| CPC G06N 3/08 (2013.01) [G06F 18/2413 (2023.01); G06F 21/36 (2013.01)] | 8 Claims |
|
1. A model building apparatus comprising a controller,
the controller being programmed to:
build a generation model that outputs an adversarial example, which causes misclassification by a learned model, when a source sample is entered into the generation model; and
calculate a first evaluation value and a second evaluation value, wherein the first evaluation value is smaller as a difference is smaller between an actual visual feature of the adversarial example outputted from the generation model and a target visual feature of the adversarial example that are set to be different from a visual feature of the source sample, and the second evaluation value is smaller as there is a higher possibility that the learned model misclassifies the adversarial example outputted from the generation model,
wherein
the controller is programmed to build the generation model by updating the generation model such that an index value based on the first and second evaluation values is smaller,
the controller is further programmed to generate an approximate model for approximating the learned model, and
the controller is programmed to calculate the second evaluation value on the basis of a parameter for defining the approximate model.
|