Patent ID: 11948054
Assignee: BOOZ ALLEN HAMILTON INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 1:
2. The system of claim 1, wherein:
the attack module includes program instructions stored within a memory having an algorithm as follows:, for n = 1...S do

  for i = 1...N do

   δavg = 0

    for j = 1...T do

     // Compute a random mask for logits of fθ

     M = random mask

     // Apply mask, M to model output

     xp = fθ (x) · M

     δ = δ + α · sign(∇δ   (xp + δ), y)) δavg = δavg + max(min(δ,

     ε), −ε)

    end

  end

 // Average the deltas found from random masks

 δavg = δavg /T

end

wherein:
S=total number of data points to attack;
N=number of times to perturb each data point;
δavg=one of N perturbations to a data point;
T=number of mask iterations;
xp=the result or output of the surrogate model;
fθ=a machine learning model; θ=parameters of the machine learning model;
δ=a current perturbation;
α=a constant;
ε=a constant;
∇δ=the computed gradient with respect to δ perturbation;
l=a loss function; and
Y=a class of data.