International Business Machines Corporation

Mayank Vatsa

Sharathchandra UmapathiRao Pankanti

Nalini Kanta Ratha

Gaurav Goswami

Richa Singh

A neural network is configured to suppress an output of a mitigation node in a mitigation layer of the neural network. The neural network is pre-configured to recognize objects from inputs when operating using a processor and a memory. An actual input is sent to the neural network for object recognition, the actual input is an altered input. By suppressing the output of the mitigation node, the neural network is caused to avoid falsely recognizing an object from the actual input, where the altered input is configured to cause the neural network to falsely recognize the object from the actual input.

Mitigating false recognition of altered inputs in convolutional neural networks

Mechanisms are provided for training a classifier to identify adversarial input data. A neural network processes original input data representing a plurality of non-adversarial original input data and mean output learning logic determines a mean response for each intermediate layer of the neural network based on results of processing the original input data. The neural network processes adversarial input data and layer-wise comparison logic compares, for each intermediate layer of the neural network, a response generated by the intermediate layer based on processing the adversarial input data, to the mean response associated with the intermediate layer, to thereby generate a distance metric for the intermediate layer. The layer-wise comparison logic generates a vector output based on the distance metrics that is used to train a classifier to identify adversarial input data based on responses generated by intermediate layers of the neural network.

Growing community of inventors

New Delhi, India

Mayank Vatsa