Adversarial Attack Detection via Pre-Trained ML Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for determining the security of computing platforms are unreliable due to reliance on outdated and inaccurate publicly available information, and manual techniques by network engineers are prone to errors and subjective opinions, leading to delayed identification and mitigation of security vulnerabilities.

Innovation Solution

A system that uses machine learning models to analyze security vulnerabilities and provide a graphical user interface for displaying platform-specific end-to-end security vulnerabilities, allowing for real-time determination of impacted computing aspects and visual indication of security impact levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If machine learning models are used to detect adversarial attacks, then detection accuracy is improved, but computational complexity and resource requirements increase

Engineering Contradiction:
Improvedetection accuracyVSAvoidcomputational complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by training multiple machine learning models offline before deployment. During runtime, pre-trained models are used to detect adversarial attacks, reducing real-time computational complexity while maintaining high detection accuracy through预先 prepared detection capabilities

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The detection system is segmented into multiple specialized machine learning models, each trained to detect specific types of adversarial attacks. This segmentation allows the system to distribute computational load across multiple models rather than using a single complex model, improving both detection accuracy for different attack types and managing computational complexity

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If multiple machine learning models are deployed for comprehensive attack detection, then detection coverage is improved, but system resource consumption increases

Engineering Contradiction:
Improvedetection coverageVSAvoidresource consumption
Core Design Contradiction:
Adaptability or versatilityVSUse of energy by moving object

Solution Approach 1:

The system implements partial action by activating only the necessary machine learning models based on the specific context and type of adversarial attack detected. Instead of running all models continuously, the system selectively engages models as needed, improving detection coverage while reducing overall resource consumption

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system employs self-service mechanisms where machine learning models automatically select and execute appropriate detection strategies based on input characteristics. This self-service capability allows comprehensive detection coverage while optimizing resource usage by avoiding unnecessary model executions

Inventive Principle:
Principle #25Self-service

3Loss of time

If real-time vulnerability identification is implemented, then response time is improved, but processing accuracy may deteriorate due to time constraints

Engineering Contradiction:
Improveresponse timeVSAvoidprocessing accuracy
Core Design Contradiction:
Loss of timeVSMeasurement precision

Solution Approach 1:

The system performs preliminary actions by pre-training multiple machine learning models with diverse attack patterns before deployment. During real-time operation, these pre-trained models can quickly identify vulnerabilities without sacrificing accuracy, as the heavy computational work of learning patterns was completed in advance

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system replaces traditional manual or rule-based vulnerability identification methods with machine learning-based automated detection. This substitution enables real-time processing with high accuracy by leveraging the pattern recognition capabilities of trained models rather than relying on time-consuming manual analysis

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS12271491B2Detection and mitigation of machine learning model adversarial attacks
Publication Date: 2025.04.08 CITIBANK N A
  • US12271491B2 patent drawing
  • US12271491B2 patent drawing
  • US12271491B2 patent drawing

AI summary

Described herein are systems and methods for verifying the integrity of data, such as data used for training machine learning models. Some implementations are directed to verifying the provenance of datasets, the contents of datasets, or both. In some implementations, multiple filters are selected for verifying the contents of datasets. Filters can be selected based on rules, random selection, or using a machine learning model in some implementations. In some implementations, data cleaning is provided.