Method and system for creating an ensemble of machine learning models to defend against adversarial examples

Abstract

One embodiment provides a system which facilitates construction of an ensemble of machine learning models. During operation, the system determines a training set of data objects, wherein each data object is associated with one of a plurality of classes. The system divides the training set of data objects into a number of partitions. The system generates a respective machine learning model for each respective partition using a universal kernel function, which processes the data objects divided into a respective partition to obtain the ensemble of machine learning models. The system trains the machine learning models based on the data objects of the training set. The system predicts an outcome for a testing data object based on the ensemble of machine learning models and an ensemble decision rule.