Detecting Adversarial Attacks through Decoy Training
AssigneeInternational Business Machines Corporation
InventorsJialong Zhang, Frederico Araujo, Teryl Taylor, Marc Philippe Stoecklin
Life of this patent
Estimating the term…
Abstract
Decoy data is generated from regular data. A deep neural network, which has been trained with the regular data, is trained with the decoy data. The trained deep neural network, responsive to a client request comprising input data, is operated on the input data. Post-processing is performed using at least an output of the operated trained deep neural network to determine whether the input data is regular data or decoy data. One or more actions are performed based on a result of the performed post-processing.
Claims20
A method, comprising:
- generating decoy data from regular data;
- training a deep neural network, which has been trained with the regular data, with the decoy data;
- responsive to a client request comprising input data, operating the trained deep neural network on the input data;
- performing post-processing using at least an output of the operated trained deep neural network to determine whether the input data is regular data or decoy data;
- and
- performing one or more actions based on a result of the performed post-processing.
An apparatus, comprising:
- one or more processors;
- one or more memories having program code, wherein the one or more processors, in response to retrieving and executing the program code, cause the apparatus to perform operations comprising:
- generating decoy data from regular data;
- training a deep neural network, which has been trained with the regular data, with the decoy data;
- responsive to a client request comprising input data, operating the trained deep neural network on the input data;
- performing post-processing using at least an output of the operated trained deep neural network to determine whether the input data is regular data or decoy data;
- and
- performing one or more actions based on a result of the performed post-processing.
A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a device to cause the device to perform operations comprising:
- generating decoy data from regular data;
- training a deep neural network, which has been trained with the regular data, with the decoy data;
- responsive to a client request comprising input data, operating the trained deep neural network on the input data;
- performing post-processing using at least an output of the operated trained deep neural network to determine whether the input data is regular data or decoy data;
- and
- performing one or more actions based on a result of the performed post-processing.
Dependencies are inferred from the claim text.