Communication method and apparatus

A communication method implemented in a communication network, comprising:

• sending first information, wherein the first information indicates an anti-attack policy of first data, the first data comprises training data and/or inference data of a model and the first information comprises at least one of the following:
• data source blocklist information of the first data and/or data source trustlist information of the first data, information indicating a data preprocessing manner of the first data, or information indicating a data enhancement manner of the first data;
• wherein the first information further includes a granularity of the anti-attack policy that indicates whether the anti-attack policy is implemented at a terminal device level, a cell level, a network slice level, a data radio bearer level, or an access network device level;
• sending second information to at least one second node based on the first information, wherein the second information indicates an anti-attack policy of second data and the first data comprises the second data;
• and wherein the second information comprises at least one of the following:
• data source blocklist information of the second data and/or data source trustlist information of the second data, information indicating a data preprocessing manner of the second data, or information indicating a data enhancement manner of the second data;
• obtaining the first data;
• and
• performing at least one of model training or model inference based on the first data.

An apparatus, comprising:

• at least one processor, and a memory storing instructions for execution by the at least one processor;
• wherein, when executed, the instructions cause the apparatus to perform operations comprising:
• obtaining first information, wherein the first information indicates an anti-attack policy of first data, the first data comprises training data and/or inference data of a model and the first information comprises at least one of the following:
• data source blocklist information of the first data and/or data source trustlist information of the first data, information indicating a data preprocessing manner of the first data, or information indicating a data enhancement manner of the first data;
• wherein the first information further includes a granularity of the anti-attack policy that indicates whether the anti-attack policy is implemented at a terminal device level, a cell level, a network slice level, a data radio bearer level, or an access network device level;
• sending second information to at least one second node based on the first information, wherein the second information indicates an anti-attack policy of second data and the first data comprises the second data;
• and wherein the second information comprises at least one of the following:
• data source blocklist information of the second data and/or data source trustlist information of the second data, information indicating a data preprocessing manner of the second data, or information indicating a data enhancement manner of the second data;
• determining the first data based on the first information;
• and
• sending the first data, wherein the first data is used to perform model training and/or determine an inference result.