Fish & Richardson P.C.
Method, apparatus, and electronic device for detecting model security
Implementations of the present specification disclose a method and an apparatus for detecting model security and an electronic device. The method includes the following: obtaining result data computed by using a model, wherein the result data comprises intermediate result data and output result data; obtaining a discriminator through training by using a generative adversarial network (GAN) framework, the model, and a sample; discriminating the result data by using the discriminator by using the model for current input data, to detect whether the model is currently secure, wherein the model is in a trusted execution environment for obtaining the discriminator through training; and determining a security detection result of the model.
Alibaba Group Holding Limited
G G G G G G G G G G
G06N G06N G06F G06N G06N G06N G06F G06N G06F G06F
inventional inventional inventional inventional inventional inventional inventional inventional inventional inventional
Jupeng Caiwei
Xia Li