Patent ID: 11899787
Assignee: HITACHI, LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 10:
11. The attack detection method according to claim 9, comprising:
obtaining a first inference result based on a probability calculated by the neural network concerning the plurality of labels or the plurality of options;
calculating a first distance which is a distance between the second output vector and a barycentric position of a cluster of the first output vectors of a portion of the input data, wherein the input data, used for learning of the neural network, having the same label as the first inference result or the same option as selected in the first inference result are used as the portion of the input data;
calculating a second distance which is a distance between the respective first output vector of the portion of the input data and the barycentric position of the cluster of the first output vectors of the portion of the input data; and
determining an occurrence or non-occurrence of the attack by the Adversarial Example based on the first distance and a representative value of the second distance.