An attack-deterrent generator for dynamically generating at least one AI defence module , having the following: - a tiling unit which is configured to determine at least one tile for model data , wherein the model data are associated with an AI unit and the at least one tile indicates at least one subset of the model data ; - an aggregation unit which is configured to determine aggregated data , wherein the aggregated data associate at least one, in particular mathematical, key figure with the at least one tile ; - a distribution unit which is configured to determine a distribution function for the aggregated data ; - an inference unit which is configured to determine at least one inference configuration using the distribution function ; - a data transformation unit which is configured to generate at least one AI defence module for the AI unit using the at least one inference configuration , wherein the at least one AI defence module is configured, for an input data set of the AI unit , to: • determine whether an attack on the AI unit can be associated with the input data set ; and • determine, by using a data transformation, a second input data set with which no attack on the AI unit can be associated, wherein the inference unit is configured to receive a reconstruction indication , wherein the reconstruction indication indicates whether the data transformation concerns the entire model data , a random subset of the model data , and/or an importance-based selection of the model data , wherein the inference unit is configured to determine the inference configuration by taking into account the reconstruction indication . - a tiling unit which is configured to determine at least one tile for model data , wherein the model data are associated with an AI unit and the at least one tile indicates at least one subset of the model data ; - an aggregation unit which is configured to determine aggregated data , wherein the aggregated data associate at least one, in particular mathematical, key figure with the at least one tile ; - a distribution unit which is configured to determine a distribution function for the aggregated data ; - an inference unit which is configured to determine at least one inference configuration using the distribution function ; - a data transformation unit which is configured to generate at least one AI defence module for the AI unit using the at least one inference configuration , wherein the at least one AI defence module is configured, for an input data set of the AI unit , to: • determine whether an attack on the AI unit can be associated with the input data set ; and • determine, by using a data transformation, a second input data set with which no attack on the AI unit can be associated, • determine whether an attack on the AI unit can be associated with the input data set ; and • determine, by using a data transformation, a second input data set with which no attack on the AI unit can be associated, wherein the inference unit is configured to receive a reconstruction indication , wherein the reconstruction indication indicates whether the data transformation concerns the entire model data , a random subset of the model data , and/or an importance-based selection of the model data , wherein the inference unit is configured to determine the inference configuration by taking into account the reconstruction indication . <EOS>