时间序列预测中的时序统一对抗性扰动 / Temporally Unified Adversarial Perturbations for Time Series Forecasting
1️⃣ 一句话总结
这篇论文提出了一种名为‘时序统一对抗性扰动’的新方法,通过强制要求同一时间点在所有数据样本上的扰动保持一致,解决了现有攻击方法在时间序列预测中产生的时序不一致问题,从而生成了更实用、更有效的对抗性样本。
While deep learning models have achieved remarkable success in time series forecasting, their vulnerability to adversarial examples remains a critical security concern. However, existing attack methods in the forecasting field typically ignore the temporal consistency inherent in time series data, leading to divergent and contradictory perturbation values for the same timestamp across overlapping samples. This temporally inconsistent perturbations problem renders adversarial attacks impractical for real-world data manipulation. To address this, we introduce Temporally Unified Adversarial Perturbations (TUAPs), which enforce a temporal unification constraint to ensure identical perturbations for each timestamp across all overlapping samples. Moreover, we propose a novel Timestamp-wise Gradient Accumulation Method (TGAM) that provides a modular and efficient approach to effectively generate TUAPs by aggregating local gradient information from overlapping samples. By integrating TGAM with momentum-based attack algorithms, we ensure strict temporal consistency while fully utilizing series-level gradient information to explore the adversarial perturbation space. Comprehensive experiments on three benchmark datasets and four representative state-of-the-art models demonstrate that our proposed method significantly outperforms baselines in both white-box and black-box transfer attack scenarios under TUAP constraints. Moreover, our method also exhibits superior transfer attack performance even without TUAP constraints, demonstrating its effectiveness and superiority in generating adversarial perturbations for time series forecasting models.
时间序列预测中的时序统一对抗性扰动 / Temporally Unified Adversarial Perturbations for Time Series Forecasting
这篇论文提出了一种名为‘时序统一对抗性扰动’的新方法,通过强制要求同一时间点在所有数据样本上的扰动保持一致,解决了现有攻击方法在时间序列预测中产生的时序不一致问题,从而生成了更实用、更有效的对抗性样本。
源自 arXiv: 2602.11940