Cohort Based Adversarial Attack Detection
AssigneeInternational Business Machines Corporation
InventorsGaurav Goswami, Nalini K. Ratha, Sharathchandra Pankanti
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorsGaurav Goswami, Nalini K. Ratha, Sharathchandra Pankanti
Estimating the term…
Mechanisms are provided to provide an improved computer tool for determining and mitigating the presence of adversarial inputs to an image classification computing model. A machine learning computer model processes input data representing a first image to generate a first classification output. A cohort of second image(s), that are visually similar to the first image, is generated based on a comparison of visual characteristics of the first image to visual characteristics of images in an image repository. A cohort-based machine learning computer model processes the cohort of second image(s) to generate a second classification output and the first classification output is compared to the second classification output to determine if the first image is an adversarial image. In response to the first image being determined to be an adversarial image, a mitigation operation by a mitigation system is initiated.
A method, in a data processing system comprising at least one processor and at least one memory, the at least one memory comprising instructions which are executed by the at least one processor to specifically configure the at least one processor to implement at least one machine learning computer model, the method comprising:
A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a data processing system, causes the data processing system to implement a machine learning computer model, the data processing system operating to:
An apparatus comprising:
Dependencies are inferred from the claim text.