Abstract: A method for training a neural network.

Abstract: A computer-implemented method for determining an adversarial perturbation for input signals, especially sensor signals or features of sensor signals, of a machine learning system. A best perturbation is determined iteratively, wherein the best perturbation is provided as adversarial perturbation after a predefined amount of iterations, wherein at least one iteration includes: sampling a perturbation; applying the sampled perturbation to an input signal thereby determining a potential adversarial example; determining an output signal from the machine learning system for the potential adversarial example, determining a loss value characterizing a deviation of the output signal to a desired output signal, wherein the desired output signal corresponds to the input signal, if the loss value is larger than a previous loss value setting the best perturbation to the sampled perturbation.

Abstract: Methods and systems are disclosed for generating training data for a machine learning model for better performance of the model. A source image is selected from an image database, along with a target image. An image segmenter is utilized with the source image to generate a source image segmentation mask having a foreground region and a background region. The same is performed with the target image to generate a target image segmentation mask having a foreground region and a background region. Foregrounds and backgrounds of the source image and target image are determined based on the masks. The target image foreground is removed from the target image, and the source image foreground is inserted into the target image to create an augmented image having the source image foreground and the target image background. The training data for the machine learning model is updated to include this augmented image.

Abstract: A computer-implemented method for determining an output signal characterizing a semantic segmentation and/or an instance segmentation of an image. The method includes: determining a first intermediate output signal from a machine learning system, wherein the first intermediate output signal characterizes a semantic segmentation and/or an instance segmentation of the image; adapting parameters of the machine learning system based on a loss function, wherein the loss function characterizes an entropy or a cross-entropy of the first intermediate output signal; determining the output signal from the machine learning system based on the image and the adapted parameters.

Abstract: A computer-implemented method for adapting a pretrained machine learning system, which has been trained on a first training data set, to a second dataset, wherein the second dataset has different characteristics than the first data set. An input transformation module for partly undoing the distribution shift between the first and second training data set is provided.

Abstract: A method for training a neural network.

Abstract: A computer-implemented method for training a classifier for classifying input signals provided to the classifier. The classifier is configured to obtain an output signal characterizing a classification of the input signal. The method for training includes: providing a set of perturbations; providing a subset of first training samples each comprising an input signal and a corresponding desired output signal from a first dataset of training samples; selecting a first perturbation for an input signal and a corresponding desired output signal from the subset; obtaining a second perturbation; obtaining a first adversarial example by applying the second perturbation to the input signal; adapting the classifier by training the classifier based on the first adversarial example and the corresponding desired output signal to harden the classifier against the second perturbation; replacing the first perturbation in the set of perturbations a linear combination of the first perturbation and the second perturbation.

Abstract: A computer-implemented method for training a classifier. The classifier is configured to classify input signals of digital image data and/or audio data. The training of the classifier is based on a perturbed input signal obtained by applying a perturbation provided from a plurality of perturbations to an input signal provided from a training dataset. The method includes: providing a plurality of initial perturbations; adapting a perturbation from the plurality of initial perturbations to an input signal, wherein the input signal is randomly drawn from the training dataset and the perturbation is adapted to the input signal such that applying the perturbation to the input signal yields a second input signal, which is classified differently than the first input signal; providing a subset of the plurality of initial perturbations as plurality of perturbations; and training the classifier based on the plurality of perturbations.

Abstract: A method for measuring the sensitivity of a classifier for digital images against adversarial attacks. The classifier includes at least one neural network. The method includes: providing a digital image for which the sensitivity is to be measured; providing a generator that is trained to map elements of a latent space to a realistic image; obtaining, according to a set of parameters, an element of the latent space; mapping, using the generator, this element to a disturbance in the space of realistic images; perturbing the digital image with this disturbance; determining, using the classifier, a classification result for the perturbed image; determining, from the classification result, the impact of the disturbance on the classification result; optimizing the set of parameters to maximize this impact; and determining, based at least in part on the maximum impact, the sensitivity of the classifier.