CONTROL METHOD, INFORMATION PROCESSING DEVICE, AND CONTROL PROGRAM

The accuracy of evaluating the attack resistance of a learned model is improved.A storage unit (11) holds a classification model (13) that calculates a confidence score from image data, and a transformation model (14) that is a model for transforming a feature value having fewer dimensions than the image data into the image data and is created such that a set of feature values corresponding to a set of image data follows a probability distribution (15). A processing unit (12) extracts a feature value (16) according to the probability distribution (15). The processing unit (12) transforms the feature value (16) into image data (17) using the transformation model (14) and calculates a confidence score (18) corresponding to the image data (17) using the classification model (13). The processing unit (12) updates, based on the probability distribution (15) and the feature value (16), a feature value to be input to the transformation model (14) from the feature value (16) to a feature value (19) in such a manner that a confidence score to be calculated is higher than the confidence score (18) .