arXiv:2508.08955cs.LG2025-08

用频域损失攻击时间序列预测模型,发现其极易被干扰。

Fre-CW: Targeted Attack on Time Series Forecasting using Frequency Domain Loss

  • 结合时域与频域损失生成对抗样本
  • 在多个主流数据集上实现高攻击成功率
  • 首次探索频域特征在时序攻击中的作用

基于Transformer的模型在时间序列预测中取得显著进展,但深度学习模型易受对抗攻击的局限性在时序预测领域尚未充分研究。与计算机视觉等领域相比,时间序列数据的频域特征对预测任务至关重要,却未在对抗攻击中得到足够关注。本文提出一种基于频域损失的时间序列预测攻击算法,将原本用于分类任务的攻击方法适配至预测场景,并同时优化时域与频域损失以生成对抗样本。据我们所知,这是首个利用频域信息进行时序对抗攻击的研究。实验结果表明,当前主流时间序列预测模型极易受到此类攻击,该方法在多个主要时序预测数据集上均表现出色。

原文摘要 · Abstract (English)

Transformer-based models have made significant progress in time series forecasting. However, a key limitation of deep learning models is their susceptibility to adversarial attacks, which has not been studied enough in the context of time series prediction. In contrast to areas such as computer vision, where adversarial robustness has been extensively studied, frequency domain features of time series data play an important role in the prediction task but have not been sufficiently explored in terms of adversarial attacks. This paper proposes a time series prediction attack algorithm based on frequency domain loss. Specifically, we adapt an attack method originally designed for classification tasks to the prediction field and optimize the adversarial samples using both time-domain and frequency-domain losses. To the best of our knowledge, there is no relevant research on using frequency information for time-series adversarial attacks. Our experimental results show that these current time series prediction models are vulnerable to adversarial attacks, and our approach achieves excellent performance on major time series forecasting datasets.

时序攻击频域分析对抗样本

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。