针对时间序列预测的后门攻击,提出通道池化训练防御方法。
TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting

- 通过通道级池化训练缓解信号稀释问题。
- 使中毒与正常数据在训练中可区分,提升防御效果。
- 适合关注时序模型安全性的研究人员使用。
时间序列预测(TSF)极易受到后门攻击,但因数据纠缠和任务范式变化带来的挑战,有效防御仍鲜有研究。本文系统评估了十三种代表性防御方法在TSF全生命周期中的表现,并分析其失效原因。结果发现两大根本问题:(1) 数据纠缠导致通道级信号稀释,使样本过滤和触发生成类防御无法定位后门;(2) 任务范式转变引发训练损失退化,使中毒窗口与清洁窗口在训练阶段难以区分。基于此,提出一种训练时防御方法TimeGuard。该方法以通道级池化训练为核心,采用时间感知标准初始化高置信度池,缓解信号稀释;同时引入距离正则化损失选择机制,逐步扩展可靠池,缓解损失退化。在多个数据集、预测架构及攻击类型上的实验表明,TimeGuard显著提升鲁棒性,使中毒平均绝对误差(MAE_P)相比领先基线提升1.96倍,同时保持干净性能在5%内的MAE_C波动。
原文摘要 · Abstract (English)
Time Series Forecasting (TSF) is highly vulnerable to backdoor attacks, yet effective defenses remain underexplored due to challenges arising from data entanglement and shifts in task formulation. To fill this gap, we conduct a systematic evaluation of thirteen representative backdoor defenses across the TSF life cycle and analyze their failure modes. Our results reveal two fundamental issues: (1) data entanglement induces channel-level signal dilution, rendering sample-filtering and trigger-synthesis defenses ineffective at localizing backdoors; and (2) task-formulation shift leads to training-loss degeneration, causing poisoned and clean windows to become indistinguishable at training stages. Based on these findings, we propose a training-time backdoor defense for TSF, termed TimeGuard. Our method adopts channel-wise pool training as the core paradigm and initializes a high-confidence pool using time-aware criteria to mitigate signal dilution. Moreover, we introduce distance-regularized loss selection to progressively expand the reliable pool during training and ease loss degeneration. Extensive experiments across multiple datasets, forecasting architectures, and TSF backdoor attacks demonstrate that TimeGuard substantially improves robustness, boosting $\mathrm{MAE}_\mathrm{P}$ by $1.96\times$ over the leading baseline, while preserving clean performance within 5% $\mathrm{MAE}_\mathrm{C}$.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。