MODEL DETERMINATION APPARATUS AND METHOD

A model determination apparatus is configured to execute the following operations. Multiple candidate models are validated based on first adversarial validation data to generate a first accuracy corresponding to each of the candidate models, wherein the first adversarial validation data is generated by a first adversarial attack adjustment performed on validation data based on an initial model. A second adversarial attack adjustment is performed on the validation data based on each of the candidate models to generate a plurality of second adversarial validation data corresponding to each of the candidate models respectively. The candidate models are validated based on the corresponding second adversarial validation data to generate a second accuracy corresponding to each of the candidate models. At least one output model is selected from the candidate models based on the first accuracy and the second accuracy corresponding to each of the candidate models.