Adversarial Attacks and Defenses in Multivariate Time-Series Forecasting for Smart and Connected Infrastructures
Not on the map. Why?
Abstract (arXiv)
The emergence of deep learning models has revolutionized various industries over the last decade, leading to a surge in connected devices and infrastructures. However, these models can be tricked into making incorrect predictions with high confidence, leading to disastrous failures and security concerns. To this end, we explore the impact of adversarial attacks on multivariate time-series forecasting and investigate methods to counter them. Specifically, we employ untargeted white-box attacks, namely the Fast Gradient Sign Method (FGSM) and the Basic Iterative Method (BIM), to poison the inputs to the training process, effectively misleading the model. We also illustrate the subtle modifications to the inputs after the attack, which makes detecting the attack using the naked eye quite difficult. Having demonstrated the feasibility of these attacks, we develop robust models through adversarial training and model hardening. We are among the first to showcase the transferability of these attacks and defenses by extrapolating our work from the benchmark electricity data to a larger, 10-year real-world data used for predicting the time-to-failure of hard disks. Our experimental results confirm that the attacks and defenses achieve the desired security thresholds, leading to a 72.41% and 94.81% decrease in RMSE for the electricity and hard disk datasets respectively after implementing the adversarial defenses.
Key facts. Cited by 3 papers in the map (data through 14 Oct 2026). Builds on 33 of its 72 references that are in the map. First posted on arXiv 27 Aug 2024.
Builds on
33 of 72 references.
References · 33
- 2014Adam: A Method for Stochastic Optimizationcited by 37,240
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
- 2013Intriguing properties of neural networkscited by 5,155
- 2014Learning Phrase Representations using RNN Encoder-Decoder for Statistical Machine Translationcited by 4,057
- 2014Sequence to Sequence Learning with Neural Networkscited by 2,986
- 2016Adversarial examples in the physical worldcited by 1,769
- 2016Practical Black-Box Attacks against Machine Learningcited by 903
- 2016Universal adversarial perturbationscited by 784
- 2017One pixel attack for fooling deep neural networkscited by 582
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 460
- 2019Financial Time Series Forecasting with Deep Learning : A Systematic Literature Review: 2005-2019cited by 273
21 more
- 2019Enhancing Adversarial Example Transferability with an Intermediate Level Attackcited by 140
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2019Sparse and Imperceivable Adversarial Attackscited by 95
- 2017Exploring the Landscape of Spatial Robustnesscited by 81
- 2020Adversarial Distributional Training for Robust Deep Learningcited by 79
- 2017Robust Physical-World Attacks on Deep Learning Modelscited by 72
- 2019Adversarial Defense by Restricting the Hidden Space of Deep Neural Networkscited by 56
- 2018Bilateral Adversarial Training: Towards Fast Training of More Robust Models Against Adversarial Attackscited by 48
- 2019Adversarial Attacks on Time Seriescited by 40
- 2020Learn2Perturb: an End-to-end Feature Perturbation Learning to Improve Adversarial Robustnesscited by 27
- 2020Adversarial Examples in Deep Learning for Multivariate Time Series Regressioncited by 26
- 2017Regularizing deep networks using efficient layerwise adversarial trainingcited by 24
- 2021Adversarial Attacks on Deep Models for Financial Transaction Recordscited by 24
- 2021ML Attack Models: Adversarial Attacks and Data Poisoning Attackscited by 24
- 2021Untargeted, Targeted and Universal Adversarial Attacks and Defenses on Time Seriescited by 21
- 2017Is Deep Learning Safe for Robot Vision? Adversarial Examples against the iCub Humanoidcited by 19
- 2020Adversarial Attacks on Multivariate Time Seriescited by 13
- 2023Targeted Attacks on Timeseries Forecastingcited by 8
- 2019The LogBarrier adversarial attack: making effective use of decision boundary informationcited by 7
- 2023Large-scale End-of-Life Prediction of Hard Disks in Distributed Datacenterscited by 3
- 2023TFBEST: Dual-Aspect Transformer with Learnable Positional Encoding for Failure Predictioncited by 1
Built on by
Citing papers per year: 2026: 3.
3 papers.