Verfahren zur Sicherung eines Rechnersystems gegen Integritätsangriffe

Details

Veröffentlichungs-Nr.

EP4811192

Anmeldetag

20. März 2025

Veröffentlichung

23. September 2026

Rechtsraum

EP

Abstract

The present invention relates to a method for securing against adversarial and backdoor attacks a computer system including a memory storing a plurality of benign images (501) and using at least one neural network comprising an input layer, hidden layers, and an output layer generating an embedding or a classification result into a set of output classes for an input image presented at the input layer, said method being performed by said computer system and comprising, before or during the inference phase: - splitting at least one benign image (501) among said stored benign images into a plurality of zones according to at least one predefined method; and at the inference phase: - acquiring an image (502); - splitting the acquired image into a plurality of zones according to said at least one predefined method; -generating at least one composite image (503, 504, 505, 506) by replacing, in at least one split benign image among said stored benign images a zone of the split benign image corresponding to a zone of the split acquired image with said zone of the split acquired image; -applying said at least one neural network to said at least one generated composite image for generating a result from said output layer of said at least one neural network; -comparing said generated result and a result generated by applying said at least one neural network to said acquired image; - based on said comparison, detecting an adversarial or backdoor attack and performing a predetermined action for securing said system.

Anmelder

Firma

THALES DIS FRANCE SAS

Land

🇫🇷 Frankreich