arXiv:2506.01849cs.LGcs.CR2025-06被引 2

发现并重建卫星遥测模型中的恶意触发器,保障太空任务安全。

Trojan Horse Hunt in Time Series Forecasting for Space Operations

  • 通过分析被污染的时序模型,逆向定位45个注入的恶意触发片段。
  • 需精确还原触发器的形状、幅度和持续时间等特征参数。
  • 适用于航天、医疗等对时序预测安全要求极高的领域。

本竞赛是欧洲航天局资助的「空间领域人工智能可信性」项目的第一阶段,聚焦于持续微调的卫星遥测预测模型面临的对抗性数据污染威胁。参赛者需从45个被污染的神经分层插值(N-HiTS)模型中,重构出训练数据中注入的45个恶意触发器(即短时多变量时间序列片段)。提供包括真实多变量卫星遥测数据集、干净数据训练的参考模型、以及多个含触发器的污染模型。采用Neural Cleanse作为基线方法,但其不适用于时序分析,需开发新策略。该任务不仅关乎航天安全,也适用于医疗、交通等依赖高可靠时序预测的场景。

原文摘要 · Abstract (English)

This competition hosted on Kaggle (https://www.kaggle.com/competitions/trojan-horse-hunt-in-space) is the first part of a series of follow-up competitions and hackathons related to the "Assurance for Space Domain AI Applications" project funded by the European Space Agency (https://assurance-ai.space-codev.org/). The competition idea is based on one of the real-life AI security threats identified within the project -- the adversarial poisoning of continuously fine-tuned satellite telemetry forecasting models. The task is to develop methods for finding and reconstructing triggers (trojans) in advanced models for satellite telemetry forecasting used in safety-critical space operations. Participants are provided with 1) a large public dataset of real-life multivariate satellite telemetry (without triggers), 2) a reference model trained on the clean data, 3) a set of poisoned neural hierarchical interpolation (N-HiTS) models for time series forecasting trained on the dataset with injected triggers, and 4) Jupyter notebook with the training pipeline and baseline algorithm (the latter will be published in the last month of the competition). The main task of the competition is to reconstruct a set of 45 triggers (i.e., short multivariate time series segments) injected into the training data of the corresponding set of 45 poisoned models. The exact characteristics (i.e., shape, amplitude, and duration) of these triggers must be identified by participants. The popular Neural Cleanse method is adopted as a baseline, but it is not designed for time series analysis and new approaches are necessary for the task. The impact of the competition is not limited to the space domain, but also to many other safety-critical applications of advanced time series analysis where model poisoning may lead to serious consequences.

时序预测模型安全对抗攻击航天AI

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。