mlsanityData to 14 Oct 2026

Trojan Horse Hunt in Time Series Forecasting for Space Operations

arXiv 2506.01849 ↗First posted 2 Jun 2025cs.LG cs.CRcited by 2

Not on the map. Why?

Abstract (arXiv)

This competition hosted on Kaggle (https://www.kaggle.com/competitions/trojan-horse-hunt-in-space) is the first part of a series of follow-up competitions and hackathons related to the "Assurance for Space Domain AI Applications" project funded by the European Space Agency (https://assurance-ai.space-codev.org/). The competition idea is based on one of the real-life AI security threats identified within the project -- the adversarial poisoning of continuously fine-tuned satellite telemetry forecasting models. The task is to develop methods for finding and reconstructing triggers (trojans) in advanced models for satellite telemetry forecasting used in safety-critical space operations. Participants are provided with 1) a large public dataset of real-life multivariate satellite telemetry (without triggers), 2) a reference model trained on the clean data, 3) a set of poisoned neural hierarchical interpolation (N-HiTS) models for time series forecasting trained on the dataset with injected triggers, and 4) Jupyter notebook with the training pipeline and baseline algorithm (the latter will be published in the last month of the competition). The main task of the competition is to reconstruct a set of 45 triggers (i.e., short multivariate time series segments) injected into the training data of the corresponding set of 45 poisoned models. The exact characteristics (i.e., shape, amplitude, and duration) of these triggers must be identified by participants. The popular Neural Cleanse method is adopted as a baseline, but it is not designed for time series analysis and new approaches are necessary for the task. The impact of the competition is not limited to the space domain, but also to many other safety-critical applications of advanced time series analysis where model poisoning may lead to serious consequences.

Key facts. Cited by 2 papers in the map (data through 14 Oct 2026). Builds on 10 of its 14 references that are in the map. First posted on arXiv 2 Jun 2025.

Builds on

10 of 14 references.

References · 10

  1. 2020Backdoor Learning: A Surveycited by 426
  2. 2022BackdoorBench: A Comprehensive Benchmark of Backdoor Learningcited by 128
  3. 2020Just How Toxic is Data Poisoning? A Unified Benchmark for Backdoor and Data Poisoning Attackscited by 116
  4. 2024BACKTIME: Backdoor Attacks on Multivariate Time Series Forecastingcited by 18
  5. 2024European Space Agency Benchmark for Anomaly Detection in Satellite Telemetrycited by 12
  6. 2022Backdoor Attacks on Time Series: A Generative Approachcited by 10
  7. 2024DLP: towards active defense against backdoor attacks with decoupled learning processcited by 10
  8. 2022Robust Multivariate Time-Series Forecasting: Adversarial Attacks and Defense Mechanismscited by 8
  9. 2025Revisiting Backdoor Attacks on Time Series Classification in the Frequency Domaincited by 4
  10. 2025TrojanTime: Backdoor Attacks on Time Series Classificationcited by 3

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2026: 2.

2 papers.