Keep the Lights On, Keep the Lengths in Check: Plug-In Adversarial Detection for Time-Series LLMs in Energy Forecasting
Not on the map. Why?
Abstract (arXiv)
Accurate time-series forecasting is increasingly critical for planning and operations in low-carbon power systems. Emerging time-series large language models (TS-LLMs) now deliver this capability at scale, requiring no task-specific retraining, and are quickly becoming essential components within the Internet-of-Energy (IoE) ecosystem. However, their real-world deployment is complicated by a critical vulnerability: adversarial examples (AEs). Detecting these AEs is challenging because (i) adversarial perturbations are optimized across the entire input sequence and exploit global temporal dependencies, which renders local detection methods ineffective, and (ii) unlike traditional forecasting models with fixed input dimensions, TS-LLMs accept sequences of variable length, increasing variability that complicates detection. To address these challenges, we propose a plug-in detection framework that capitalizes on the TS-LLM's own variable-length input capability. Our method uses sampling-induced divergence as a detection signal. Given an input sequence, we generate multiple shortened variants and detect AEs by measuring the consistency of their forecasts: Benign sequences tend to produce stable predictions under sampling, whereas adversarial sequences show low forecast similarity, because perturbations optimized for a full-length sequence do not transfer reliably to shorter, differently-structured subsamples. We evaluate our approach on three representative TS-LLMs (TimeGPT, TimesFM, and TimeLLM) across three energy datasets: ETTh2 (Electricity Transformer Temperature), NI (Hourly Energy Consumption), and Consumption (Hourly Electricity Consumption and Production). Empirical results confirm strong and robust detection performance across both black-box and white-box attack scenarios, highlighting its practicality as a reliable safeguard for TS-LLM forecasting in real-world energy systems.
Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 30 of its 69 references that are in the map. First posted on arXiv 13 Dec 2025.
Builds on
30 of 69 references.
References · 30
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2020Informer: Beyond Efficient Transformer for Long Sequence Time-Series Forecastingcited by 2,169
- 2016Adversarial examples in the physical worldcited by 1,769
- 2017Modeling Long- and Short-Term Temporal Patterns with Deep Neural Networkscited by 879
- 2023One Fits All:Power General Time Series Analysis by Pretrained LMcited by 632
- 2024Unified Training of Universal Time Series Forecasting Transformerscited by 614
- 2017One pixel attack for fooling deep neural networkscited by 582
- 2017Countering Adversarial Images using Input Transformationscited by 520
- 2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 486
- 2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 446
- 2018Characterizing Adversarial Subspaces Using Local Intrinsic Dimensionalitycited by 282
- 2023Certifying LLM Safety against Adversarial Promptingcited by 266
18 more
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 244
- 2024Foundation Models for Time Series Analysis: A Tutorial and Surveycited by 239
- 2017On the (Statistical) Detection of Adversarial Examplescited by 180
- 2023TEST: Text Prototype Aligned Embedding to Activate LLM's Ability for Time Seriescited by 169
- 2023Large Models for Time Series and Spatio-Temporal Data: A Survey and Outlookcited by 110
- 2024CALF: Aligning LLMs for Time Series Forecasting via Cross-modal Fine-Tuningcited by 108
- 2024TimeCMA: Towards LLM-Empowered Multivariate Time Series Forecasting via Cross-Modality Alignmentcited by 103
- 2022Exploring the Universal Vulnerability of Prompt-based Learning Paradigmcited by 57
- 2019Adversarial Attacks on Deep Neural Networks for Time Series Classificationcited by 53
- 2017MagNet and "Efficient Defenses Against Adversarial Attacks" are Not Robust to Adversarial Examplescited by 46
- 2022DISCO: Adversarial Defense with Local Implicit Functionscited by 34
- 2017UPSET and ANGRI : Breaking High Performance Image Classifierscited by 19
- 2023Large Foundation Models for Power Systemscited by 18
- 2024Towards Building a Robust Toxicity Predictorcited by 14
- 2020Adversarial Attacks on Probabilistic Autoregressive Forecasting Modelscited by 13
- 2013Wind Energy: Forecasting Challenges for Its Operational Managementcited by 11
- 2023Targeted Attacks on Timeseries Forecastingcited by 8
- 2023RAI4IoE: Responsible AI for Enabling the Internet of Energycited by 3
Built on by
Not cited yet.