Patent ID: 11948054
Assignee: BOOZ ALLEN HAMILTON INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A system for generating a transfer adversarial attack, the system comprising:
an attack module configured to generate an adversarial attack on a target module, wherein the attack module is configured to:
generate a surrogate model having an architecture and a dataset that mirrors at least one aspect of a target model of the target module, the surrogate model including a plurality of classes;
generate a masked version of the surrogate model having fewer classes than the surrogate model by randomly selecting at least one class of the plurality of classes for removal;
attack the masked surrogate model to create a perturbed sample;
generalize the perturbed sample for use with the target module; and
transfer the perturbed sample to the target module to alter an operating parameter of the target model.