Systems and methods for increasing robustness of machine-learned models and other software systems against adversarial attacks

    公开(公告)号:US11263323B2

    公开(公告)日:2022-03-01

    申请号:US16262178

    申请日:2019-01-30

    Applicant: Google LLC

    Abstract: The present disclosure provides systems and methods that reduce vulnerability of software systems (e.g., machine-learned models) to adversarial attacks by increasing variety within the software system. In particular, a software system can include a number of subcomponents that interoperate using predefined interfaces. To increase variety within the software system, multiple, different versions of one or more of the subcomponents of the software system can be generated. In particular, the different versions of the subcomponent(s) can be different from each other in some way, while still remaining functionally equivalent (e.g., able to perform the same functions with comparable accuracy/success). A plurality of different variants of the software system can be constructed by mixing and matching different versions of the subcomponents. A large amount of variety can be exhibited by the variants of the software system deployed at a given time, thereby leading to increased robustness against adversarial attacks.

    Systems and Methods for Increasing Robustness of Machine-Learned Models and Other Software Systems against Adversarial Attacks

    公开(公告)号:US20220156374A1

    公开(公告)日:2022-05-19

    申请号:US17667099

    申请日:2022-02-08

    Applicant: Google LLC

    Abstract: The present disclosure provides systems and methods that reduce vulnerability of software systems (e.g., machine-learned models) to adversarial attacks by increasing variety within the software system. In particular, a software system can include a number of subcomponents that interoperate using predefined interfaces. To increase variety within the software system, multiple, different versions of one or more of the subcomponents of the software system can be generated. In particular, the different versions of the subcomponent(s) can be different from each other in some way, while still remaining functionally equivalent (e.g., able to perform the same functions with comparable accuracy/success). A plurality of different variants of the software system can be constructed by mixing and matching different versions of the subcomponents. A large amount of variety can be exhibited by the variants of the software system deployed at a given time, thereby leading to increased robustness against adversarial attacks.

Patent Agency Ranking