Vorrichtung und Verfahren zur Verbesserung der Robustheit Gegenüber »kontradiktorischen Beispielen

Details

Veröffentlichungs-Nr.

EP3671574

Aktenzeichen

EP18213925

Anmeldetag

19. Dezember 2018

Veröffentlichung

10. Juli 2024

Erteilung

10. Juli 2024

Rechtsraum

EP

IPC

G06N3/094G06N3/09G06N3/084

Abstract

A computer-implemented method for obtaining an adversarial input signal (x^adv) to a classifier (60) for classifying input signals (x) obtained from a sensor (30), wherein said adversarial input signal (x^adv) is obtained from an original input signal (x^org) andwherein said adversarial input signal (x^adv) and said original input signal (x^org) cause the classifier (60) to classify said original input signal (x^org) as belonging to a first class (ℓ₀) and said adversarial input signal (x^adv) as belonging to a second class (ℓ) different from said first class (ℓ₀),wherein the method comprises the steps of:- modifying said original input signal (x^org) to yield a modified input signal (x^mod);- projecting said modified input signal (x^mod) onto a metric ball around said original input signal (x^org) to yield a projected input signal (x^proj); and- obtaining said adversarial input signal (x^adv) depending on said projected input signal (x^proj),characterized in that said metric is an at least approximate Wasserstein distance.

Anmelder

Firmen

Robert Bosch GmbH
Carnegie Mellon University

Land

🇩🇪 Deutschland

Fachgebiete