Abstract:Time-series data are widespread in real-world industrial scenarios. To recover and infer missing information in real-world applications, the problem of time-series prediction has been widely studied as a classical research topic in data mining. Deep learning architectures have been viewed as next-generation time-series prediction models. However, recent studies have shown that deep learning models are vulnerable to adversarial attacks. In this study, we prospectively examine the problem of time-series prediction adversarial attacks and propose an attack strategy for generating an adversarial time series by adding malicious perturbations to the original time series to deteriorate the performance of time-series prediction models. Specifically, a perturbation-based adversarial example generation algorithm is proposed using the gradient information of the prediction model. In practice, unlike the imperceptibility to humans in the field of image processing, time-series data are more sensitive to abnormal perturbations and there are more stringent requirements regarding the amount of perturbations. To address this challenge, we craft an adversarial time series based on the importance measurement to slightly perturb the original data. Based on comprehensive experiments conducted on real-world time-series datasets, we verify that the proposed adversarial attack methods not only effectively fool the target time-series prediction model LSTNet, they also attack state-of-the-art CNN-, RNN-, and MHANET-based models. Meanwhile, the results show that the proposed methods achieve a good transferability. That is, the adversarial examples generated for a specific prediction model can significantly affect the performance of the other methods. Moreover, through a comparison with existing adversarial attack approaches, we can see that much smaller perturbations are sufficient for the proposed importance-measurement based adversarial attack method. The methods described in this paper are significant in understanding the impact of adversarial attacks on a time-series prediction and promoting the robustness of such prediction technologies.

Square-Based Black-Box Adversarial Attack on Time Series Classification Using Simulated Annealing and Post-Processing-Based Defense

Score-Based Black-Box Adversarial Attack on Time Series Using Simulated Annealing Classification and Post-Processing Based Defense

Adversarial Attacks on Deep Neural Networks for Time Series Classification

Locally Black-box Adversarial Attack on Time Series

TSadv: Black-box adversarial attack on time series with local perturbations

Adversarial Attacks on Deep Neural Networks for Time Series Prediction

Adversarial attacks based on time-series features for traffic detection

Untargeted, Targeted and Universal Adversarial Attacks and Defenses on Time Series

Small Perturbations Are Enough: Adversarial Attacks on Time Series Prediction

Towards Backdoor Attack on Deep Learning Based Time Series Classification

TSFool: Crafting Highly-Imperceptible Adversarial Time Series through Multi-Objective Attack

A Universal Defense Strategy Against Adversarial Attacks Based on Attention-Guided

Correlation Analysis of Adversarial Attack in Time Series Classification

A Review of Adversarial Attack and Defense for Classification Methods

Adversarial Attack and Defense Method Based on Multivariable Time Series Data

Adversarial Attacks on Time Series

When Not to Classify: Anomaly Detection of Attacks (ADA) on DNN Classifiers at Test Time

Secure Machine Learning Against Adversarial Samples at Test Time

Towards an Awareness of Time Series Anomaly Detection Models' Adversarial Vulnerability

Targeted Black-Box Adversarial Attack Method for Image Classification Models.

A CMA-ES-Based Adversarial Attack on Black-Box Deep Neural Networks