TinySAM : Pushing the Boundaries for Segment Anything Model

TinySAM : Pushing the Boundaries for Segment Anything Model

Object segmentation is a foundational and critically important field in modern computer vision. It plays a vital role in applications requiring extensive visual components, such as object localization and identification, and demands real-time, fast, and accurate segmentation. This importance has made object segmentation a consistently hot research topic, with significant work done in areas like instance segmentation, semantic segmentation, and panoptic segmentation.

With the evolution of object segmentation, the Segment Anything Model (SAM) has emerged as a remarkable tool, showcasing outstanding segmentation abilities and quickly being adopted in various computer vision applications. Frameworks using a pre-trained SAM architecture have achieved impressive performance in downstream vision tasks. However, despite its capabilities and high accuracy in segmentation tasks, SAM's complex and heavy architecture necessitates substantial computational power, hindering its implementation on computationally constrained devices.

Addressing SAM’s computational challenges, researchers have developed the Tiny Segment Anything Model (TinySAM), which retains the zero-shot performance of the original framework while being more lightweight. TinySAM uses a full-stage knowledge distillation method with online hard prompts to create a more efficient student model. Post-training quantization adapted to promptable segmentation tasks further reduces computational needs. Additionally, TinySAM's design aims for hierarchical segmentation, almost doubling the inference speed without compromising performance.

This article delves into the TinySAM framework, exploring its foundational principles, architecture, and performance compared to other state-of-the-art segmentation frameworks. Let’s explore these aspects in more detail.

TinySAM : Efficient Segment Anything Model

The Segment Anything Model has helped in the rapid progress of several computer vision applications owing to its commendable segmentation capabilities coupled with a massive segmentation dataset that houses over 11 million images and over a billion image masks. Owing to its exceptional performance on tasks segmenting objects with arbitrary categories and shapes, it serves as the foundation for frameworks performing downstream tasks like image inpainting, object tracking, 3D vision, and more. Furthermore, the Segment Anything Model also offers remarkable zero-shot segmentation performance that has benefitted sensitive industries that work with a limited amount of data including the medical research and medical imaging industries.

Although one cannot question the remarkable segmentation capabilities offered by the Segment Anything Model on a wide array of downstream vision tasks, it does have its downside in terms of a complex architectural overload, high computational requirements, and significant operational costs. For a system running on a modern GPU, the inference time of a SAM model can be as high as up to 2 seconds for a 1024×1024 image. As a result, it is a highly difficult task to implement SAM applications on devices with limited computational abilities. To overcome this hurdle, recent works like MobileSAM and FastSAM have tried to develop a SAM model with more computational efficiency. The MobileSAM framework attempts to replace the heavy component in the image encoder with the architecture of the TinyViT framework whereas the FastSAM model transfers the segment task to an instance segmentation task with only one category with the YoloV8 model. Although these methods were able to achieve some level of success in terms of reducing the computational requirements, they could not maintain the performance especially on downstream zero-shot tasks.

TinySAM or the Tiny Segment Anything Model is an attempt to reduce the computational requirement of the current SAM model without hindering the performance on zero-shot downstream tasks. Furthermore, the TinySAM framework proposes to implement a full-stage knowledge distillation method in its architecture with the aim of improving the ability of the compact student network. The TinySAM framework distills the student network in an end to end manner under the supervision of the teacher network from different stages. To boost performance further, the framework allows the distillation process to attend more to hard examples by implementing an additional online hard prompt sampling strategy. Furthermore, to additionally reduce computational costs, the TinySAM framework exposes the promptable segmentation tasks to post-training quantization components.

The major chunk of the computation requirement of a Segment Anything Model is because the model generates massive masks from the grid prompt points to segment everything in the image. To overcome the computational requirement of this segmentation strategy, the TinySAM framework employs a hierarchical segment everything strategy that almost doubles the inference speed without degrading the performance. With these methods employed in its architecture, the TinySAM framework offers significant reduction in computational requirements, and sets new limits for efficient segment anything tasks.

TinySAM : Architecture and Methodology

Before we talk about the architecture and methodology of the TinySAM framework, it is important to first have a look at its predecessor, the SAM framework. Ever since its introduction, the Segment Anything Model has demonstrated remarkable performance, versatility, and generalization capabilities across a range of downstream vision and object segmentation tasks.

At its core, the SAM model consists of three subnetworks: the prompt encoder, the image encoder, and the mask decoder. The primary aim of the prompt encoder is to encode the arbitrary shaped masks, input points and boxes, and free form text with positional information. The image encoder is a heavy ViT or vision transformer based network that extracts the input image into embeddings. The model uses different networks to process the geometric and the text prompts. Finally, the mask decoder contains a two-way transformer that receives the output of the prompt and the image encoder to generate the final mask prediction. With the dataset, the SAM framework demonstrates remarkable high quality segmentation capabilities for objects irrespective of their shape and category. Furthermore, the Segment Anything Model demonstrates remarkable performance and efficiency across zero-shot downstream vision tasks including object proposal, edge detection, text to mask prediction, and instance segmentation. Owing to its high quality segmentation abilities, and flexible prompt offerings, the SAM frameworks form the foundation for vision applications. With that being said, one cannot ignore the high computational requirement of the traditional SAM architecture with a large number of parameters making it almost impossible for developers to deploy SAM based applications on devices with constrained resources.

Knowledge Distillation

Knowledge distillation is an important approach to boost the performance of compact networks during the training phase. The knowledge distillation method that uses the output of the teacher network to supervise the training of the lightweight student network. The knowledge distillation method can be split into two subcategories: distillation for intermediate features, and distillation for network outputs, with a majority of research work around knowledge distillation focusing on image classification tasks.

With that being said, the following figure demonstrates the generic architecture of the TinySAM framework along with the performance overview on zero-shot instance segmentation tasks.

In the first stage, the TinySAM framework implements knowledge distillation designed specifically for the SAM framework, and to activate the distillation process further, the model uses an online hard prompt sampling to mine the hard knowledge to the student network from the teacher network. In the second stage, the TinySAM framework adapts the post-training quantization method to promptable segmentation tasks and implements it on the lightweight student network. Finally, the model implements the hierarchical segment everything inference mode designed for segmentation tasks resulting in doubling the inference speed with negligible accuracy loss.

Full-Stage Knowledge Distillation

As mentioned earlier, the Segment Anything Model consists of three sub-networks at its core: the prompt encoder, the image encoder, and the mask decoder, with the image encoder component built on a vision transformer, and having high computational requirements. To tackle this issue, the MobileSAM framework replaced the vision transformer with a TinyViT or Tiny Vision Transformer, although the substitution wasn’t effective given the significant performance decay. To ensure no performance decay, the TinySAM framework implements a full stage knowledge distillation method that guides the lightweight image encoder from the learning level to the multiple knowledge level. In addition to the conventional loss between the ground-truth labels and the predicted results, the TinySAM framework introduces numerous distillation losses during different stages as shown in the following figure.

Quantization

Model Quantization is a popular approach in computer vision frameworks, and is used to compress the model by quantizing weights or activations from higher to lower bandwidth in an attempt to reduce computational complexity and storage requirements without degrading the output quality significantly.

The primary aim of quantization in TinySAM is to project the floating point tensor to the bit integer tensor using a scaling factor with the metric for measuring the distance between the matrix multiplication and the quantized matrix playing a vital role for optimizing the scaling factor.

Hierarchical Segment Anything

The Segment Anything Model proposes to use an automatic mask generator that samples points as a grid to segment everything in the image. However, it has been indicated that the use of dense point grid results in over-fine grained segmentation outputs and the process requires massive computational requirements and incurs high operational costs. Furthermore, on one end, too many sampling points for a complete object might result in different sections of the object to be segmented incorrectly as separate masks whereas on the other end, the time cost of the everything mode inference is primarily due to the reason that the image encoder has been shrinkled significantly. To reduce the operational cost of the everything mode, the TinySAM framework uses a hierarchical mask generation approach, with the difference in the strategy with the original SAM framework demonstrated in the following image.

Different from the approach implemented in the original SAM framework, the TinySAM model uses only 25% points on each side, thus utilizing only 1/16 of the available points in the original setting. The model then infers the mask decoder and the prompt encoder with these prompts and gets the output. The model then filters some masks with confidence exceeding a certain threshold, and masks the corresponding locations as areas for potential final predictions. Since the model treats these regions as the segmentation result of instances with high confidence, it has no need to generate point prompts. The strategy not only helps in preventing over-fine grained segmentation of the object but it also helps in bringing down the operational costs and computational requirements significantly. The framework then merges and post-processes the results of these two rounds to obtain the final masks.

TinySAM : Experiments and Results

To accelerate the distillation process, the TinySAM framework computes and stores the image embeddings from the teacher network in advance, owing to which it is not mandatory for the model to compute the heavy image encoder of the teacher network repeatedly during the training phase anymore. For post training quantization, the TinySAM framework quantizes all the matrix multiply layers, the convolution layers, the deconvolution layers, and the linear layers, with the model using chanel-wise scaling factors for both the convolution and the deconvolution layers. For the matrix multiply layers, the model implements head-wise scaling factors whereas for the linear layers, the model implements linear-wise scaling factors. The model also conducts evaluation on zero-shot downstream tasks.

For instance segmentation tasks in a zero-shot setting, the TinySAM framework follows the experimental settings of its predecessor, the Segment Anything Model, and uses object detection results of the Vision Transformer Det-H or VitDet-H framework for instance segmentation. As demonstrated in the following image, the TinySAM framework outperforms existing methods in terms of instance segmentation accuracy and the FLOPs score.

Furthermore, the qualitative performance of the TinySAM model is demonstrated in the following image for zero-shot instance segmentation with the green box representing the box prompts.

In terms of zero-shot points valid mask evaluation, the TinySAM model outperforms the MobileSAM framework significantly on different datasets, and delivers substantially better results when a fewer number of points are utilized as prompts by the framework.

Furthermore, the following table summarizes the results of the acceleration and decrease in computational requirements achieved as a result of the hierarchical everything mode strategy. The model applies the same stability score and threshold value with different strategies for a fair comparison, and the results are summarized below.

Final Thoughts

In this article, we have talked about TinySAM, a proposed framework that pushes the boundaries for segmenting any task, and obtains an efficient model architecture with less computational requirements and accuracy at par with the original SAM framework. TinySAM or the Tiny Segment Anything Model that maintains and delivers the zero-shot performance of the original framework. The TinySAM framework first implements a full-stage knowledge distillation method that uses online hard prompts to distill a lightweight student model. The TinySAM framework then adapts the post-training quantization to promptable segmentation tasks that further helps in reducing the computational requirements. Furthermore, the framework also aims to segment everything hierarchically that almost doubles the inference speed without affecting the performance.

I’m a ChatGPT pro but this quick course taught me new tricks, and you can take it for free

Businessman typing on laptop in office. Everything around is made of purple and blue colors.

Let's continue to explore free online courses designed to help you up your AI game. Earlier, I wrote about graphics-related generative AI courses from courseware provider Udemy. This time, we're looking at text-based generative AI tools and how to get the most out of them.

Udemy is a courseware provider that distributes educational content from individual trainers, who are vetted through the use of student review ratings. Udemy's courses are sold individually, often at a decent discount off the list price. Alternatively, you can sign up for Udemy's $20-a-month plan, an all-you-can-eat buffet of tasty learning goodness.

Also: I turned my laptop into a desktop PC and I've never been more productive

Udemy offers a 30-day free trial, so if you're not in the mood to pay for your AI learnings, you can binge as many courses as you want within those 30 days and cancel before the renewal date. Since most courses are between three and 15 hours, a dedicated student can get in a lot of learning during that free trial period. Of course, you may decide you like the service enough to continue subscribing and learning.

Interesting Udemy AI courses to check out

I spent some time in Steve Ballinger's Complete ChatGPT Course For Work 2023 (Ethically)! and found it quite helpful. Clocking in at a little over two hours, this fast-moving course covered quite a bit, including how to get the most out of ChatGPT at work, and how to do that ethically.

Also: The best AI image generators: Tested and reviewed

Most of the lessons are only 3-10 minutes long, but they're packed with helpful tips. My two favorites were the sessions on using ChatGPT for translation and for social media posts. I often use Google's built-in translation, but that doesn't work for documents not found via Google. Sometimes I need to read an academic paper that's published in another language. It turns out ChatGPT can translate those (although there are length limits).

Another helpful tip involved social media posts. I don't want to have ChatGPT write my words for me, but the course showed how you can use ChatGPT to suggest social posting themes. I like that. You can feed it an article or blog post, and then ask ChatGPT for various social media approaches. It was powerful, and he taught the basics in less than four minutes.

Ballinger is an enthusiastic teacher. My favorite part was the 11-minute segment he calls "Hot Tips" — a handy, rapid-fire list of suggestions.

Here's a list of courses you might find helpful:

  • ChatGPT Masterclass: ChatGPT Guide for Beginners to Experts!: Gain a professional understanding of ChatGPT, and walk away with the ability to produce high-quality content seamlessly and grow earning potential.
  • The Complete Prompt Engineering for AI Bootcamp (2023): This is a one-stop shop for learning to become a Prompt Engineer and gaining insights on GPT-4, Stable Diffusion, and GitHub Copilot.
  • ChatGPT: Complete ChatGPT Course For Work 2023 (Ethically)!: Learn how to effectively use ChatGPT — while away from the workplace — and enhance your professional life.
  • ChatGPT Masterclass – Build Solutions and Apps with ChatGPT: Learn how to use ChatGPT to increase productivity, and how to build real-life solutions and applications from scratch.
  • ChatGPT Masters: Generative AI, Prompt Engineering, Chat GPT: Learn how to use ChatGPT for various tasks, such as finding keywords, creating outlines, writing articles, generating title ideas, and developing marketing strategies.
  • Master Generative AI: Automate Content Effortlessly with AI: Learn the basics of AI including prompt engineering techniques, and how to achieve the best results with text-to-text and text-to-image generation.
  • Discover, Validate & Launch New Business Ideas with ChatGPT: Learn how to generate startup ideas, evaluate their potential, and test them with customers in real life.
  • ChatGPT 101: Learn ChatGPT Prompts & ChatGPT Smart Tips: Learn the basics, such as how to use ChatGPT's interface effectively, and tips and tricks for automating mundane tasks.

More AI learning opportunities

Over the past few months, I've spotlighted courses from IBM, Amazon, OpenAI, and DeepLearning. Here are those articles:

  • I'm taking AI image courses for free on Udemy with this little trick
  • Have 10 hours? IBM will train you in AI fundamentals — for free
  • I took this free AI course for developers in one weekend and highly recommend it
  • I spent a fascinating weekend with Amazon's free AI courses

Go ahead and dig into one or more Udemy courses. Let me know what you think in the comments below.

You can follow my day-to-day project updates on social media. Be sure to subscribe to my weekly update newsletter on Substack, and follow me on Twitter at @DavidGewirtz, on Facebook at Facebook.com/DavidGewirtz, on Instagram at Instagram.com/DavidGewirtz, and on YouTube at YouTube.com/DavidGewirtzTV.

Artificial Intelligence

Google saves your conversations with Gemini for years by default

Google saves your conversations with Gemini for years by default Kyle Wiggers 9 hours

Don’t type anything into Gemini, Google’s family of GenAI apps, that’s incriminating — or that you wouldn’t want someone else to see.

That’s the PSA (of sorts) today from Google, which in a new support document outlines the ways in which it collects data from users of its Gemini chatbot apps for the web, Android and iOS.

Google notes that human annotators routinely read, label and process conversations with Gemini — albeit conversations “disconnected” from Google Accounts — to improve the service. (It’s not clear whether these annotators are in-house or outsourced, which might matter when it comes to data security; Google doesn’t say.) These conversations are retained for up to three years, along with “related data” like the languages and devices the user used and their location.

Now, Google affords users some control over which Gemini-relevant data is retained — and how.

Switching off Gemini Apps Activity in Google’s My Activity dashboard (it’s enabled by default) prevents future conversations with Gemini from being saved to a Google Account for review (meaning the three-year window won’t apply). Individual prompts and conversations with Gemini, meanwhile, can be deleted from the Gemini Apps Activity screen.

But Google says that even when Gemini Apps Activity is off, Gemini conversations will be saved to a Google Account for up to 72 hours to “maintain the safety and security of Gemini apps and improve Gemini apps.”

“Please don’t enter confidential information in your conversations or any data you wouldn’t want a reviewer to see or Google to use to improve our products, services, and machine learning technologies,” Google writes.

To be fair, Google’s GenAI data collection and retention policies don’t differ all that much from those of its rivals. OpenAI, for example, saves all chats with ChatGPT for 30 days regardless of whether ChatGPT’s conversation history feature is switched off, excepting in cases where a user’s subscribed to an enterprise-level plan with a custom data retention policy.

But Google’s policy illustrates the challenges inherent in balancing privacy with developing GenAI models that feed on user data to self-improve.

Liberal GenAI data retention policies have landed vendors in how water with regulators in the recent past.

Last summer, the FTC requested detailed information from OpenAI on how the company vets data used for training its models, including consumer data — and how that data’s protected when accessed by third parties. Overseas, Italy’s data privacy regulator, the Italian Data Protection Authority, said that OpenAI lacked a “legal basis” for the mass collection and storage of personal data to train its GenAI models.

As GenAI tools proliferate, organizations are growing increasingly wary of the privacy risks.

A recent survey from Cisco found that 63% companies have established limitations on what data can be entered into GenAI tools. while 27% have banned GenAI altogether. The same survey revealed that 45% of employees have entered “problematic” data into GenAI tools including employee information and non-public files about their employer.

OpenAI, Microsoft, Amazon, Google and others offer GenAI products geared toward enterprises that explicitly don’t retain data for any length of time, whether for model training or any other purpose. Consumers though — as is often the case — get the short end of the stick.

Rob Gurzeev, CEO & Co-Founder of CyCognito – Interview Series

Rob Gurzeev, CEO and Co-Founder of CyCognito, has led the development of offensive security solutions for both the private sector and intelligence agencies.

Prior to founding CyCognito, he was Director of Offensive Security and head of R&D at C4 Security (acquired by Elbit Systems) and the CTO of the Product Department of the 8200 Israeli Intelligence Corps. Honors that he received as an Israel Defense Forces Officer included Award for Excellence, the Creative Thinking Award and the Source of Life Award.

CyCognito was founded by veterans of national intelligence agencies who understand how attackers exploit blind spots and joined by experienced management from some of the most trusted cybersecurity companies.

What initially attracted you to cybersecurity?

I first became interested in technology around the age of 13 or 14. I started getting into IRC channels with people curious about technology and what was called “hacking” at the time.

People back then were experimenting with all kinds of interesting things like cryptography in messenger apps. They were also experimenting with file sharing. Kids were pranking their friends by sending an executable file that would trigger a funny action of some kind. If you think about it, this was the basis for what we today call ‘social engineering’ attacks.

This all made me think: what if a person with bad intentions got a hold of this technology for malicious purposes?

These early experiences are what kicked off my career in security. I eventually landed in the Israeli Unit 8200 Intelligence Force doing reconnaissance work, and later co-founded CyCognito.

Could you share the genesis story behind CyCognito?

CyCognito was founded on the awareness that attackers are always ahead of defenders. They are smart, relentless and always seeking the path of least resistance. And while all attackers need is one weak spot to break through, security teams have to secure every possible point of entry in an ever-growing, always-evolving attack surface. It’s quite the challenge.

To compound the problem, most organizations have potential points of entry unseen by security teams but easily discoverable by threat actors.

One day, I sat down with my Co-founder, Dima Potekhin and we set out to shift the paradigm where instead of deploying agents or instructing a port scanner to scan a few known IP ranges, we would create a solution that worked like a world-class attacker, meaning it would begin knowing only a company’s name and then proceed to identify the assets most at risk and the most tempting open pathways.

We wanted to simulate an attacker's offensive operation, starting from step one, where the attacker knows only the target company’s name and their goal is to get access to sensitive data.

So, In 2017, we took our national intelligence agency experience and began to make this happen with the mission of helping organizations prevent breaches, by continuously mapping their external exposure blind spots and finding the paths of least resistance into their internal networks. This required leveraging not just advanced offensive cyber knowledge, but also modern technology that is still quite rarely used in our industry, like Bayesian machine learning models, LLM, NLP, and graph data models.

Today, we help emerging and large Global 100 companies secure their attack surfaces from growing threats. Some of our clients include Colgate-Palmolive, State of California, Berlitz, Hitachi, Tesco, just to name a few.

What is External Attack Surface Management?

The textbook definition of External Attack Surface Management (EASM) refers to the processes and technologies used to identify, assess, and manage the exposure of an organization's digital assets that are accessible or visible from the internet.

External attack surfaces are vast and complex. A single organization can have hundreds and thousands of systems, applications, cloud instances, supply chains, IoT devices and data exposed to the Internet—often sprawling across subsidiaries, multiple clouds, and assets managed by third parties.

Security teams have limited ability to discover these assets. They are inundated with thousands of alerts, but they don’t have the context to know which are critical and which to prioritize.

Isolating the truly critical issues first requires visibility across the attack surface, but even more importantly, it requires a thorough understanding of the context and purpose of the assets affected. Once that’s established, security teams can calculate attack paths and predict which specific threats matter—those likely to cause serious monetary or reputational damage to the business. Then, the organization can prioritize correctly and remediate for maximum impact.

Can you share your views on the importance of thinking like an attacker to discover unknown risks?

According to Verizon’s DBIR, 82% of attacks come from the outside in. Furthermore, most breaches according to Gartner are related to unknown and unmanaged assets.

This is precisely why adopting an outside-in approach to evaluate your attack surface is critical for assessing and managing cybersecurity risk. Stepping into the attacker’s shoes provides an objective view of the crown jewels that live within your systems and, more importantly, which are exposed and vulnerable.

As I mentioned previously, attack surfaces are ever-growing and complex. Most security teams lack full-spectrum visibility into exposed and vulnerable assets. Attackers know this! And they will relentlessly explore the attack surface, hunting for the path of least resistance and that one gap that security teams don’t monitor. Unfortunately, one security gap is all they need to break in. Meanwhile, security teams have the difficult task of identifying the exposures that make their organizations most vulnerable, and then taking action to protect those entry points.

How frequently do you identify threats that are due to external applications and APIs that are simply not being monitored or tested?

More often than we would like. We recently conducted research showing vulnerable public cloud, mobile and web applications exposing sensitive data, including unsecured APIs and personal identifiable information (PII). Here are some of the key findings:

  • 74 percent of assets with PII are vulnerable to at least one known major exploit, and one in 10 have at least one easily exploitable issue.
  • 70 percent of web applications have severe security gaps, like lacking WAF protection or an encrypted connection like HTTPS, while 25 percent of all web applications (web apps) lacked both.
  • The typical global enterprise has over 12 thousand web apps, which include APIs, SaaS applications, servers, and databases, among others. At least 30 percent of these web apps—over 3,000 assets—have at least one exploitable or high risk vulnerability. Half of these potentially vulnerable web apps are hosted in the cloud.
  • 98 percent of web apps are potentially GDPR non-compliant due to lack of opportunity for users to opt out of cookies.

Our research aside, there's ample evidence of these threats out there today. MOVEit exploit is a case point, which is still ongoing.

Can you discuss the importance of consolidating the processes and tools to test and manage the attack surface?

‘Stack bloat’ is something most enterprises suffer from. It’s particularly pronounced in security. Most organizations have siloed, disconnected security tools. There has been this mantra in security that more platforms will eliminate security gaps. But instead, it opens up the door for human mistakes, redundancies, increased operational load, and blind spots.

CyCognito was built to do the job of many legacy point solutions. We help companies consolidate their stack so they can focus on doing their jobs.

What are some ways that bad actors are using LLMs and Generative AI to scale attacks?

We have yet to see large scale attacks using LLMs but it’s only a matter of time. From my perspective, LLMs have the potential to provide greater scale, scope, reach, and speed to various stages of cyberattacks.

For example, LLMs have the potential to accelerate automated reconnaissance, where attackers can map and discover an organization's assets, brands, and services, along with sensitive information such as exposed credentials. LLMs can also assist in vulnerability discovery, identifying weaknesses within a targeted network, and facilitate exploitation through techniques like phishing or watering-hole attacks to gain access and exploit network vulnerabilities. LLMs can also aid in data theft by copying or exfiltrating sensitive data from the network.

Also, consumer applications based on LLMs, most notably ChatGPT, pose a threat as they can be used both intentionally and unintentionally by employees to leak company IP.

Spear-phishing campaigns provide another use case. High-quality phishing is based on deep understanding of the target; that is precisely what large language models can do quite well, because they process large volumes of data very quickly and customize messages effectively.

How can enterprises in turn use Generative AI to protect themselves?

Great question. That’s the good news to all of this. If attackers can use gen AI, so can security teams. Gen AI can help security teams do reconnaissance on their own companies and remediate vulnerabilities. They can more quickly and cost-effectively scan and map their own attack surfaces to find exposed sensitive assets, like personal identifiable information (PII), files, etc.

Gen AI can greatly help understand the business context of any asset. For example, it can help recognize a database holding PII and play a role in revenue transactions. That’s extremely valuable.

Gen AI can also determine the business purpose of an asset. For instance, it can help distinguish between a payment mechanism, a critical database, and a random device—and classify its risk profile. This, in turn, enables security teams to better prioritize risk. Without the ability to prioritize, security teams have to sift through endless vulnerabilities labeled ‘urgent’ when most are actually not mission-critical.

Why should enterprises be cautious about being overly reliant on Generative AI for defensive purposes?

Generative AI has great potential, but there are inherent issues we have to work through as an industry.

The big picture for me is that gen AI models can make security teams complacent. The allure of more automation is great, but manual review is critical given the state of gen AI models today. For example, gen AI models ‘hallucinate’. In other words, they produce inaccurate outputs.

Also, gen AI models (LLMs, specifically) don’t understand context because they are built on statistical, temporal text analysis—which can also lead to further ‘hallucinations’ that are very tough to spot.

I understand security teams are increasingly looking to do ‘more with less’—but human oversight will (and should) always be part of the security process.

Can you discuss how CyCognito offers automated external attack surface management and continuous testing?

Not to sound like a broken record but, as I mentioned previously, attack surfaces are vast and complex—and they continue to grow.

We built CyCognito to continuously map an entire attack surface beyond the corporate core to encompass subsidiaries, acquisitions, joint ventures, and brand operations—and attribute each to its rightful owner.

There are a few technical capabilities worth highlighting.

In the black box attack surface discovery process, our platform leverages LLM as one of dozens of sources for “attribution hypotheses” that our Bayesian ML models analyze to determine the organization’s business structure (up to 1000’s of business units and subsidiaries) and assign assets to owners (at the scale of millions of IT assets) completely automatically.

The platform also accelerates asset classification through Natural Language Processing (NLP) and heuristic algorithms—a task that is generally costly and resource intensive.

We also provide the business context necessary to prioritize risks effectively. Even if a vulnerability affects a thousand machines, CyCognito can identify the most critical one by providing insight into exposure level, business significance, exploitability, and hacker chatter.

We take a holistic approach to External Attack Surface Management which overcomes the trap of treating all critical issues with equal urgency. We enable security to prioritize true critical vectors, saving them time and money.

Thank you for the great interview, readers who wish to learn more should visit CyCognito.

Navigating Today’s Data and AI Market Uncertainty

Sponsored Content

Navigating Today’s Data and AI Market Uncertainty
Image by DC Studio on Freepik

By Christian Buckner, SVP, Altair

Anyone that has been following the news in the data analytics and artificial intelligence (AI) market knows that the past couple years have seen considerable change. Large analytics companies like Alteryx and Tableau have been the subject of mergers, acquisitions and privatization.

The rise of open-source language has put pressure on foundational analytics technologies like SAS. Start-ups have burned through cash and learned hard lessons, sometimes without ever achieving sustainable business models. And of course, rapid generative AI adoption has made everyone question if they are doing everything they can to keep up with competition. In all, there has never been more uncertainty in data analytics.

As a result, it’s more important than ever to think long-term about the analytics partnerships you forge. Are you choosing technologies that will stand the test of time? Are you choosing companies with proven track records? What do costs look like at the largest scales? How should my team grow as my data use grows? Can my partners help me when things get difficult? These have always been important questions to ask in analytics partnership decisions, but in today’s constantly changing landscape it is especially important to think ahead.

What to Look for in data and AI technology

Let’s start on the technology side. With this much change in the market, more vendors in a data delivery workflow means more risk. Small, specialized software vendors that satisfy only one link in the chain most often have two outcomes: either they succeed and are ultimately acquired by a company with a broader offering, or they never reach escape velocity. Either way, the outcome for you is disruption.

Instead, organizations need to look for data and AI technology that runs the gamut and can do the job from start to finish. On the technology side, organizations need to look for companies that offer everything, including:

  • Data preparation
  • Extract, transform, and load (ETL)
  • AutoML, auto forecasting, and auto feature engineering
  • Generative AI fine-tuning
  • Model development
  • Workload orchestration
  • Data visualization
  • Multi-language analytics (including in Python, R, SQL, and the SAS language)

Moreover, when all these tools are offered by the same technology partner, chances are they are woven together much more naturally and elegantly. This means you don’t have to spend half your time cobbling together tools, and when your data workers wear multiple hats, they don’t have to jump from tool to tool trying to piece together the workflow themselves.

"If you want your data solutions to stand the test of time, make sure your data vendors have stood the test of time."

The cherry on top is a software partner that can offer all these things, offer them in a streamlined workflow, and in addition, offer them in a way that empowers those who have specialized data skills as well as those who do not. That way, the data team doesn’t have to do everything. No-code and low-code tools allow stakeholders outside the data team to tackle the small but important tasks that make up 80% of a data teams work, while freeing up the data team to tackle the toughest projects that require serious data science.

Ideally, the same partner can provide the whole package. End-to-end, seamlessly integrated, no-code to code-first. These are hallmarks of frictionless AI and strong technology partners.

What to look for in data and AI business approaches

However, technology is only half the battle. Many organizations have great technology, but do not project stability. Above all on the business side, when looking for a partner to handle their data analytics and AI needs, leaders and organization must prioritize companies that demonstrate both proven results and stability.

Data is everything to today’s cutting-edge organizations. Interruptions and miscommunications caused by unstable partners are unacceptable delays that jeopardize both short- and long-term success. If you want your data solutions to stand the test of time, make sure your data vendors have stood the test of time.

Additionally, you can minimize uncertainty in your day-to-day by partnering with an organization that has deep domain expertise and a proven track record of world-class customer service. Partners are supposed to be that – partners – not merely vendors. You want someone who will be there by your side to help when things get challenging.

Lastly, market uncertainty means everyone is going to be worried about pricing and value. Prioritize partners whose business model and licensing system is designed for customers – you will know them when you see them. You want to find a partner that gives you more value the more you utilize their offerings.

Do you want to learn more about how to navigate today’s uncertainty-filled data and AI market? Be sure to attend Altair’s free Future.Industry 2024 virtual event, where industry experts converge to discuss the future of frictionless data and AI.

Christian Buckner is SVP of data analytics at Altair. He has spent his decades-long career helping innovative organisations build a better future by elevating data in decision-making and automation.

More On This Topic

  • Uncertainty Quantification in Artificial Intelligence-based Systems
  • 5 Skills All Marketing Analytics and Data Science Pros Need Today
  • 90% of Today's Code is Written to Prevent Failure, and That's a Problem
  • ETL and ELT: A Guide and Market Analysis
  • Navigating Data Science Job Titles: Data Analyst vs. Data Scientist…
  • StreamSets DataOps Platform — Summer ‘21 Public Beta. Sign up today!

Microsoft upgrades Copilot AI with inline image editing and better suggested prompts

Editing an image directly in Copilot's Designer tool

Microsoft has spruced up its Copilot tool with a couple of refinements designed to help you create useful prompts and edit your images. In a blog post published on Wednesday, Yusuf Mehdi, Microsoft's consumer chief marketing officer, described the latest features to hit the company's core AI-powered product.

Also: Microsoft Copilot vs. Copilot Pro: Is the subscription fee worth it?

First on the list is a visual tweak that affects Copilot in Windows, the website, and the mobile apps. Previously, the screen would display a list of suggested prompts you could submit to try out the AI. But frankly, these suggestions looked boring. Now, the suggested prompts appear in a visually interesting carousel of thumbnails. Swipe through the carousel and you can see each suggestion and try any that entice you.

Next — and more helpful for people who use Copilot's image generation — is the ability to edit your images inline. This feature works in Copilot in Windows and on the website but not with the mobile apps. To try this, ask Copilot to generate an image. I asked it to create a steampunk image of a robot wearing a top hat and a rabbit wearing a dress dancing near the Eiffel Tower.

Clicking on one of the four generated images displays it in a larger window. From there, click the ellipsis icon at the top and select Edit in Designer.

You're then taken to the Designer's editing tool where you can fine-tune your chosen image. You're able to crop the image, remove or blur the background, apply a filter, tweak the lighting and other elements, and even automatically adjust the overall look.

Also: The best AI image generators

Right-click the image and you can copy it, duplicate it, delete it, flip it, change the position, and set it as your Windows background.

"With Designer in Copilot, you can go beyond just creating images to now customize your generated images with inline editing right inside Copilot, keeping you in the flow of your chat," Mehdi said in his post. "Whether you want to highlight an object to make it pop with enhanced color, blur the background of your image to make your subject shine, or even reimagine your image with a different effect like pixel art, Copilot has you covered, all for free."

Also: I'm taking AI image courses for free on Udemy with this little trick — and you can too

And there's more. If you subscribe to Copilot Pro to the tune of $20 per month, you can resize and regenerate the images between square and landscape formats without leaving the tool. Also on tap is a Designer GPT inside Copilot that Mehdi promises will help you better visualize your ideas.

A variety of AI-driven image generators are on the market, both standalone products and ones built into services such as ChatGPT and Google Bard. But often you'd like to be able to tweak the final image beyond what the AI achieves. Integrating the editing tools directly into Copilot's Designer simplifies that process.

Artificial Intelligence

Google Assistant is now powered by Gemini — sort of

Google Assistant is now powered by Gemini — sort of Kyle Wiggers 12 hours

Google Assistant as we knew it is on the way out. Well, at least its guts.

Late last year, Google added AI capabilities from its chatbot Bard to Google Assistant, allowing the virtual helper to make sense of images and draw on data in emails, documents and more. Now, the company’s giving users the choice of replacing the AI models driving Google Assistant’s conversational skills with Gemini, Google’s family of newer GenAI tech.

Soon, via a new Gemini app for Android devices (which replaces the existing Google Assistant app) and an updated Google app on iOS (set to roll out in the coming weeks), users will be able to access a new Gemini-powered Google Assistant experience. It’ll be mobile-only; Google Assistant devices like Nest and Home speakers and displays won’t see changes just yet.

The experience comes in the form of an overlay that acts as a frontend for the Gemini models and provides contextual recommendations and suggestions, Sissie Hsiao, Google Assistant VP, told TechCrunch in a press briefing.

“This overlay allows you to do some really interesting things with Gemini,” she said. “For example, you can generate a caption based on a picture that you’ve already taken that’s behind the overlay. You might be reading an article, and bringing up the overlay allows you to not only understand the article more deeply, but ask questions about the article that you’re reading now.”

Indeed, the Gemini-powered Assistant — which, depending on the device, can be summoned with a corner swipe, power button tap or “Hey Google” hotword — can accept images as well as text and voice commands. For example, you can upload a picture of a plant with the instructions “I just bought this plant — give me tips and YouTube videos to help me take care of it” and the Gemini-powered Assistant will do its best to satisfy the request.

If you’ve ever tried a Gemini model on the web via Bard, you’re probably aware that Gemini’s capable of a range of GenAI tasks — and that’s not changed with the Assistant integration. Google gives a few example prompts in the onboarding flow, like “Help me craft a text response to my friend who is stressed at work,” “Give me some ideas to surprise my concert-loving friend on their birthday” and “Help me incorporate more plant-based options in my diet.” As on the web, Gemini in Assistant can also create images, although it’s not clear which model’s doing the generating; Bard previously tapped Imagen 2 for this purpose.

As you’d expect, conversations with the Gemini-powered Assistant on mobile will carry over to Gemini-powered experiences on the web — and vice versa — if you’re signed into the same Google Account in both places.

If for whatever reason the Gemini-powered Assistant experience isn’t to your liking, a menu screen in the Assistant app on Android and Google app on iOS lets you switch back to the old models at any time.

Now, the Gemini models aren’t completely replacing the old models underpinning Google Assistant — at least not at this juncture. Features including quick phrases, which let you skip saying “Hey Google” for specific tasks, will continue using the old models. So will features relating to setting timers, making calls and controlling smart home devices. In addition, Google notes on the aforementioned settings menu that, even when the Gemini models are selected as the default models in Assistant, apps with Assistant integration like Google Maps may keep using the old models.

In a move that might irk some longtime Google Assistant users, the most capable of the Gemini models, Gemini Ultra, isn’t available to power Assistant for free. It and the capabilities it brings, like better reasoning, coding and instruction-following skills, are gated behind a new product, Gemini Advanced, that’s part of a new subscription, the Google One AI Premium Plan, priced at $20 per month. The free Gemini-powered Assistant leverages the less-capable Gemini Pro, which got a middling reception when it launched in Bard in December.

Google’s positioning the Google One AI Premium Plan — an expansion of its existing Google One program, initially available with a two-month free trial — as the only way to access its latest and greatest GenAI features through Assistant, in fact. Users will have to maintain a subscription to get future Gemini Ultra updates including expanded multimodal capabilities, more interactive coding features and deeper data analysis capabilities.

To sweeten the pot, the AI Premium Plan comes with 2TB of storage and, in the near future, Gemini-powered features in Gmail, Google Docs, Google Slides, Google Sheets and more. But I wonder whether that’ll be enough to pacify Google Assistant users who perceive the AI Premium Plan as an effort to charge for model updates that were previously free.

The new Gemini-powered Assistant is available in English starting today in the U.S. It’ll come to more locations — and Japanese and Korean — starting next week.

Google Unleashes Gemini for a New AI Experience

In the ever-evolving landscape of artificial intelligence, Google has once again leaped forward with the introduction of Gemini, a consolidated and rebranded powerhouse of its AI capabilities. This strategic move symbolizes a significant shift in Google's approach to AI, streamlining its diverse range of services under a singular, powerful brand.

The journey to Gemini is a story of evolution and integration. Previously, Google's AI endeavors were scattered across various products with distinct identities – notably Bard and Duet. Bard, the interactive chatbot, and Duet, the AI assistant in Google Workspace, each played a role in shaping Google's AI landscape. However, in an effort to unify these services and enhance user experience, Google has ingeniously amalgamated them into the Gemini brand. This rebranding represents a strategic consolidation of AI services, reflecting Google's commitment to a more integrated and user-friendly AI future.

Gemini's Brand Integration and Features

Google's rebranding efforts with Gemini are not merely cosmetic. They represent a thoughtful restructuring of its AI services, aiming for a seamless integration that enhances user interaction with AI technology. The Gemini brand emerges as a singular portal to Google's AI, combining the strengths of its predecessors while introducing new, advanced features.

A significant development in this integration is the introduction of the Gemini app for Android. This app is designed to be a one-stop solution for various AI-driven tasks. It replaces the Google Assistant as the primary AI interface, responding to the familiar “Hey Google” prompt and integrating itself deeply into the Android ecosystem. This app is not just a chatbot or a search engine; it's a comprehensive AI assistant, adept in handling a wide range of user queries and tasks.

However, the integration story takes a different turn for iOS users. Due to the inherent limitations in iOS, there isn't a dedicated Gemini app available. Instead, Google has cleverly embedded Gemini's features within the existing Google app. iOS users can access Gemini's AI capabilities through the Google app. Although it can't replace Siri as the default assistant, the inclusion of Gemini features in the Google app is a testament to Google's commitment to providing a unified AI experience across different platforms.

Bard becomes Gemini | Ultra 1.0 and a new mobile appBard becomes Gemini | Ultra 1.0 and a new mobile app
Watch this video on YouTube

The Gemini Models – Pro and Ultra

Diving deeper into the architecture of Google's Gemini, we encounter two distinct models: Gemini Pro and Gemini Ultra 1.0. While both models represent the pinnacle of Google's AI development, they cater to different user needs and capabilities.

Gemini Pro, the standard version, is already a formidable AI tool. It offers a wide range of functionalities typical of advanced AI models, such as conversational capabilities, search assistance, and integration into various Google services. This version is designed to meet the everyday AI needs of the general public and is readily available to all users.

In contrast, Gemini Ultra 1.0 represents the zenith of Google's AI research and development. This model is an upgrade in terms of complexity, depth, and range of capabilities. Designed for users requiring advanced AI interactions, Gemini Ultra excels in handling extended context, engaging in longer and more complex conversations, and performing sophisticated task management. Its prowess extends to areas like coding assistance and logical reasoning, making it an ideal companion for professionals and enthusiasts who demand more from their AI assistant.

Access to Gemini Ultra 1.0, however, comes with a price. It's part of the Google One AI Premium plan, a subscription-based model. Priced at $19.99 per month, this plan not only offers the advanced capabilities of Gemini Ultra but also includes 2TB of Google Drive storage and other premium features. This subscription model positions Gemini Ultra as a premium service, catering to users who seek the most advanced AI capabilities at their fingertips.

Gemini's Strategic Importance for Google

The launch of Gemini marks a pivotal moment in Google's strategic direction. This move signals a clear shift towards a more AI-centric approach, with Gemini at the helm. The integration of various AI services under the Gemini brand indicates Google's intent to streamline its AI offerings, making them more accessible and efficient for users.

In the broader AI landscape, Gemini positions Google as a strong contender against prominent players like OpenAI and Anthropic. While these companies have made significant strides in AI development, Google's Gemini brings its own unique strengths to the table. The integration of Gemini into Google's vast ecosystem of services could offer a competitive edge, leveraging the company's extensive data and technological infrastructure.

Historically, Google has embarked on several transformative projects, some of which, like Google Plus, didn't pan out as expected. However, with Gemini, the stakes are higher, and the commitment seems more profound. It's not just a new product launch; it's a strategic shift that could redefine Google's identity as a technology company.

Gemini in the Consumer Space

Gemini is also set to redefine how consumers interact with AI in their daily lives. As a personal assistant, it offers a level of interaction and assistance that surpasses traditional AI assistants. Its ability to understand complex queries, offer detailed responses, and integrate seamlessly with other Google services makes it an invaluable tool for personal and professional use.

In smart home applications, Gemini's potential is vast. Its advanced capabilities could enable more intuitive control of smart devices, personalized recommendations, and even assistance with complex tasks. The integration of Gemini into Google's ecosystem means that it can leverage data from various services, offering a more holistic and context-aware experience.

Furthermore, Gemini's development could significantly influence future AI trends and consumer technology. Its capabilities in language understanding, task management, and multimodal interaction could set new benchmarks for AI assistants. As Gemini evolves, it could drive innovation in AI technology, shaping the future landscape of consumer tech and AI applications.

As Google continues to evolve and adapt, Gemini stands as a shining example of its innovation and forward-thinking. It will be fascinating to watch how Gemini influences the AI landscape and what new possibilities it unlocks. The launch of Gemini is the beginning of a new era in AI, and the tech world watches with bated breath to see what Google does next.

6 Free Computer Vision Courses Online

Language models managed to woo everyone in 2023. Moving forward, the models will hopefully start looking at the world to understand it better. Making this possible would be computer vision – a technique that can be used in various fields effectively from trying to make cars drive autonomously to detecting cancer.

Through computer vision, machines can derive information from visual inputs and then act or recommend on that. You can get started and learn advanced computer vision through several courses and resource materials, but most of them can be expensive. Here are 6 free beginners, intermediate and advanced courses on computer vision:

Computer Vision Essentials

The Great Learning course is about image processing knowledge and getting hands-on with the OpenCV library using Python for AI and machine learning. Forget the boring theory, the course provides real-world action – sampling data, messing with images, and learning the ropes of computer vision.

Instead of stopping at the basics, the course tackles everything from spotting things in pictures to figuring out what’s in computer vision. The last module will be an in-depth discussion of transfer learning.

Click here to apply.

Introduction to Computer Vision and Image Processing

IBM is offering a beginner-level course on computer vision instructed by Aije Egwaikhide and Joseph Santarcangelo. The course covers various topics such as computer vision applications across different industries, image processing and analysis techniques, Python, Pillow, and OpenCV for basic image processing, image classification, and object detection.

The course also teaches supervised learning techniques to create an image classifier. Aije Egwaikhide and Joseph Santarcangelo will collectively instruct the subject matter programme.

Click here to apply.

Advanced Computer Vision with TensorFlow

The course is designed for software and machine learning engineers to learn advanced TensorFlow features. The course covers image classification, image segmentation, object localisation, and object detection. Learners will apply transfer learning to object localisation and detection, customise existing models, and build their models to detect, localise, and label their rubber duck images.

They will also implement image segmentation using variations of the fully convolutional network (FCN), including U-Net and Mask-RCNN, to identify and detect numbers, pets, zombies, and more. Experts instruct the course in the field, which is designed for early and mid-career engineers with a basic understanding of TensorFlow.

Click here to apply.

Computer Vision with Embedded Machine Learning

The intermediate-level course, offered by a partnership among Edge Impulse, OpenMV, Seeed Studio, and the TinyML Foundation, teaches about neural networks, focusing on the classification of images and object detection in images and videos. One would also learn to deploy models to embedded systems, a field known as embedded machine learning or TinyML.

Throughout the course, students will understand how convolutional neural networks (CNNs) function and how to utilise them for image classification and object detection. The hands-on projects will provide valuable experience training custom CNNs, besides deploying them to microcontrollers and single-board computers.

Click here to apply.

Self-Driving Cars Specialisation

With over 70,000 learners already enrolled, the course offers an understanding of the engineering practices employed in the self-driving car industry. Through hands-on projects using the open-source simulator CARLA, participants will engage with real data sets from an autonomous vehicle (AV).

Throughout the program, students will get insights shared by experts from Oxbotica and Zoox. The course provides a realistic driving environment featuring 3D pedestrian modelling and various environmental conditions. Upon completion, participants will be equipped to develop their self-driving software stack.

Note that specific hardware and software specifications are necessary to effectively run the CARLA simulator, including Windows 7 64-bit (or later) or Ubuntu 16.04 (or later), a quad-core Intel or AMD processor (2.5 GHz or faster), NVIDIA GeForce 470 GTX or AMD Radeon 6870 HD series card or higher, 8 GB RAM, and OpenGL 3 or greater (for Linux computers).

Click here to apply.

Computer Vision with OpenCV Python

The OpenCV for Beginners course offers an experiential approach to computer vision, focusing on object tracking, augmented reality, face detection, optical flow, and human pose estimation. Unlike many other courses, this program is tailored to be more intuitive, making it accessible to beginners.

Upon completion, participants will get a digital certificate from OpenCV.org. The course is part of the OpenCV University, and equips participants with the foundational knowledge needed to pursue further studies in computer vision, deep learning, and AI.

Click here to apply.

The post 6 Free Computer Vision Courses Online appeared first on Analytics India Magazine.

Max Life Insurance Selects Oracle Exadata Platform within OCI

Max Life Insurance Company Ltd. has transferred its mission-critical database workloads to Oracle Exadata Database Service on the Exadata platform within Oracle Cloud Infrastructure (OCI). Moreover, Max Life has migrated its core systems to OCI, including customer service, claims management, marketing, and policy issuance, leading to an application performance improvement by up to 70 percent.

Max Life has maintained a business service uptime of nearly 99 percent, with core system performance seeing an improvement of approximately 30 percent, thereby enhancing business agility and customer satisfaction.

Oracle Exadata Database Service, available on OCI, offers organizations an automated Oracle Database solution with top-notch performance, availability, security, and cost efficiency. It enables Oracle databases to operate faster and more efficiently, utilizing the scale-out Exadata infrastructure, which incorporates specialized optimizations for transaction processing, analytics, and mixed workloads.

Max Life employed the Oracle Cloud Mumbai Region and Oracle Cloud Hyderabad Region for its migration process. By utilizing these Oracle Cloud Regions, Max Life enhanced business continuity through redundancy and disaster recovery capabilities, ensuring compliance with regulatory requirements set forth by the Insurance Regulatory and Development Authority of India (IRDAI).

Kapil Makhija, vice president, Technology Cloud, Oracle India said, “Exadata Database Service on OCI has enabled Max Life to improve performance across all workloads, optimize cost, and reduce downtime. With OCI’s world-class architecture and the Exadata platform to run databases at scale in the cloud, Max Life is now well-equipped to meet customer demands with agility and improved responsiveness, facilitating business growth.”

The post Max Life Insurance Selects Oracle Exadata Platform within OCI appeared first on Analytics India Magazine.