ADVERSARIAL ATTACK METHOD AND ADVERSARIAL ATTACK SYSTEM

To provide an adversarial attack method and an adversarial attack system capable of detecting adversarial cases specific to Japanese.SOLUTION: An adversarial attack method is executed by an adversarial attack system 1 that detects an adversarial case to a deep learner configured to process a Japanese sentence. The adversarial attack system 1 generates, as an adversarial attack case, a Japanese sentence which makes a change in a result of processing of the deep learner 20 when perturbation specific to Japanese is given to the sentence, the perturbation being a modification by which the content is not semantically changed from an original sentence.SELECTED DRAWING: Figure 1 【課題】日本語に特有の敵対的事例を発見することができる敵対的攻撃方法及び敵対的攻撃システムを提供する。【解決手段】日本語の文章を処理する深層学習器に対する敵対的事例を発見する敵対的攻撃システム１によって実行される敵対的攻撃方法である。敵対的攻撃システム１は、原文と意味内容が変化しない変更であって日本語に特有の摂動を日本語の文章に与えると深層学習器２０の処理結果が変化する文章を、敵対的事例として生成する。【選択図】図１