Abstract:Time-series data are widespread in real-world industrial scenarios. To recover and infer missing information in real-world applications, the problem of time-series prediction has been widely studied as a classical research topic in data mining. Deep learning architectures have been viewed as next-generation time-series prediction models. However, recent studies have shown that deep learning models are vulnerable to adversarial attacks. In this study, we prospectively examine the problem of time-series prediction adversarial attacks and propose an attack strategy for generating an adversarial time series by adding malicious perturbations to the original time series to deteriorate the performance of time-series prediction models. Specifically, a perturbation-based adversarial example generation algorithm is proposed using the gradient information of the prediction model. In practice, unlike the imperceptibility to humans in the field of image processing, time-series data are more sensitive to abnormal perturbations and there are more stringent requirements regarding the amount of perturbations. To address this challenge, we craft an adversarial time series based on the importance measurement to slightly perturb the original data. Based on comprehensive experiments conducted on real-world time-series datasets, we verify that the proposed adversarial attack methods not only effectively fool the target time-series prediction model LSTNet, they also attack state-of-the-art CNN-, RNN-, and MHANET-based models. Meanwhile, the results show that the proposed methods achieve a good transferability. That is, the adversarial examples generated for a specific prediction model can significantly affect the performance of the other methods. Moreover, through a comparison with existing adversarial attack approaches, we can see that much smaller perturbations are sufficient for the proposed importance-measurement based adversarial attack method. The methods described in this paper are significant in understanding the impact of adversarial attacks on a time-series prediction and promoting the robustness of such prediction technologies.

Adversarial Attacks on Deep Neural Networks for Time Series Prediction

Small Perturbations Are Enough: Adversarial Attacks on Time Series Prediction

Adversarial Attacks on Deep Neural Networks for Time Series Classification

TSadv: Black-box adversarial attack on time series with local perturbations

Locally Black-box Adversarial Attack on Time Series

Untargeted, Targeted and Universal Adversarial Attacks and Defenses on Time Series

Towards an Awareness of Time Series Anomaly Detection Models' Adversarial Vulnerability

Score-Based Black-Box Adversarial Attack on Time Series Using Simulated Annealing Classification and Post-Processing Based Defense

Square-Based Black-Box Adversarial Attack on Time Series Classification Using Simulated Annealing and Post-Processing-Based Defense

Adversarial attacks based on time-series features for traffic detection

Adversarial Attacks on Time Series

Towards Backdoor Attack on Deep Learning Based Time Series Classification

Universal Adversarial Attack on Deep Learning Based Prognostics

TSFool: Crafting Highly-Imperceptible Adversarial Time Series through Multi-Objective Attack

Adversarial Vulnerabilities in Large Language Models for Time Series Forecasting

BACKTIME: Backdoor Attacks on Multivariate Time Series Forecasting

Backdoor Attacks on Time Series: A Generative Approach

Mitigating Targeted Universal Adversarial Attacks on Time Series Power Quality Disturbances Models

Correlation Analysis of Adversarial Attack in Time Series Classification

Adversarial Danger Identification on Temporally Dynamic Graphs

Wasserstein Adversarial Examples on Univariant Time Series Data