An attack-deterrent generator for dynamically generating at least one AI defence module, having the following: - a tiling unit which is configured to determine at least one tile (26, 53, 61) for model data, wherein the model data are associated with an AI unit and the at least one tile (26, 53, 61) indicates at least one subset of the model data; - an aggregation unit which is configured to determine aggregated data, wherein the aggregated data associate at least one, in particular mathematical, key figure with the at least one tile (26, 53, 61); - a distribution unit which is configured to determine a distribution function (28, 65) for the aggregated data; - an inference unit which is configured to determine at least one inference configuration using the distribution function (28, 65); - a data transformation unit which is configured to generate at least one AI defence module for the AI unit using the at least one inference configuration, wherein the at least one AI defence module is configured, for an input data set (5, 14) of the AI unit, to: • determine whether an attack on the AI unit can be associated with the input data set (5, 14); and • determine, by using a data transformation, a second input data set with which no attack on the AI unit can be associated, wherein the inference unit is configured to receive a reconstruction indication, wherein the reconstruction indication indicates whether the data transformation concerns the entire model data, a random subset of the model data, and/or an importance-based selection of the model data, wherein the inference unit is configured to determine the inference configuration by taking into account the reconstruction indication. - a tiling unit which is configured to determine at least one tile (26, 53, 61) for model data, wherein the model data are associated with an AI unit and the at least one tile (26, 53, 61) indicates at least one subset of the model data; - an aggregation unit which is configured to determine aggregated data, wherein the aggregated data associate at least one, in particular mathematical, key figure with the at least one tile (26, 53, 61); - a distribution unit which is configured to determine a distribution function (28, 65) for the aggregated data; - an inference unit which is configured to determine at least one inference configuration using the distribution function (28, 65); - a data transformation unit which is configured to generate at least one AI defence module for the AI unit using the at least one inference configuration, wherein the at least one AI defence module is configured, for an input data set (5, 14) of the AI unit, to: • determine whether an attack on the AI unit can be associated with the input data set (5, 14); and • determine, by using a data transformation, a second input data set with which no attack on the AI unit can be associated, • determine whether an attack on the AI unit can be associated with the input data set (5, 14); and • determine, by using a data transformation, a second input data set with which no attack on the AI unit can be associated, wherein the inference unit is configured to receive a reconstruction indication, wherein the reconstruction indication indicates whether the data transformation concerns the entire model data, a random subset of the model data, and/or an importance-based selection of the model data, wherein the inference unit is configured to determine the inference configuration by taking into account the reconstruction indication.