Apparatus and method for training classifier and apparatus and method for evaluating the robustness of classifier

摘要

A computer implemented method for training classifiersClassifierIt is configured to classify input signals of digital image data and / or audio data;Training the classifier isMultiple ξ） The perturbation provided from the perturbation ofBased on the perturbed input signal obtained by applying to the input signal provided from the training data set.The method isProvide multiple initial perturbations andIs a step of conforming perturbation from multiple initial perturbations to the input signal;Input signal isRandomly extracted from training data setsThe perturbation isApplication of perturbation to input signalThe input signal is adapted to generate a second input signal which is different from the first input signal;AndMultiple subsets of multiple initial perturbations ξ） Steps to provide as a perturbation ofMultiple ξ） Training the classifier (60) based on the perturbation of.Diagram