Patent ID: 11899787
Assignee: HITACHI, LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 14:
15. A non-transitory computer readable storage medium that stores an attack detection program for improving an ability of a neural network to withstand and detect latent attacks, the attack detection program when executed by a processor cause the processor to execute a method comprising:
determining which label among a plurality of labels is applicable to input data or select any one of a plurality of options to maximize reward for input data by using the neural network, wherein the neural network includes a plurality of hidden layers;
storing position information in a latent space database, wherein the position information is in a latent space in which first output vectors that are output vectors of a predetermined hidden layer included in the neural network and, are embedded with input data used for learning of the neural network;
obtaining a second output vector which is an output vector of the predetermined hidden layer included in the neural network concerning input data to be inferred,
detecting an attack by an Adversarial Example via at least one of a plurality of attack detection modes which compare a first inference made by the neural network with a second inference based on a positional relationship between the second output vector and the first output vectors in the latent space, and
displaying an attack alert notification when the attack by Adversarial Example is detected.