
doi: 10.1109/tpami.2020.2986319 , 10.25417/uic.14906784.v1 , 10.25417/uic.14906784 , 10.48550/arxiv.1902.10755
pmid: 32286957
arXiv: 1902.10755
doi: 10.1109/tpami.2020.2986319 , 10.25417/uic.14906784.v1 , 10.25417/uic.14906784 , 10.48550/arxiv.1902.10755
pmid: 32286957
arXiv: 1902.10755
Time series classification models have been garnering significant importance in the research community. However, not much research has been done on generating adversarial samples for these models. These adversarial samples can become a security concern. In this paper, we propose utilizing an adversarial transformation network (ATN) on a distilled model to attack various time series classification models. The proposed attack on the classification model utilizes a distilled model as a surrogate that mimics the behavior of the attacked classical time series classification models. Our proposed methodology is applied onto 1-Nearest Neighbor Dynamic Time Warping (1-NN) DTW and a Fully Convolutional Network (FCN), all of which are trained on 42 University of California Riverside (UCR) datasets. In this paper, we show both models were susceptible to attacks on all 42 datasets. When compared to Fast Gradient Sign Method, the proposed attack generates a larger faction of successful adversarial black-box attacks. A simple defense mechanism is successfully devised to reduce the fraction of successful adversarial samples. Finally, we recommend future researchers that develop time series classification models to incorporating adversarial data samples into their training data sets to improve resilience on adversarial samples.
FOS: Computer and information sciences, Computer Science - Machine Learning, Artificial Intelligence and Image Processing, Statistics - Machine Learning, Machine Learning (stat.ML), Machine Learning (cs.LG), Information Systems
FOS: Computer and information sciences, Computer Science - Machine Learning, Artificial Intelligence and Image Processing, Statistics - Machine Learning, Machine Learning (stat.ML), Machine Learning (cs.LG), Information Systems
| selected citations These citations are derived from selected sources. This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | 45 | |
| popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network. | Top 1% | |
| influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically). | Top 10% | |
| impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network. | Top 1% |
