arXiv:2503.09712cs.LGcs.AI2025-03被引 7

针对时序分类模型提出高效频域后门攻击方法,成功率超90%。

Revisiting Backdoor Attacks on Time Series Classification in the Frequency Domain

  • 基于频域分析生成触发器,提升攻击有效性与效率。
  • 在8个数据集上攻击成功率超90%,清洁数据准确率下降不足3%。
  • 适合研究时序模型安全或防御后门攻击的学者参考。

时序分类(TSC)是现代网络应用的核心,广泛应用于金融数据分析、网络流量监控和用户行为分析。近年来,深度神经网络(DNN)显著提升了TSC模型的性能,但其易受后门攻击影响,攻击者可隐蔽植入触发器以引发恶意结果。现有针对DNN-TSC的后门攻击方法仍较原始,早期方法沿用计算机视觉的触发器设计,对时序数据无效;近期方法虽采用生成模型生成触发器,但计算开销大。本文分析现有攻击局限,提出改进方法FreqBack。受DNN天然捕捉时序信号频域特征的启发,我们发现频域中不当扰动是攻击失效的根本原因。为此,我们基于频域分析设计高效触发器生成策略。FreqBack在5种模型、8个数据集上表现优异,攻击成功率超过90%,且在干净数据上的模型准确率下降低于3%。

原文摘要 · Abstract (English)

Time series classification (TSC) is a cornerstone of modern web applications, powering tasks such as financial data analysis, network traffic monitoring, and user behavior analysis. In recent years, deep neural networks (DNNs) have greatly enhanced the performance of TSC models in these critical domains. However, DNNs are vulnerable to backdoor attacks, where attackers can covertly implant triggers into models to induce malicious outcomes. Existing backdoor attacks targeting DNN-based TSC models remain elementary. In particular, early methods borrow trigger designs from computer vision, which are ineffective for time series data. More recent approaches utilize generative models for trigger generation, but at the cost of significant computational complexity. In this work, we analyze the limitations of existing attacks and introduce an enhanced method, FreqBack. Drawing inspiration from the fact that DNN models inherently capture frequency domain features in time series data, we identify that improper perturbations in the frequency domain are the root cause of ineffective attacks. To address this, we propose to generate triggers both effectively and efficiently, guided by frequency analysis. FreqBack exhibits substantial performance across five models and eight datasets, achieving an impressive attack success rate of over 90%, while maintaining less than a 3% drop in model accuracy on clean data.

时序分类后门攻击频域分析深度学习安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。