Patent ID: 11899787
Assignee: HITACHI, LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 8:
9. An attack detection method for improving an ability of a neural network to withstand and detect latent attacks, the method comprising:
determining which label among a plurality of labels is applicable to input data or select any one of a plurality of options to maximize reward for input data;
storing position information in a latent space database, wherein the position information is in a latent space in which first output vectors of a hidden layer included in the neural network are embedded with input data used for learning of the neural network;
obtaining a second output vector which is an output vector of the hidden layer included in the neural network with input data to be inferred;
detecting an attack by an Adversarial Example via at least one of a plurality of attack detection modes which compare a first inference made by the neural network and a second inference based on a positional relationship between the second output vector and the first output vectors in the latent space; and
displaying an attack alert notification when the attack by Adversarial Example is detected.