Fortifying Time Series: DTW-Certified Robust Anomaly Detection
Not on the map. Why?
Abstract (arXiv)
Time-series anomaly detection is critical for ensuring safety in high-stakes applications, where robustness is a fundamental requirement rather than a mere performance metric. Addressing the vulnerability of these systems to adversarial manipulation is therefore essential. Existing defenses are largely heuristic or provide certified robustness only under ℓp-norm constraints, which are incompatible with time-series data. In particular, ℓp-norm fails to capture the intrinsic temporal structure in time series, causing small temporal distortions to significantly alter the ℓp-norm measures. Instead, the similarity metric Dynamic Time Warping (DTW) is more suitable and widely adopted in the time-series domain, as DTW accounts for temporal alignment and remains robust to temporal variations. To date, however, there has been no certifiable robustness result in this metric that provides guarantees. In this work, we introduce the first DTW-certified robust defense in time-series anomaly detection by adapting the randomized smoothing paradigm. We develop this certificate by bridging the ℓp-norm to DTW distance through a lower-bound transformation. Extensive experiments across various datasets and models validate the effectiveness and practicality of our theoretical approach. Results demonstrate significantly improved performance, e.g., up to 18.7% in F1-score under DTW-based adversarial attacks compared to traditional certified models.
Key facts. Cited by 1 paper in the map (data through 7 Oct 2026). Builds on 36 of its 70 references that are in the map. First posted on arXiv 8 May 2026.
Builds on
36 of 70 references.
References · 36
- 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
- 2019Certified Adversarial Robustness via Randomized Smoothingcited by 1,324
- 2022TimesNet: Temporal 2D-Variation Modeling for General Time Series Analysiscited by 1,030
- 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
- 2018Certified Robustness to Adversarial Examples with Differential Privacycited by 462
- 2018Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Surveycited by 459
- 2019On Evaluating Adversarial Robustnesscited by 442
- 2018Detecting Spacecraft Anomalies Using LSTMs and Nonparametric Dynamic Thresholdingcited by 407
- 2019Provably Robust Deep Learning via Adversarially Trained Smoothed Classifierscited by 328
- 2017Multitask learning and benchmarking with clinical time series datacited by 287
- 2018Scalable and accurate deep learning for electronic health recordscited by 275
24 more
- 2018Adversarial Attacks and Defences: A Surveycited by 259
- 2018Certified Adversarial Robustness with Additive Noisecited by 178
- 2019Time-Series Anomaly Detection Service at Microsoftcited by 163
- 2019Are Labels Required for Improving Adversarial Robustness?cited by 162
- 2020Current Time Series Anomaly Detection Benchmarks are Flawed and are Creating the Illusion of Progresscited by 148
- 2020Randomized Smoothing of All Shapes and Sizescited by 146
- 2020Perceptual Adversarial Robustness: Defense Against Unseen Threat Modelscited by 137
- 2021Advances in adversarial attacks and defenses in computer vision: A surveycited by 127
- 2020Adversarial Distributional Training for Robust Deep Learningcited by 79
- 2020Detection as Regression: Certified Object Detection by Median Smoothingcited by 47
- 2021Boosting Randomized Smoothing with Variance Reduced Classifierscited by 47
- 2022A Survey of Robust Adversarial Training in Pattern Recognition: Fundamental, Theory, and Methodologiescited by 44
- 2022Calibrated One-class Classification for Unsupervised Time Series Anomaly Detectioncited by 39
- 2020Optimism in the Face of Adversity: Understanding and Improving Deep Learning through Adversarial Robustnesscited by 28
- 2021Automated Discovery of Adaptive Attacks on Adversarial Defensescited by 22
- 2023Defenses in Adversarial Machine Learning: A Surveycited by 14
- 2020Adversarial Examples in Constrained Domainscited by 11
- 2020Denoised Smoothing: A Provable Defense for Pretrained Classifierscited by 8
- 2022Adversarial Framework with Certified Robustness for Time-Series Domain via Statistical Featurescited by 7
- 2023Understanding Noise-Augmented Training for Randomized Smoothingcited by 7
- 2022Towards an Awareness of Time Series Anomaly Detection Models' Adversarial Vulnerabilitycited by 5
- 2023Diffusion Denoised Smoothing for Certified and Adversarial Robust Out-Of-Distribution Detectioncited by 5
- 2022Dynamic Time Warping based Adversarial Framework for Time-Series Domaincited by 4
- 2024Adversarially Robust Industrial Anomaly Detection Through Diffusion Modelcited by 3
Built on by
Citing papers per year: 2026: 1.
1 paper.