United States

Deep Convolutional Neural Networks (CNN) are proven to be effective in a variety of classification and regression tasks including underwater soundscape classification. Underwater soundscape classification provides the potential for increased automation and performance for shipboard and autonomous UUV contact detection systems. Although CNN’s are a powerful technology, they have been shown to be vulnerable to adversarial attacks across different input domains. Adversarial attacks function by creating a change to the input that is imperceptible to a human observer but causes the classifier to incorrectly classify the input example. This type of attack is possible on underwater soundscape classification systems. A common approach to audio classification is to transform source audio into spectrogram images to use for classification. A digital attack that intercepts the spectrogram images prior to being input to the classifier is a possible vector of attack. Several established image-based adversarial example generation methods are tested for this purpose. Five methods successfully fooled the target classifier 31% of the time with an epsilon value of 0.005 and over 80% of the time when the epsilon value was increased to 0.01. A more reliable method of attack is to provide the adversarial example as audio input to the system. Such an attack is more desirable than a digital image-based attack for two reasons. An audio-based attack does not make any assumptions on the inner-workings of the classification system (i.e., using spectrogram images as features) and have more potential to be deployed in a physical space. Generating adversarial audio is generally more difficult than adversarial images. This is because humans are especially sensitive to small disturbances in audio that could be caused by delays due to generation time or artifacts from the generation process. This work aims to overcome these obstacles by using a training method that is similar to the training methods used by Generative Adversarial Networks (GAN). Various GAN architectures have been used to create realistic source audio. The training method differs from those used in training GANs by only training the generator network, not both the generator and discriminator. Instead, the target classifier is used in as a static discriminator. Use of the target network as a discriminator makes this a black box attack on the network. Additionally, proposed usage of perceptual evaluation metrics in the loss function, the quality of the generated audio perturbation is increased and the probability of detection by a human observer is reduced. A generative approach decreases the time to create a single adversarial example compared to other audio generation techniques, which rely on an iterative optimization approach. Improved generation speeds further decrease the likelihood of detection by a human observer and increases the potential for the attack to be deployed in a physical space.

NAML 2021

Adversarial Attacks on Underwater Soundscape Classifiers

audio

neural network

classification

attack

adversarial

Naval Information Warfare Center Pacific is partnering with AFCEA San Diego chapter to host the workshop.

The NAML workshop is an opportunity for researchers from Navy research and development centers and our partner organizations to exchange technical ideas and to come together as a team.

The goals of NAML are:

* To spread awareness of current machine learning research relevant to Naval applications

* To connect machine learning researchers with experts in military requirements

* To build and strengthen collaborations within the defense research community

**Watch this video to hear about the AFCEA purpose.**

<iframe width=1280 height=706 frameborder="0" scrolling="no" src="https://screencast-o-matic.com/player/creleVVcvRh?v=6&ff=1&title=0&controls=1" allowfullscreen="true"></iframe>

poster

Publiciy available program acquisition, contracting and award data commonly include many variables per observation. In some cases, the number of variables is greater than the number of observations. This poster summarizes a method to efficiently select multivariate regression predictor variables using the R VSURF random forest package to identify important varaibles prior to applying traditional fitting methods.

Modeling Defense Acqusitions: simplifying regression predictor selection with random forests

Machine learning algorithms embedded in deep level NN (Neural Networks) require large amounts of data that are often unavailable in many existing radar receivers. The proposed NN approach provides a condensed form for training, testing, and processing radar data. The test setup uses synthetically generated pulses from a time of arrival generator. It then derives a rate of time interval change between pulses. These slopes are used for NN training and testing. A total of 20 synthetic signals were used with an 80/20 split for training and testing. The results provide a perspective on the performance with actual emitters, demonstrating an ability to distinguish the Pulse Repetition Interval (PRI) type between single Electromagnetic (EM) wave generators. Synthetic results also show an ability to differentiate between single EM wave generators and multiple EM wave generators. Future work will expand to distinguish between PRI types from multiple generators received simultaneously.

Peak to Peak NN: Condensing Electromagnetic Wave Characteristics for Neural Networks

The US Submarine Navy relies on SONAR for detection and classification of contacts to support navigation and other mission related tasks. The field of deep learning (DL) could be useful in this problem space given that it is the current state of the art approach for image and speech recognition. Supervised learning however is a data hungry process and many Navy problems have limited labeled data. An underwater acoustic classification problem that is likely to have enough labeled samples to investigate the application of DL is recognizing marine mammals from individual clicks. The objective of this project is to apply DL to underwater acoustic transient classification and determine how much training data is required for a DL classifier to compete with an existing baseline approach. This is a collaborative effort between the Naval Undersea Warfare Center (NUWC) Division, Newport, RI (NUWCDIVNPT) and the Naval Surface Warfare Center Carderock Division (NSWCCD). The NUWC research team was able to use a one dimensional convolutional neural network (1D CNN) to ingest raw time-series data previously isolated by a power law detector and achieve classification accuracy as high as 93.7% with minimal optimization of hyper-parameters. As expected, classification accuracy increased as more training data were used. Further analysis into the performance of the network raises concerns on generalization because classification accuracy is not consistent across class or by recording location of sample data. Findings from fiscal year 2020’s efforts highlight the importance of scrutinizing classifiers that show overall good performance, especially in deep learning applications where intractability prevents intuitive awareness of knee cases.

deepBioNet: Acoustic Transient Classifier

Passive identification of underwater sound sources is critical for a variety of applications including surveys of marine mammals and maritime domain awareness. Currently, the Navy can collect large sets of underwater acoustic signals. The cost and challenge lies in correctly labeling the data, which is time consuming and requires subject matter experts. The advent of machine learning makes the labeling process ripe for automation into a semi-supervised workflow. We begin with a labeled set of recordings released by the Scripps Institution of Oceanography (DCLDE 2015 and 2018) from hydrophones placed offshore in Southern California and US East Coast. In DCLDE 2015, five species were identified by experts across three sites with seven hydrophones, providing substantial variability in context and acoustic content. The DCLCE 2018 data is similar, though with nine different species identified across a variety of East Coast sites. Here the intersection of these two data sets is the presence of the Risso’s Dolphin, allowing us to test a classifier for this class on both different backgrounds and with different groups of dolphins that generated the vocalizations. Given the variety of approaches that currently exist for classification, we explore the effect on labeling performance of three fundamentally different models: transfer learning with AlexNet (image processing and classification), an SVM with precomputed acoustic features, and Temporal Convolutional Networks (TCN) with processed and raw timeseries data. Specifically, we explore generalization of these methods (robustness to different backgrounds or placement contexts) when trained in one environment and tested in another. Additionally we studied background suppression strategies and the effect of the sample distribution used to train the model. We found that generalization of the TCN and SVM model was dependent on mitigating the background and providing the correct blend of labeled training data. AlexNet transfer learning performance was found to be consistent despite changes in class balancing and the three background treatments tested.

Automated classification for multiple species of echolocating whales

NAVWAR's Digital Transformation Learning Continuum Program supports the Commander's strategic goal to rapidly build, strengthen and exercise data analytics capabilities across the NAVWAR HQ and affiliated PEO workforces. The Program delivers NAVWAR-mandated training for all hands (Foundations for Data Citizens) and Supervisors (Foundations of Data Analytics). Additionally, the Program offers a direct, "hands-on" workforce experience with advanced analytics through a theory-to-practice Workshop (2-Day), Laboratory (Case Study) and Incubator (Competency/PEO-led Applied Analytics Projects) development progression.


NAVWAR Digital Transformation Learning Continuu

Source localization and characterization are important tasks of passive sonar systems. The variability of the ocean environment alters the propagation of the acoustic signal and therefore affects the overall accuracy of passive sonar if not accounted for. To achieve more accurate results, this study presents a deep learning approach to seabed classification using the noise from surface ships on a single hydrophone. Ship noise spectrograms are used as input for a convolutional neural network to classify between 34 types of seabeds. This work aims to determine the optimal time duration and frequency band of the ship noise spectrogram to predict seabed type with 3-layer convolutional neural networks. The performance using both 1-dimensional and 2-dimensional convolutional kernels is compared. The networks are trained on synthetic data created with a broadband source model for the ship noise and a range-independent, normal mode propagation model to simulate propagation in the shallow ocean for the 34 seabed classes and a wide range of ship speed and closest point of approach. Training is augmented with a broadband model for the wind noise. The neural networks are verified using five-fold cross validation, and then tested using data from a 2017 seabed characterization experiment. Seabed class predictions are compared to measure the impact of altering the time window and frequency band of the input spectrograms. Finding the optimal spectrogram size for use with these networks can improve the overall accuracy and efficiency of using surface ships for seabed classification and, thus, improve passive sonar. [Work Supported by the College of Physical and Mathematical Sciences, Brigham Young University]


Finding Optimal Spectrogram Length 
for CNN Seabed Classification from Surface Ship Noise

Digital maps are important in many naval applications for situational awareness and decision making. Attempts have been made to automate digital map generation, but these regularly fall short in quality and usefulness. For example, digital maps often contain labels that can get occluded at certain zoom levels or as new layers are added. Algorithms that optimize label placement are computationally complex, and automated solutions must rely on heuristic or statistical methods to choose how the labels are distributed. Completely automated solutions are often inferior to maps designed by trained experts and still require extensive editing by an analyst. To address this challenge, we describe an interactive map generation approach that leverages cognitive models and interactive machine learning to improve label placements over purely manual or automated solutions. 

Interactive machine learning (IML) creates a continuous loop of online feedback to improve a machine learning model. These approaches start with little to no data and iteratively improve through interactions with the user. This is useful for digital maps, where optimal label placements often depend on features that cannot always be clearly defined. Using IML, analysts can adjust labels in a map view, supplying the algorithm with feedback the algorithm can use to identify the relevant features and improve its recommendations over time. Due to digital maps having a large feature space, IML may require a great deal of analyst feedback before the generated maps are considered acceptable.

We propose using a cognitive model to train an IML algorithm, decreasing the amount of required time and effort needed from real users. Cognitive architectures, such as ACT-R, are commonly used in human-computer interaction research to simulate human behavior and to generate synthetic training data for machine learning. Cognitive architectures provide a framework for modeling behavior using established cognitive models of perception and memory. This is relevant in determining label placements, because an analyst's decision of where a label should be placed is based on perceptual information (i.e., the location and density of map colors and textures) and heuristic rules about when labels should be moved. A cognitive architecture can simulate an analyst's decision processes about label placements using cues such as saliency, spatial distribution, and color density. Using defined procedural rules, the architecture simulates an analyst iteratively identifying poorly placed labels or cluttered areas and then moving labels as needed. By using a cognitive model to simulate an analyst making label adjustments on a digital map, the IML algorithm can be initialized with some basic information about features important for generating good label placements, without taking an analyst's time. In this way, the system generates better initial recommendations, while still continuing to be fine-tuned by analysts going forward.

Interactive Map Generation with Cognitive Models of Label Placement

The MK 18 program of record uses unmanned underwater vehicles (UUVs) equipped with Side Scan Sonar (SSS) to survey the sea floor looking for ordinance. The SSS data is reviewed by operators to look for ordinance. It is well known that machine learning algorithms are used to automatically detect the ordinance in the SSS data either though post mission analysis or in real time. What is less known and what this talk will cover is how the Unmanned System Simulator (USS) uses ML and AI to create simulated SSS embedded with ordinance to train the operators that evaluate the data. This presentation will describe a novel approach to insert realistic objects into SSS imagery using an AI/ML algorithm to provide operator training and algorithm training

The Unmanned System Simulator: using AI and ML to create simulated sonar data and mine like objects to train fleet operators.

Despite existence of large amounts of unclassified documentation, describing military engagements such as TTPs, historic books etc there is a shortage of formal event data that can be used for M&S purposes. We propose a hybrid AI/ML methodology to extract low-level event data from documents and aggregate them to higher level of abstraction that M&S systems can operate on. The same exact methodology can be used to extract low-level event data in real-world situations from text messages that soldiers exchange on the battlefield to “light the simulation decision tree”, thus linking simulation and actual events together. 


Acquiring realistic training data for modeling and simulation(M&S)

In order to achieve large-scale acceptance of ML/AI across the Navy and DoD, algorithms must be efficient and work well with available hardware. Currently, a large portion of the ML/AI workload is dominated by cloud-based server farms (Google, Amazon, etc.), where massive datasets and computational resources can be leveraged. However, many DoD applications cannot use these services due to limitations in memory and connectivity. Recent growth in the Internet of Things has led to the commercial development of low-SWaP hardware platforms specifically designed for many flavors of ML, including GPUs, neural network accelerators, and neuromorphic processing cores. However, the underlying operation of ML/AI algorithms on these platforms are not well understood. 
Warfighting of the future will be waged not only with bombs and bullets, but also with smart systems through information warfare at the tactical edge. The use of ML/AI as part of information warfare is an area of projected growth for the Navy and DoD. While there is a strong growing workforce with experience in the software and computer science aspects of ML/AI, implementation of this technology into DoD systems will require expertise in the implementation of ML/AI hardware as well. An understanding of the hardware platforms currently available, along with the current trajectory of S&T efforts, will allow scientists and engineers to implement systems with ML/AI technology currently being developed improved SWaP.
The decision of which hardware platform to deploy and implement specific ML/AI algorithms is not always clear. They each have their own advantages and limitations that allow for their maximum use and performance for training and inference but there are relevant metrics such as performance, power efficiency, and usability to aid in a successful implementation of research for real world applications. This paper will explore some of the unique capabilities and advantages of familiar platforms including the NVIDIA Jetson Nano, Raspberry Pi with the Intel Neural Compute Stick, and Google Coral Dev Board. 


Premium content

Adversarial Attacks on Underwater Soundscape Classifiers

Next from NAML 2021

Modeling Defense Acqusitions: simplifying regression predictor selection with random forests

Similar lecture

Adversarial Attack Mitigation Techniques