ROBUSTNESS ESTIMATION METHOD, DATA PROCESSING METHOD, AND INFORMATION PROCESSING APPARATUS

摘要

A robustness estimation method, a data processing method, and an information processing apparatus are provided. The method for estimating robustness a classification model obtained in advance through training based on a training data set, includes: for each training sample in the training data set, determining a target sample in a target data set that has a sample similarity with a respective training sample that is within a predetermined threshold range, and calculating a classification similarity between a classification result of the classification model with respect to the respective training sample and a classification result of the classification model with respect to the determined respective target sample; and determining, based on classification similarities between classification results of respective training samples in the training data set and classification results of corresponding target samples in the target data set, classification robustness of the classification model with respect to the target data set.