BACKTIME: Backdoor Attacks on Multivariate Time Series Forecasting

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Lin, Xiao, Liu, Zhining, Fu, Dongqi, Qiu, Ruizhong, Tong, Hanghang
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866916421760450560
author Lin, Xiao
Liu, Zhining
Fu, Dongqi
Qiu, Ruizhong
Tong, Hanghang
author_facet Lin, Xiao
Liu, Zhining
Fu, Dongqi
Qiu, Ruizhong
Tong, Hanghang
contents Multivariate Time Series (MTS) forecasting is a fundamental task with numerous real-world applications, such as transportation, climate, and epidemiology. While a myriad of powerful deep learning models have been developed for this task, few works have explored the robustness of MTS forecasting models to malicious attacks, which is crucial for their trustworthy employment in high-stake scenarios. To address this gap, we dive deep into the backdoor attacks on MTS forecasting models and propose an effective attack method named BackTime.By subtly injecting a few stealthy triggers into the MTS data, BackTime can alter the predictions of the forecasting model according to the attacker's intent. Specifically, BackTime first identifies vulnerable timestamps in the data for poisoning, and then adaptively synthesizes stealthy and effective triggers by solving a bi-level optimization problem with a GNN-based trigger generator. Extensive experiments across multiple datasets and state-of-the-art MTS forecasting models demonstrate the effectiveness, versatility, and stealthiness of \method{} attacks. The code is available at \url{https://github.com/xiaolin-cs/BackTime}.
format Preprint
id arxiv_https___arxiv_org_abs_2410_02195
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle BACKTIME: Backdoor Attacks on Multivariate Time Series Forecasting
Lin, Xiao
Liu, Zhining
Fu, Dongqi
Qiu, Ruizhong
Tong, Hanghang
Machine Learning
Artificial Intelligence
Cryptography and Security
Multivariate Time Series (MTS) forecasting is a fundamental task with numerous real-world applications, such as transportation, climate, and epidemiology. While a myriad of powerful deep learning models have been developed for this task, few works have explored the robustness of MTS forecasting models to malicious attacks, which is crucial for their trustworthy employment in high-stake scenarios. To address this gap, we dive deep into the backdoor attacks on MTS forecasting models and propose an effective attack method named BackTime.By subtly injecting a few stealthy triggers into the MTS data, BackTime can alter the predictions of the forecasting model according to the attacker's intent. Specifically, BackTime first identifies vulnerable timestamps in the data for poisoning, and then adaptively synthesizes stealthy and effective triggers by solving a bi-level optimization problem with a GNN-based trigger generator. Extensive experiments across multiple datasets and state-of-the-art MTS forecasting models demonstrate the effectiveness, versatility, and stealthiness of \method{} attacks. The code is available at \url{https://github.com/xiaolin-cs/BackTime}.
title BACKTIME: Backdoor Attacks on Multivariate Time Series Forecasting
topic Machine Learning
Artificial Intelligence
Cryptography and Security
url https://arxiv.org/abs/2410.02195