Training Robust Deep Models for Time-Series Domain: Novel Algorithms and Theoretical Analysis
Not on the map. Why?
Abstract (arXiv)
Despite the success of deep neural networks (DNNs) for real-world applications over time-series data such as mobile health, little is known about how to train robust DNNs for time-series domain due to its unique characteristics compared to images and text data. In this paper, we propose a novel algorithmic framework referred as RObust Training for Time-Series (RO-TS) to create robust DNNs for time-series classification tasks. Specifically, we formulate a min-max optimization problem over the model parameters by explicitly reasoning about the robustness criteria in terms of additive perturbations to time-series inputs measured by the global alignment kernel (GAK) based distance. We also show the generality and advantages of our formulation using the summation structure over time-series alignments by relating both GAK and dynamic time warping (DTW). This problem is an instance of a family of compositional min-max optimization problems, which are challenging and open with unclear theoretical guarantee. We propose a principled stochastic compositional alternating gradient descent ascent (SCAGDA) algorithm for this family of optimization problems. Unlike traditional methods for time-series that require approximate computation of distance measures, SCAGDA approximates the GAK based distance on-the-fly using a moving average approach. We theoretically analyze the convergence rate of SCAGDA and provide strong theoretical support for the estimation of GAK based distance. Our experiments on real-world benchmarks demonstrate that RO-TS creates more robust DNNs when compared to adversarial training using prior methods that rely on data augmentation or new definitions of loss functions. We also demonstrate the importance of GAK for time-series data over the Euclidean distance. The source code of RO-TS algorithms is available at https://github.com/tahabelkhouja/Robust-Training-for-Time-Series
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 23 of its 35 references that are in the map. First posted on arXiv 9 Jul 2022.
Builds on
23 of 35 references.
References · 23
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2016Adversarial examples in the physical worldcited by 1,769
- 2018An Empirical Evaluation of Generic Convolutional and Recurrent Networks for Sequence Modelingcited by 1,476
- 2016Universal adversarial perturbationscited by 784
- 2016Linear Convergence of Gradient and Proximal-Gradient Methods Under the Polyak-Lojasiewicz Conditioncited by 539
- 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
- 2016Time Series Classification from Scratch with Deep Neural Networks: A Strong Baselinecited by 360
- 2018Black-box Generation of Adversarial Text Sequences to Evade Deep Learning Classifierscited by 345
- 2018Spatially Transformed Adversarial Examplescited by 195
- 2018Certified Adversarial Robustness with Additive Noisecited by 180
- 2016Improving the Robustness of Deep Neural Networks via Stability Trainingcited by 156
11 more
- 2016Technical Report on the CleverHans v2.1.0 Adversarial Examples Librarycited by 124
- 2020Near-Optimal Algorithms for Minimax Optimizationcited by 119
- 2014Stochastic Compositional Gradient Descent: Algorithms for Minimizing Compositions of Expected-Value Functionscited by 95
- 2019Functional Adversarial Attackscited by 82
- 2017Towards Crafting Text Adversarial Samplescited by 55
- 2019Adversarial Attacks on Deep Neural Networks for Time Series Classificationcited by 53
- 2020Solving Stochastic Compositional Optimization is Nearly as Easy as Solving Stochastic Optimizationcited by 51
- 2019Adversarial Attacks on Time Seriescited by 40
- 2020Improved Adversarial Training via Learned Optimizercited by 22
- 2017On the Limitation of Convolutional Neural Networks in Recognizing Negative Imagescited by 17
- 2018Random Warping Series: A Random Features Method for Time-Series Embeddingcited by 12
Built on by
Citing papers per year: 2022: 1.
1 paper.