Patent ID: 11941118
Assignee: CARRIER CORPORATION
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 7:
8. A method for building a robust classifier against evasion attacks, the method comprising:
receiving, by a processor, an application;
identifying one or more features of the application;
determining a first confidence score for a first version of the application including a first set of features and determining a second confidence score for a second version of the application including a second set of features, wherein the first set of features is different than the second set of features;
determining a difference between the first confidence score and the second confidence score;
comparing the difference with a convergence threshold;
based on the comparison, determining whether the first confidence score exceeds a confidence score threshold; and
generating a report based on determining the first confidence score exceeds the confidence score threshold;
wherein in response to the difference being greater than the convergence threshold, determining a third version of the application by removing one feature of the one or more features from the second version of the application;
determining a third confidence score of the third version of the application;
determining a difference between the second confidence score and the third confidence score;
comparing the difference with the convergence threshold;
based on the comparison, determining whether the second confidence score exceeds the confidence score threshold; and
generating the report based on determining the second confidence score exceeds the confidence score threshold.