Method and system for detecting vulnerabilities in ai inference models

One or more network devices, comprising:

• one or more processors configured to execute instructions to:
• store in a memory a first inference model;
• store in the memory a second inference model, wherein the second inference model is an iteration of the first inference model;
• perform a weight comparison of weights of the second inference model against corresponding weights of the first inference model;
• assign a weight vulnerability indicator based on the weight comparison;
• perform a manifold comparison of a reduced dimensional manifold of the second inference model to a reduced dimensional manifold of the first inference model;
• assign a manifold vulnerability indicator based on the manifold comparison;
• generate a vulnerability status of the second inference model based on the weight vulnerability indicator and the manifold vulnerability indicator;
• and
• perform an action based on the vulnerability status.

A non-transitory computer-readable medium containing instructions executable by at least one processor of a network device, the non-transitory computer-readable medium comprising one or more instructions for:

• storing, by a network device, a first inference model;
• storing, by the network device, a second inference model, wherein the second inference model is an iteration of the first inference model;
• performing, by the network device, a weight comparison of weights of the second inference model against corresponding weights of the first inference model;
• assigning, by the network device, a weight vulnerability indicator based on the weight comparison;
• performing, by the network device, a manifold comparison of a reduced dimensional manifold of the second inference model to a reduced dimensional manifold of the first inference model;
• assigning, by the network device, a manifold vulnerability indicator based on the manifold comparison;
• generating, by the network device, a vulnerability status of the second inference model based on the weight vulnerability indicator and the manifold vulnerability indicator;
• and
• performing, by the network device, an action based on the vulnerability status.