The invention relates to an anti-reverse
confusion method and
system for an end-side equipment
deep learning model, and the core process comprises the steps: firstly inputting an original model obtained through the training of a model training frame into a
deep learning compiling frame, and extracting three types of key information, namely, a model operator, a topological structure, parameters and dimensions, through the characteristics of a
compiler; then constructing a feature analysis module to evaluate model features, dynamically matching a
confusion scheme from a strategy
library, and balancing safety and performance; the
confusion module is embedded into a plurality of different levels such as a computational graph level, an operator template level and
tensor intermediate expression through a hierarchical compiling mechanism, and a complex scheme can be jointly implemented across multiple levels; and finally, the
compiler synchronously completes confusion reinforcement when generating the target code. According to the method, hardware
adaptation is not needed, low-overhead confusion is achieved through a native pass mechanism of a
compiler, fine-grained customized protection is supported, a model structure, parameters and
computational logic can be effectively hidden,
reverse engineering attacks can be resisted, and the method is particularly suitable for end-side equipment scenes with limited computing power.