-
公开(公告)号:US11263323B2
公开(公告)日:2022-03-01
申请号:US16262178
申请日:2019-01-30
Applicant: Google LLC
Inventor: Pedro Gonnet Anders , Philippe Gervais
Abstract: The present disclosure provides systems and methods that reduce vulnerability of software systems (e.g., machine-learned models) to adversarial attacks by increasing variety within the software system. In particular, a software system can include a number of subcomponents that interoperate using predefined interfaces. To increase variety within the software system, multiple, different versions of one or more of the subcomponents of the software system can be generated. In particular, the different versions of the subcomponent(s) can be different from each other in some way, while still remaining functionally equivalent (e.g., able to perform the same functions with comparable accuracy/success). A plurality of different variants of the software system can be constructed by mixing and matching different versions of the subcomponents. A large amount of variety can be exhibited by the variants of the software system deployed at a given time, thereby leading to increased robustness against adversarial attacks.
-
公开(公告)号:US12061699B2
公开(公告)日:2024-08-13
申请号:US17667099
申请日:2022-02-08
Applicant: Google LLC
Inventor: Pedro Gonnet Anders , Philippe Gervais
CPC classification number: G06F21/57 , G06F21/56 , G06N20/00 , G06V10/82 , G06V40/172 , G06F18/217 , G06F2221/033
Abstract: The present disclosure provides systems and methods that reduce vulnerability of software systems (e.g., machine-learned models) to adversarial attacks by increasing variety within the software system. In particular, a software system can include a number of subcomponents that interoperate using predefined interfaces. To increase variety within the software system, multiple, different versions of one or more of the subcomponents of the software system can be generated. In particular, the different versions of the subcomponent(s) can be different from each other in some way, while still remaining functionally equivalent (e.g., able to perform the same functions with comparable accuracy/success). A plurality of different variants of the software system can be constructed by mixing and matching different versions of the subcomponents. A large amount of variety can be exhibited by the variants of the software system deployed at a given time, thereby leading to increased robustness against adversarial attacks.
-
公开(公告)号:US20220156374A1
公开(公告)日:2022-05-19
申请号:US17667099
申请日:2022-02-08
Applicant: Google LLC
Inventor: Pedro Gonnet Anders , Philippe Gervais
Abstract: The present disclosure provides systems and methods that reduce vulnerability of software systems (e.g., machine-learned models) to adversarial attacks by increasing variety within the software system. In particular, a software system can include a number of subcomponents that interoperate using predefined interfaces. To increase variety within the software system, multiple, different versions of one or more of the subcomponents of the software system can be generated. In particular, the different versions of the subcomponent(s) can be different from each other in some way, while still remaining functionally equivalent (e.g., able to perform the same functions with comparable accuracy/success). A plurality of different variants of the software system can be constructed by mixing and matching different versions of the subcomponents. A large amount of variety can be exhibited by the variants of the software system deployed at a given time, thereby leading to increased robustness against adversarial attacks.
-
-