US 2026/0087362 A1 · SYSTEM AND METHOD FOR DETECTING CYCLES IN PROJECTED GRADIENT DESCENT FOR ADVERSARIAL ATTACK

Abstract

Provided are systems, methods, and computer program products for detecting cycles in adversarial attack of a data element including memory configured to include storage locations to store data elements and perturbation data and a processor configured with an adversarial attack module. The processor is configured with program code that, when executed, will cause the processor to iteratively execute generating a perturbed data element by applying a data perturbation with a projected gradient descent algorithm on at least one data element, extracting the data perturbation from the perturbed data element as perturbation data, determining whether the perturbation data is present in the memory, and when the perturbation data is not present in the memory, storing the perturbation data in the memory, and terminating the iterative execution upon confirming that the perturbation data is present in the memory.

Claims20

Dependent claims

A computing system for detecting cycles in adversarial attack of a data element, the computing system comprising:

memory configured to include storage locations to store data elements and perturbation data;
and
a processor configured with an adversarial attack module, the processor configured with program code that, when executed, will cause the processor to iteratively execute:
generating a perturbed data element by applying a data perturbation with a projected gradient descent algorithm on at least one data element;
extracting the data perturbation from the perturbed data element as perturbation data;
determining whether the perturbation data is present in the memory, and when the perturbation data is not present in the memory, storing the perturbation data in the memory;
and
terminating the iterative execution upon confirming that the perturbation data is present in the memory.

5 more elements

A computing system for detecting cycles in adversarial attack of a data element, the computing system comprising:

memory configured to include storage locations to store data elements and perturbation data;
and
a processor configured with an adversarial attack module, the processor configured with program code that, when executed, will cause the processor to iteratively execute:
generating a perturbed data element by applying a data perturbation with a projected gradient descent algorithm on at least one data element, the perturbed data element having a predetermined data label;
inputting the perturbed data element to at least one trained machine learning model to generate an output data label;
comparing the output data label to the predetermined data label;
and
terminating iterative execution upon confirming that the output data label does not match the predetermined data label.

5 more elements

A computer-implemented method for detecting cycles in adversarial attack of a data element, the method comprising:

iteratively executing:
generating, with at least one processor, a perturbed data element by applying a projected gradient descent algorithm to at least one data element, wherein the projected gradient descent algorithm attacks the at least one data element by applying a data perturbation to the at least one data element;
inputting the perturbed data element, the perturbed data element having a predetermined data label, to at least one trained machine learning model to generate an output data label;
comparing, with the at least one processor, the output data label with the predetermined data label;
extracting the data perturbation from the perturbed data element as perturbation data;
reading, with the at least one processor, data entries of perturbation data in the memory;
wherein, when the perturbation data is not stored in the memory and the output data label matches the predetermined data label:
storing, with the at least one processor, the perturbation data in the memory;
and
continuing, with the at least one processor, the iterative execution;
or
wherein, when the perturbation data is stored in the memory or the output data label does not match the predetermined data label:
determining a cycle has occurred and terminating, with the at least one processor, the iterative execution.

10 more elements

Dependencies are inferred from the claim text.

System and method for detecting cycles in projected gradient descent for adversarial attack

Life of this patent

System and method for detecting cycles in projected gradient descent for adversarial attack

Life of this patent

Abstract

Claims20