提出时间一致的对抗扰动,让时序预测更安全。
Temporally Unified Adversarial Perturbations for Time Series Forecasting
- 强制同一时刻扰动值在重叠样本中保持一致,解决时序不连贯问题。
- 在三个数据集上显著提升白盒与黑盒攻击成功率,优于现有方法。
- 适合研究时序模型安全性的研究人员,尤其关注对抗攻击的实用场景。
尽管深度学习模型在时序预测中取得了显著成功,但其对对抗样本的脆弱性仍是关键安全问题。现有攻击方法通常忽略时序数据固有的时间一致性,导致同一时间戳在重叠样本中出现不一致的扰动值,使攻击在真实数据操作中不可行。为此,本文提出时间统一对抗扰动(TUAPs),通过时间统一约束确保每个时间戳在所有重叠样本中具有相同的扰动值。此外,提出一种新的逐时刻梯度累积方法(TGAM),通过聚合重叠样本的局部梯度信息,高效生成TUAPs。结合基于动量的攻击算法,既保证严格的时间一致性,又充分利用序列级梯度信息探索对抗扰动空间。在三个基准数据集和四种主流模型上的实验表明,该方法在白盒与黑盒迁移攻击中均显著优于基线,即使在无TUAP约束下也表现出更优的迁移攻击性能,验证了其在生成时序预测模型对抗扰动方面的有效性与优越性。
原文摘要 · Abstract (English)
While deep learning models have achieved remarkable success in time series forecasting, their vulnerability to adversarial examples remains a critical security concern. However, existing attack methods in the forecasting field typically ignore the temporal consistency inherent in time series data, leading to divergent and contradictory perturbation values for the same timestamp across overlapping samples. This temporally inconsistent perturbations problem renders adversarial attacks impractical for real-world data manipulation. To address this, we introduce Temporally Unified Adversarial Perturbations (TUAPs), which enforce a temporal unification constraint to ensure identical perturbations for each timestamp across all overlapping samples. Moreover, we propose a novel Timestamp-wise Gradient Accumulation Method (TGAM) that provides a modular and efficient approach to effectively generate TUAPs by aggregating local gradient information from overlapping samples. By integrating TGAM with momentum-based attack algorithms, we ensure strict temporal consistency while fully utilizing series-level gradient information to explore the adversarial perturbation space. Comprehensive experiments on three benchmark datasets and four representative state-of-the-art models demonstrate that our proposed method significantly outperforms baselines in both white-box and black-box transfer attack scenarios under TUAP constraints. Moreover, our method also exhibits superior transfer attack performance even without TUAP constraints, demonstrating its effectiveness and superiority in generating adversarial perturbations for time series forecasting models.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。