The invention discloses a
back door defense method based on forgetting learning and implicit hypergradient. The method comprises the steps of assuming a
back door label, generating a possible
back door trigger corresponding to the
label and performing parameter search, obtaining a static back door trigger, adding disturbance, enabling an optimizer to optimize the back door
label in a direction deviating from a correct label, and adapting to a dynamic back door trigger. Carrying out probability superposition by using the balanced sample; according to the parameters of the static trigger and the dynamic trigger and the
prediction probability accumulative distribution, calculating a comprehensive
score of the
backdoor tag, and calculating a target tag; information such as model features is extracted as a
training set, and the trained
backdoor detection model is used for model
backdoor detection; constructing a mixed
data set, and performing data enhancement on the mixed
data set; and performing forgetting training and multi-stage implicit super-gradient training on the classification model by using the enhanced
data set, and deleting the back door of the classification model. According to the method, the backdoor is effectively deleted from the neural
network model, so that the safety and reliability of the model are ensured.