Invention Application
- Patent Title: METHOD AND SYSTEM FOR IN-DEPTH DEFENSE AGAINST ADAPTIVE GRAY-BOX ADVERSARIAL SAMPLES
-
Application No.: PCT/EP2021/079689Application Date: 2021-10-26
-
Publication No.: WO2023072375A1Publication Date: 2023-05-04
- Inventor: ANDREINA, Sébastien , KARAME, Ghassan , LI, Wenting , MARSON, Giorgia Azzurra
- Applicant: NEC LABORATORIES EUROPE GMBH
- Applicant Address: Kurfürsten-Anlage 36
- Assignee: NEC LABORATORIES EUROPE GMBH
- Current Assignee: NEC LABORATORIES EUROPE GMBH
- Current Assignee Address: Kurfürsten-Anlage 36
- Agency: ULLRICH & NAUMANN
- Main IPC: G06N20/00
- IPC: G06N20/00 ; G06F21/57
Abstract:
The present invention provides a method of providing security for a machine learning, ML, classifier against adaptive gray-box adversarial samples. According to embodiments, the method comprises inspecting, by a detector component, input samples submitted to the ML classifier to identify input samples that appear as noisy versions of previously submitted queries and/or as highly distorted input samples; and forwarding, by the detector component, only those input samples to the ML classifier that were not identified as noisy versions of previously submitted queries or as highly distorted input samples.
Information query