriate exponents of the Sobolev norm, the second power of the function acquires sufficient differentiability that allows to search for its local minima in a derivative-based framework, and the gradient of the objective function has a favorable structure for efficient implementations using the nonuniform fast Fourier transform. In numerical experiments, we observe convergence of the SR1 trust-region method applied to a few root-finding problems and discuss its connection to a more geometric quantity.

math.OC

Computing weak distance between the 2-sphere and its nonsmooth approximations

A novel algorithm is proposed for quantitative comparisons between compact surfaces embedded in the three-dimensional Euclidian space. The key idea is to identify those objects with the associated surface measures and compute a weak distance between them using the Fourier transform on the ambient space. In particular, the inhomogeneous Sobolev norm of negative order for a difference between two surface measures is evaluated via the Plancherel theorem, which amounts to approximating a weighted integral norm of smooth data on the frequency space. This approach allows several advantages including high accuracy due to fast-converging numerical quadrature rules, acceleration by the nonuniform fast Fourier transform, and parallelization on many-core processors. In numerical experiments, the 2-sphere, which is an example whose Fourier transform is explicitly known, is compared with its icosahedral discretization, and it is observed that the piecewise linear approximations converge to the smooth object at the quadratic rate up to small truncation.

math.NA

Numerical reparametrization of periodic planar curves via curvature interpolation

A novel static algorithm is proposed for numerical reparametrization of periodic planar curves. The method identifies a monitor function of the arclength variable with the true curvature of an open planar curve and considers a simple interpolation between the object and the unit circle at the curvature level. Since a convenient formula is known for tangential velocity that maintains the equidistribution rule with curvature-type monitor functions, the strategy enables to compute the correspondence between the arclength and another spatial variable by evolving the interpolated curve. With a certain normalization, velocity information in the motion is obtained with spectral accuracy while the resulting parametrization remains unchanged. Then, the algorithm extracts a refined representation of the input curve by sampling its arclength parametrization whose Fourier coefficients are directly accessed through a simple change of variables. As a validation, improvements to spatial resolution are evaluated by approximating the invariant coefficients from downsampled data and observing faster global convergence to the original shape.

math.NA

Simple black-box universal adversarial attacks on medical image classification based on deep neural networks

Universal adversarial attacks, which hinder most deep neural network (DNN) tasks using only a small single perturbation called a universal adversarial perturbation (UAP), is a realistic security threat to the practical application of a DNN. In particular, such attacks cause serious problems in medical imaging. Given that computer-based systems are generally operated under a black-box condition in which only queries on inputs are allowed and outputs are accessible, the impact of UAPs seems to be limited because well-used algorithms for generating UAPs are limited to a white-box condition in which adversaries can access the model weights and loss gradients. Nevertheless, we demonstrate that UAPs are easily generatable using a relatively small dataset under black-box conditions. In particular, we propose a method for generating UAPs using a simple hill-climbing search based only on DNN outputs and demonstrate the validity of the proposed method using representative DNN-based medical image classifications. Black-box UAPs can be used to conduct both non-targeted and targeted attacks. Overall, the black-box UAPs showed high attack success rates (40% to 90%), although some of them had relatively low success rates because the method only utilizes limited information to generate UAPs. The vulnerability of black-box UAPs was observed in several model architectures. The results indicate that adversaries can also generate UAPs through a simple procedure under the black-box condition to foil or control DNN-based medical image diagnoses, and that UAPs are a more realistic security threat.

cs.CV

Signal processing approach to mesh refinement in simulations of axisymmetric droplet dynamics

We propose a novel mesh refinement scheme based on signal processing for boundary integral simulations of inviscid droplet dynamics with axial symmetry. A key idea is to directly access the Fourier coefficients of a principal curvature as a function of the arclength through a natural change of variables. The trapezoidal rule is applied to those Fourier-type integrals and the resulting formula fits in the framework of the non-uniform fast Fourier transform. This observation enables to efficiently use an envelope analysis and smoothing filter to generate guidelines for mesh refinement in two singularity formation scenarios. Applications also include a non-iterative construction of the uniform parametrization for an important class of plane curves, which is used in a convergence study of the time-stepping procedure implemented in the previous work by Nitsche and Steen [J. Comput. Phys. 200 (2004) 299].

math.NA

Vulnerability of deep neural networks for detecting COVID-19 cases from chest X-ray images to universal adversarial attacks

Under the epidemic of the novel coronavirus disease 2019 (COVID-19), chest X-ray computed tomography imaging is being used for effectively screening COVID-19 patients. The development of computer-aided systems based on deep neural networks (DNNs) has been advanced, to rapidly and accurately detect COVID-19 cases, because the need for expert radiologists, who are limited in number, forms a bottleneck for the screening. However, so far, the vulnerability of DNN-based systems has been poorly evaluated, although DNNs are vulnerable to a single perturbation, called universal adversarial perturbation (UAP), which can induce DNN failure in most classification tasks. Thus, we focus on representative DNN models for detecting COVID-19 cases from chest X-ray images and evaluate their vulnerability to UAPs generated using simple iterative algorithms. We consider nontargeted UAPs, which cause a task failure resulting in an input being assigned an incorrect label, and targeted UAPs, which cause the DNN to classify an input into a specific class. The results demonstrate that the models are vulnerable to nontargeted and targeted UAPs, even in case of small UAPs. In particular, 2% norm of the UPAs to the average norm of an image in the image dataset achieves >85% and >90% success rates for the nontargeted and targeted attacks, respectively. Due to the nontargeted UAPs, the DNN models judge most chest X-ray images as COVID-19 cases. The targeted UAPs make the DNN models classify most chest X-ray images into a given target class. The results indicate that careful consideration is required in practical applications of DNNs to COVID-19 diagnosis; in particular, they emphasize the need for strategies to address security concerns. As an example, we show that iterative fine-tuning of the DNN models using UAPs improves the robustness of the DNN models against UAPs.

cs.CV