Abstract:Time-series data are widespread in real-world industrial scenarios. To recover and infer missing information in real-world applications, the problem of time-series prediction has been widely studied as a classical research topic in data mining. Deep learning architectures have been viewed as next-generation time-series prediction models. However, recent studies have shown that deep learning models are vulnerable to adversarial attacks. In this study, we prospectively examine the problem of time-series prediction adversarial attacks and propose an attack strategy for generating an adversarial time series by adding malicious perturbations to the original time series to deteriorate the performance of time-series prediction models. Specifically, a perturbation-based adversarial example generation algorithm is proposed using the gradient information of the prediction model. In practice, unlike the imperceptibility to humans in the field of image processing, time-series data are more sensitive to abnormal perturbations and there are more stringent requirements regarding the amount of perturbations. To address this challenge, we craft an adversarial time series based on the importance measurement to slightly perturb the original data. Based on comprehensive experiments conducted on real-world time-series datasets, we verify that the proposed adversarial attack methods not only effectively fool the target time-series prediction model LSTNet, they also attack state-of-the-art CNN-, RNN-, and MHANET-based models. Meanwhile, the results show that the proposed methods achieve a good transferability. That is, the adversarial examples generated for a specific prediction model can significantly affect the performance of the other methods. Moreover, through a comparison with existing adversarial attack approaches, we can see that much smaller perturbations are sufficient for the proposed importance-measurement based adversarial attack method. The methods described in this paper are significant in understanding the impact of adversarial attacks on a time-series prediction and promoting the robustness of such prediction technologies.

Mitigating Targeted Universal Adversarial Attacks on Time Series Power Quality Disturbances Models

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

ADDP: Anomaly Detection for DTU Based on Power Consumption Side-Channel

Adversarial Attacks and Defense Methods for Power Quality Recognition

Black-box attacks and defense for DNN-based power quality classification in smart grid

Super-efficient detector and defense method for adversarial attacks in power quality classification

Towards Resilient and Secure Smart Grids against PMU Adversarial Attacks: A Deep Learning-Based Robust Data Engineering Approach

Untargeted, Targeted and Universal Adversarial Attacks and Defenses on Time Series

Adversarial Attacks on Deep Neural Networks for Time Series Prediction

Adversarial Attacks and Defense for CNN Based Power Quality Recognition in Smart Grid

Adversarial Purification for Data-Driven Power System Event Classifiers with Diffusion Models

Adversarial Attacks and Defenses in Multivariate Time-Series Forecasting for Smart and Connected Infrastructures

Universal Adversarial Attack on Deep Learning Based Prognostics

Feature Attention Distillation Defense for Backdoor Attack in Artificial Neural Network-Based Electricity Theft Detection

Adversarial Attacks on Deep Neural Networks for Time Series Classification

Small Perturbations Are Enough: Adversarial Attacks on Time Series Prediction

Is Machine Learning in Power Systems Vulnerable?

Adversarial Attack Mitigation Strategy for Machine Learning-Based Network Attack Detection Model in Power System

Stability Analysis for Power Depth Vision of New Power System Based on Black-Box Adversarial Attack

Exploiting Vulnerabilities of Deep Learning-based Energy Theft Detection in AMI through Adversarial Attacks

Towards an Awareness of Time Series Anomaly Detection Models' Adversarial Vulnerability