arXiv:2601.04247cs.CRcs.AI2026-01AAAI被引 1

让时间序列后门攻击实现延迟触发,突破固定位置限制。

Beyond Immediate Activation: Temporally Decoupled Backdoor Attacks on Time Series Forecasting

  • 用位置引导的触发生成机制,实现跨维度灵活激活
  • 在真实数据集上攻击成功率超基线,且隐蔽性强
  • 适合研究安全防御或后门检测的学者参考

现有针对多变量时间序列(MTS)预测的后门攻击要求触发器与目标模式在时间和维度上严格同步,需在固定位置同时激活。然而现实场景常需延迟且变量特异的激活。本文识别此关键需求,提出时序解耦后门攻击框架TDBA。通过注入编码目标模式预期位置的触发器,TDBA可在预测数据中任意位置激活目标模式,且各变量维度的激活位置可灵活变化。TDBA引入两个核心模块:(1) 基于平滑高斯先验的位置引导触发生成机制,生成与目标模式位置相关的触发器;(2) 位置感知优化模块,根据触发器完整度、模式覆盖度和时间偏移量分配软权重,实现精准且隐蔽的攻击优化。在真实数据集上的大量实验表明,TDBA在攻击效果上持续优于现有基线,同时保持良好隐蔽性。消融实验证实其设计具有可控性与鲁棒性。

原文摘要 · Abstract (English)

Existing backdoor attacks on multivariate time series (MTS) forecasting enforce strict temporal and dimensional coupling between triggers and target patterns, requiring synchronous activation at fixed positions across variables. However, realistic scenarios often demand delayed and variable-specific activation. We identify this critical unmet need and propose TDBA, a temporally decoupled backdoor attack framework for MTS forecasting. By injecting triggers that encode the expected location of the target pattern, TDBA enables the activation of the target pattern at any positions within the forecasted data, with the activation position flexibly varying across different variable dimensions. TDBA introduces two core modules: (1) a position-guided trigger generation mechanism that leverages smoothed Gaussian priors to generate triggers that are position-related to the predefined target pattern; and (2) a position-aware optimization module that assigns soft weights based on trigger completeness, pattern coverage, and temporal offset, facilitating targeted and stealthy attack optimization. Extensive experiments on real-world datasets show that TDBA consistently outperforms existing baselines in effectiveness while maintaining good stealthiness. Ablation studies confirm the controllability and robustness of its design.

后门攻击时间序列安全防御

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。