Adversarial testing · Question 54 of 60
A team only has API access to a vendor's image model and wants to test it for adversarial examples. Which approaches are possible?
2 answers are correct. Hard
Show answer
Answer
- C Use a brute force approach with a vast number of tests
- D Create an equivalent model with known internals, generate adversarial inputs on it and transfer them to the vendor's model
Explanation
Without knowledge of the internals, adversarial testing is possible as black-box testing. One can create an equivalent model with known internals and apply its adversarial inputs to the original model based on the assumption of transferability, or use a brute force approach with a vast number of tests. A white-box test would require knowledge of the architecture and parameters.