Defending deep generative models against adversarial attacks
AssigneeInternational Business Machines Corporation
InventorsMathieu Sinn, Killian Levacher, Ambrish Rawat
Life of this patent
Estimating the term…
Abstract
Adversarial attack detection operations may be applied on one or more deep generative models for defending deep generative models from adversarial attacks. The adversarial attack may be detected on the one or more deep generative models based on the one or more of a plurality of adversarial attack detection operations. The one or more deep generative models may be sanitized based on the adversarial attack.
Claims20
A method for defending deep generative models from adversarial attacks in a computing environment by one or more processors comprising:
- applying one or more of a plurality of adversarial attack detection operations on one or more deep generative models, including a static analysis with inspection of the compute graph and weights of one or more deep generative models;
- detecting an adversarial attack on a first deep generative model of the one or more deep generative models based on the applied adversarial attack detection operations;
- and
- generating a sanitized deep generative model from the first deep generative model based on the detected adversarial attack.
A system for defending deep generative models from adversarial attacks in a computing environment, comprising:
- one or more computers with executable instructions that when executed cause the system to:
- apply one or more of a plurality of adversarial attack detection operations on one or more deep generative models, including a static analysis with inspection of the compute graph and weights of one or more deep generative models;
- detect an adversarial attack on a first deep generative model of the one or more deep generative models based on the applied adversarial attack detection operations;
- and
- generate a sanitized deep generative model from the first deep generative model based on the detected adversarial attack.
A computer program product for defending deep generative models from adversarial attacks in a computing environment, the computer program product comprising:
- one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instruction comprising:
- program instructions to apply one or more of a plurality of adversarial attack detection operations on one or more deep generative models, including a static analysis with inspection of the compute graph and weights of one or more deep generative models;
- program instructions to detect an adversarial attack on a first deep generative model of the one or more deep generative models based on the applied adversarial attack detection operations;
- and
- program instructions to generate a sanitized deep generative model from the first deep generative model based on the detected adversarial attack.
Dependencies are inferred from the claim text.