You can not select more than 25 topics Topics must start with a chinese character,a letter or number, can include dashes ('-') and can be up to 35 characters long.

test_membership_inference.py 4.1 kB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114
  1. # Copyright 2020 Huawei Technologies Co., Ltd
  2. #
  3. # Licensed under the Apache License, Version 2.0 (the "License");
  4. # you may not use this file except in compliance with the License.
  5. # You may obtain a copy of the License at
  6. #
  7. # http://www.apache.org/licenses/LICENSE-2.0
  8. #
  9. # Unless required by applicable law or agreed to in writing, software
  10. # distributed under the License is distributed on an "AS IS" BASIS,
  11. # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  12. # See the License for the specific language governing permissions and
  13. # limitations under the License.
  14. """
  15. membership inference test
  16. """
  17. import os
  18. import sys
  19. import pytest
  20. import numpy as np
  21. import mindspore.dataset as ds
  22. from mindspore import nn
  23. from mindspore.train import Model
  24. import mindspore.context as context
  25. from mindarmour.privacy.evaluation import MembershipInference
  26. sys.path.append(os.path.join(os.path.dirname(os.path.abspath(__file__)), "../"))
  27. from defenses.mock_net import Net
  28. context.set_context(mode=context.GRAPH_MODE)
  29. def dataset_generator(batch_size, batches):
  30. """mock training data."""
  31. data = np.random.randn(batches*batch_size, 1, 32, 32).astype(
  32. np.float32)
  33. label = np.random.randint(0, 10, batches*batch_size).astype(np.int32)
  34. for i in range(batches):
  35. yield data[i*batch_size:(i + 1)*batch_size],\
  36. label[i*batch_size:(i + 1)*batch_size]
  37. @pytest.mark.level0
  38. @pytest.mark.platform_x86_ascend_training
  39. @pytest.mark.platform_arm_ascend_training
  40. @pytest.mark.env_onecard
  41. @pytest.mark.component_mindarmour
  42. def test_get_membership_inference_object():
  43. net = Net()
  44. loss = nn.SoftmaxCrossEntropyWithLogits(sparse=True)
  45. opt = nn.Momentum(params=net.trainable_params(), learning_rate=0.1, momentum=0.9)
  46. model = Model(network=net, loss_fn=loss, optimizer=opt)
  47. inference_model = MembershipInference(model, -1)
  48. assert isinstance(inference_model, MembershipInference)
  49. @pytest.mark.level0
  50. @pytest.mark.platform_x86_ascend_training
  51. @pytest.mark.platform_arm_ascend_training
  52. @pytest.mark.env_onecard
  53. @pytest.mark.component_mindarmour
  54. def test_membership_inference_object_train():
  55. net = Net()
  56. loss = nn.SoftmaxCrossEntropyWithLogits(sparse=True)
  57. opt = nn.Momentum(params=net.trainable_params(), learning_rate=0.1, momentum=0.9)
  58. model = Model(network=net, loss_fn=loss, optimizer=opt)
  59. inference_model = MembershipInference(model, -1)
  60. assert isinstance(inference_model, MembershipInference)
  61. config = [{
  62. "method": "KNN",
  63. "params": {
  64. "n_neighbors": [3, 5, 7],
  65. }
  66. }]
  67. batch_size = 16
  68. batches = 1
  69. ds_train = ds.GeneratorDataset(dataset_generator(batch_size, batches),
  70. ["image", "label"])
  71. ds_test = ds.GeneratorDataset(dataset_generator(batch_size, batches),
  72. ["image", "label"])
  73. ds_train.set_dataset_size(batch_size*batches)
  74. ds_test.set_dataset_size((batch_size*batches))
  75. inference_model.train(ds_train, ds_test, config)
  76. @pytest.mark.level0
  77. @pytest.mark.platform_x86_ascend_training
  78. @pytest.mark.platform_arm_ascend_training
  79. @pytest.mark.env_onecard
  80. @pytest.mark.component_mindarmour
  81. def test_membership_inference_eval():
  82. net = Net()
  83. loss = nn.SoftmaxCrossEntropyWithLogits(sparse=True)
  84. opt = nn.Momentum(params=net.trainable_params(), learning_rate=0.1, momentum=0.9)
  85. model = Model(network=net, loss_fn=loss, optimizer=opt)
  86. inference_model = MembershipInference(model, -1)
  87. assert isinstance(inference_model, MembershipInference)
  88. batch_size = 16
  89. batches = 1
  90. eval_train = ds.GeneratorDataset(dataset_generator(batch_size, batches),
  91. ["image", "label"])
  92. eval_test = ds.GeneratorDataset(dataset_generator(batch_size, batches),
  93. ["image", "label"])
  94. eval_train.set_dataset_size(batch_size * batches)
  95. eval_test.set_dataset_size((batch_size * batches))
  96. metrics = ["precision", "accuracy", "recall"]
  97. inference_model.eval(eval_train, eval_test, metrics)

MindArmour关注AI的安全和隐私问题。致力于增强模型的安全可信、保护用户的数据隐私。主要包含3个模块:对抗样本鲁棒性模块、Fuzz Testing模块、隐私保护与评估模块。 对抗样本鲁棒性模块 对抗样本鲁棒性模块用于评估模型对于对抗样本的鲁棒性,并提供模型增强方法用于增强模型抗对抗样本攻击的能力,提升模型鲁棒性。对抗样本鲁棒性模块包含了4个子模块:对抗样本的生成、对抗样本的检测、模型防御、攻防评估。