Device for improving the robustness against 'Adversarial Examples'

摘要

Apparatus for generating a manipulated data signal (xadv) for deceiving a first machine learning system (60) arranged to determine a semantic segmentation (y_cls) of a received one- or multi-dimensional data signal (x), the apparatus comprising a machine-readable storage medium, in which instructions are stored which, when executed by a computer, cause the computer to perform a method comprising the steps of: a) determining desired semantic segmentation (ytarget) of the manipulated data signal (xadv); and b) generating the manipulated data signal (xadv), depending on the received data signal (x) and the determined desired semantic segmentation (ytarget) as well as an estimated semantic segmentation (fθ) of the manipulated data signal (xadv).