INFORMATION PROCESSING PROGRAM, DEVICE, AND METHOD FOR DETECTING A BACKDOOR

An information processing program comprising instructions which, when the program is executed by a computer, cause the computer to execute processing, the processing including: generating a trigger image by using a generation processing configured to receive an input image and output the trigger ima...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
1. Verfasser: Shimizu, Toshiya
Format: Patent
Sprache:eng ; fre ; ger
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:An information processing program comprising instructions which, when the program is executed by a computer, cause the computer to execute processing, the processing including: generating a trigger image by using a generation processing configured to receive an input image and output the trigger image; calculating a first index that determines whether or not the trigger image serves as a backdoor for a trained target model; calculating a second index that determines whether or not the trigger image is included in an image set prepared in advance as prior knowledge; executing machine learning of the generation processing using the first index and the second index; and detecting a backdoor that exists in the target model on a basis of the first index for the trigger image generated by the generation processing in which the machine learning has been executed.