Adversarial attack method and apparatus
AssigneeResearch & Business Foundation Sungkyunkwan University
InventorsCheolWon NA, YunSeok CHOI, Jee-Hyong LEE
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to an adversarial attack method and apparatus. The adversarial attack method according to an embodiment of the present disclosure may include: selecting vulnerable positions of an original source code; acquiring open source codes based on an open source code set; selecting dissimilar codes among the open source codes based on dissimilarity of the open source codes; acquiring an attention score for each of the dissimilar codes; extracting a snippet from at least one of the dissimilar codes based on the attention scores; and generating an adversarial source code based on the at least one snippet.
Claims16
An adversarial attack method, comprising:
- selecting vulnerable positions of an original source code;
- acquiring open source codes based on an open source code set;
- selecting dissimilar codes among the open source codes based on dissimilarity of the open source codes;
- acquiring an attention score for each of the dissimilar codes;
- extracting a snippet from at least one of the dissimilar codes based on the attention scores;
- and
- generating an adversarial source code based on the at least one snippet.
An adversarial source code generation apparatus, comprising:
- a processor;
- and
- a memory storing one or more instructions executed by the processor,
- wherein the one or more instructions comprises:
- selecting vulnerable positions of an original source code;
- acquiring open source codes based on an open source code set;
- selecting dissimilar codes among the open source codes based on dissimilarity of the open source codes;
- acquiring an attention score for each of the dissimilar codes;
- extracting a snippet from at least one of the dissimilar codes based on the attention scores;
- and
- generating an adversarial source code based on the at least one snippet.
An adversarial attack performance analysis method, comprising:
- receiving an original source code from an original source code provision apparatus;
- receiving an adversarial source code from an adversarial source code generation apparatus;
- and
- determining whether an artificial intelligence model has been attacked by the adversarial source code based on the original source code and the adversarial source code,
- wherein the adversarial source code is generated by:
- selecting vulnerable positions of an original source code;
- acquiring open source codes based on an open source code set;
- selecting dissimilar codes among the open source codes based on dissimilarity of the open source codes;
- acquiring an attention score for each of the dissimilar codes;
- extracting a snippet from at least one of the dissimilar codes based on the attention scores;
- and
- generating the adversarial source code based on the at least one snippet.
Dependencies are inferred from the claim text.