Patent ID: 11893111
Assignee: HARMAN INTERNATIONAL INDUSTRIES, INCORPORATED
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 17:
18. A system, comprising:
a memory storing a machine learning (ML) system comprising a ML model and an adversarial detection module; and
a processor that is coupled to the memory and configured to, receive by the ML model input data;
process by the ML model the input data to generate output data;
receive by the adversarial detection module both the input data and the output data;
input a perturbed input data and the output data into a neural fingerprinting model included in the adversarial detection module, wherein the perturbed input data is generated by introducing a set of predefined random perturbations into the input data;
generate by the neural fingerprinting model a perturbed output data based on the perturbed input data;
determine using the neural fingerprinting model an adversarial score indicating whether the perturbed output data matches an expected perturbed output data for a class of data associated with the input data and the output data; and
perform one or more remedial actions based on the adversarial score.