Adversarial example detection device, adversarial example detection method, and program

Abstract

An adversarial example detection device includes a first feature extraction unit configured to extract first features with respect to input data and comparative data in a first calculation method, a second feature extraction unit configured to extract second features with respect to the input data and the comparative data in a second calculation method different from the first calculation method, and a determination unit configured to determine whether or not at least one piece of the input data and the comparative data is an adversarial example through calculation using the first features and the second features.

CPC Classifications