Abstract: Embodiments for automatic data preprocessing for a machine learning operation by a processor. For each data instance in a set of data instances, a sequence of actions may be automatically learned in a reinforcement learning environment to be applied for preprocessing each data instance separately. Each of the data instances may be preprocessed for use by one or more machine learning models according to the learned sequence of actions.

Abstract: Various embodiments are provided for securing machine learning models by one or more processors in a computing system. One or more hardened machine learning models that are secured against adversarial attacks are provided by applying one or more of a plurality of combinations of selected preprocessing operations from one or more machine learning models, a data set used for hardening the one or more machine learning models, a list of preprocessors, and a selected number of learners.

Abstract: Adversarial attack detection operations may be applied on one or more deep generative models for defending deep generative models from adversarial attacks. The adversarial attack may be detected on the one or more deep generative models based on the one or more of a plurality of adversarial attack detection operations. The one or more deep generative models may be sanitized based on the adversarial attack.

Abstract: Techniques facilitating automatic feature extraction from a relational database are provided. In an embodiment, a method can include generating an entity graph based on a relational database, wherein the entity graph comprises a first node associated with a first table in the relational database and a second node associated with a second table in the relational database. In another embodiment, the method can include joining the first table and the second table based on an edge between the first table and the second table defined by the entity graph, wherein a resulting joined table is connected by a column of data. In another embodiment, the method can include extracting a feature from the column of data using a data mining algorithm selected from a set of data mining algorithms based on a type of data in the column of data.

Abstract: Methods and systems are provided for federated learning among a federation of machine learning models in a computer system. Such a method includes, in at least one node computer of the system, deploying a federation model for inference on local input data samples at the node computer to obtain an inference output for each data sample, and providing the inference outputs for use as inference results at the node computer. The method further comprises, in the system, for at least a portion of the local input data samples, obtaining an inference output corresponding to each local input data sample from at least a subset of other federation models, and using the inference outputs from the federation models to provide a standardized inference output corresponding to an input data sample at the node computer for assessing performance of the model deployed at that computer.

Abstract: Disclosed are techniques for determining data relationships between privacy-restricted datapoints, sourced over a computer network, which require data privacy measures concealing at least some datapoints from other clients in the network that the datapoint respectively do not originate from. A first client encrypts a first datapoint with a public key of a public/private encryption scheme and communicates it to the second client along with the public key. The second client encrypts a corresponding second datapoint with the public key, then determines a relationship between the two encrypted datapoints, and communicates the determined relationship to a central client along with the public key. Random noise is encrypted by the central client and added to the determined relationship, then sent together to the first client, followed by decryption by the first client using the private key. The central client extracts the random noise after receiving the decrypted determined relationship.

Abstract: Various embodiments are provided for automating decision making for a neural architecture search by one or more processors in a computing system. One or more specifications may be automatically selected for a dataset, tasks, and one or more constraints for a neural architecture search. The neural architecture search may be performed based on the one or more specifications. A deep learning model may be suggested, predicted, and/or configured for the dataset, the tasks, and the one or more constraints based on the neural architecture search.

Abstract: A method, computer system, and a computer program product for text data protection is provided. The present invention may include receiving a text data. The present invention may also include identifying a portion of the received text data having a highest impact on a first confidence score associated with a target model prediction. The present invention may further include generating at least one semantically equivalent text relative to the identified portion of the received text data. The present invention may also include determining that the generated at least one semantically equivalent text produces a second confidence score associated with the target model prediction that is less than the first confidence score associated with the target model prediction. The present invention may further include generating a prompt to suggest modifying the identified portion of the received text data using the generated at least one semantically equivalent text.

Abstract: Disclosed are techniques for determining data relationships between privacy-restricted datapoints, sourced over a computer network, which require data privacy measures concealing at least some datapoints from other clients in the network that the datapoint respectively do not originate from. A first client encrypts a first datapoint with a public key of a public/private encryption scheme and communicates it to the second client along with the public key. The second client encrypts a corresponding second datapoint with the public key, then determines a relationship between the two encrypted datapoints, and communicates the determined relationship to a central client along with the public key. Random noise is encrypted by the central client and added to the determined relationship, then sent together to the first client, followed by decryption by the first client using the private key. The central client extracts the random noise after receiving the decrypted determined relationship.

Abstract: Embodiments for automatic feature learning for predictive modeling in a computing environment by a processor. A first table and a second table are joined based on an edge between the first table and the second table defined by an entity graph thereby creating a resulting joined table that is connected by a column of data. The resulting joined table is used as an input into one or more neural network operations that transform the resulting joined table to one or more features to predict a target variable.

Abstract: A computing device configured for automatic selection of model parameters includes a processor and a memory coupled to the processor. The memory stores instructions to cause the processor to perform acts including providing an initial set of model parameters and initial condition information to a model based on historical data. A model generates data based on the model parameters and the initial condition information. After determining whether the model-generated data is similar to an observed data, updated model parameters are selected for input to the model based on the determined similarity.

Abstract: Techniques of facilitating deep learning model rescaling by computing devices. In one example, a system can comprise a processor that executes computer executable components stored in memory. The computer executable components can comprise: a rescaling component; and a forecasting component. The rescaling component can determine a scaling ratio that maps low mesh resolution predictive data output by a partial differential equation (PDE)-based model for a sub-domain to high-resolution observational or ground-truth data for a domain comprising the sub-domain. The forecasting component can generate high mesh resolution predictive data for the domain with a machine-learning model using input data of the PDE-based model and the scaling ratio.

Abstract: One or more computer processors transmit a machine learning model and an associated loss function to a worker, wherein the worker isolates private data. The one or more computer processors receive a plurality of encrypted gradients computed utilizing the transmitted machine learning model, the associated loss function, and the isolated private data. The one or more computer processors generate a plurality of adversarial perturbations, wherein the plurality of adversarial perturbations includes true perturbations and false perturbations. The one or more computer processors obfuscate the generated plurality of adversarial perturbations. The one or more computer processors transmit the obfuscated adversarial perturbations to the worker. The one or more computer processors harden the machine learning model utilizing the transmitted obfuscated adversarial perturbations and the private data.

Abstract: A computer-implemented method, a computer program product, and a computer system for optimally balancing deployment of a deep learning based surrogate model and a physics based mathematical model in simulating a complex problem. One or more computing devices or servers compare results of running the deep learning based surrogate model with results of partially running the physics based mathematical model or with observations. One or more computing devices or severs output the results of running the deep learning based surrogate model as system outputs of simulating the complex problem, in response to determining that the deep learning based surrogate model is reliable. One or more computing devices or servers output results of running the physics based mathematical model as the system outputs of simulating the complex problem, in response to determining that the deep learning based surrogate model is not reliable.

Abstract: A system and method for automatically generating deep neural network architectures for time series prediction. The system includes a processor for: receiving a prediction context associated with a current use case; based on the associated prediction context, selecting a prediction model network configured for a current use case time series prediction task; replicating the selected prediction model network to create a plurality of candidate prediction model networks; inputting a time series data to each of the plurality of the candidate prediction model network; train, in parallel, each respective candidate prediction model network of the plurality with the input time series data; modifying each of the plurality of the candidate prediction model network by applying a respective different set of one or more model parameters while being trained in parallel; and determine a fittest modified prediction model network for solving the current use case time series prediction task.

Abstract: A method, computer system, and a computer program product for text data protection is provided. The present invention may include receiving a text data. The present invention may also include identifying a portion of the received text data having a highest impact on a first confidence score associated with a target model prediction. The present invention may further include generating at least one semantically equivalent text relative to the identified portion of the received text data. The present invention may also include determining that the generated at least one semantically equivalent text produces a second confidence score associated with the target model prediction that is less than the first confidence score associated with the target model prediction. The present invention may further include generating a prompt to suggest modifying the identified portion of the received text data using the generated at least one semantically equivalent text.

Abstract: One or more hardened machine learning models are secured against adversarial attacks by adding adversarial protection to one or more previously trained machine learning models. To generate the hardened machine learning models, the previously trained machine learning models are retrained and extended using preprocessing layers or using additional network layers which test model performance on benign or adversarial samples. A rollback strategy is additionally implemented to retain intermediate model states during the retraining to provide recovery if a training collapse is detected.

Abstract: A method for generating an operational rule associated with a building management system includes identifying, with a processing device, a first pattern associated with a series of operational observations corresponding to a property of the building management system, correlating a first contextual attribute with the first pattern, and deriving the operational rule at least in part based on the first pattern and the first contextual attribute.

Abstract: Various embodiments are provided for automated evaluation of machine learning models in a computing environment by one or more processors in a computing system. A level of robustness of a machine learning model against adversarial whitebox operations may be evaluated and determined by applying a data set used for testing the machine learning model, one or more adversarial operation objectives, an adversarial threat model, and a selected number of hyperparameters. Results from the adversarial operation may be analyzed and a modified machine learning model may be generated while performing the evaluating and determining.

Abstract: Embodiments for providing adversarial protection to computing display devices by a processor. Security defenses may be provided on one or more image display devices against automated media analysis by using adversarial noise, an adversarial patch, or a combination thereof.