Patent ID: 11899787
Assignee: HITACHI, LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 13:
14. A non-transitory computer readable storage medium that stores an inference execution program that improves an ability of a neural network to withstand and detect latent attacks and that when executed by a processor causes the processor to execute a method comprising:
storing position information in a latent space database, wherein the position information is in a latent space in which first output vectors are output vectors of a hidden layer of the neural network that embeds input data used for learning of the neural network
obtaining a second output vector which is an output vector of the hidden layer included in the neural network concerning input data to be inferred, and
inferring the input data based on a positional relationship between the second output vector and the first output vectors in the latent space;
detecting an attack by an Adversarial Example via at least one of a plurality of attack detection modes which compare the inference made by the neural network with the inference based on the positional relationship between the second output vector and the first output vectors in the latent space; and
displaying an attack alert notification when the attack by Adversarial Example is detected.