Adversarial sample crafting for time series classification with elastic similarity measures
dc.contributor.author | Oregi, Izaskun | |
dc.contributor.author | Del Ser, Javier | |
dc.contributor.author | Perez, Aritz | |
dc.contributor.author | Lozano, Jose A. | |
dc.contributor.institution | Quantum | |
dc.date.accessioned | 2024-07-24T11:47:46Z | |
dc.date.available | 2024-07-24T11:47:46Z | |
dc.date.issued | 2018 | |
dc.description | Publisher Copyright: © 2018, Springer Nature Switzerland AG. | |
dc.description.abstract | Adversarial Machine Learning (AML) refers to the study of the robustness of classification models when processing data samples that have been intelligently manipulated to confuse them. Procedures aimed at furnishing such confusing samples exploit concrete vulnerabilities of the learning algorithm of the model at hand, by which perturbations can make a given data instance to be misclassified. In this context, the literature has so far gravitated on different AML strategies to modify data instances for diverse learning algorithms, in most cases for image classification. This work builds upon this background literature to address AML for distance based time series classifiers (e.g., nearest neighbors), in which attacks (i.e. modifications of the samples to be classified by the model) must be intelligently devised by taking into account the measure of similarity used to compare time series. In particular, we propose different attack strategies relying on guided perturbations of the input time series based on gradient information provided by a smoothed version of the distance based model to be attacked. Furthermore, we formulate the AML sample crafting process as an optimization problem driven by the Pareto trade-off between (1) a measure of distortion of the input sample with respect to its original version; and (2) the probability of the crafted sample to confuse the model. In this case, this formulated problem is efficiently tackled by using multi-objective heuristic solvers. Several experiments are discussed so as to assess whether the crafted adversarial time series succeed when confusing the distance based model under target. | en |
dc.description.sponsorship | This work has been supported by the Basque Government through the EMAITEK, BERC 2014–2017 and the ELKARTEK programs, and by the Spanish Ministry of Economy and CompetitivenessMINECO: BCAMSevero Ochoa excellence accreditation SVP-2014-068574 and SEV-2013-0323, and through the project TIN2017-82626-R funded by (AEI/FEDER, UE). Acknowledgments. This work has been supported by the Basque Government through the EMAITEK, BERC 2014–2017 and the ELKARTEK programs, and by the Spanish Ministry of Economy and Competitiveness MINECO: BCAM Severo Ochoa excellence accreditation SVP-2014-068574 and SEV-2013-0323, and through the project TIN2017-82626-R funded by (AEI/FEDER, UE). | |
dc.description.status | Peer reviewed | |
dc.format.extent | 14 | |
dc.identifier.citation | Oregi , I , Del Ser , J , Perez , A & Lozano , J A 2018 , Adversarial sample crafting for time series classification with elastic similarity measures . in Studies in Computational Intelligence . Studies in Computational Intelligence , vol. 798 , Springer Verlag , pp. 26-39 . https://doi.org/10.1007/978-3-319-99626-4_3 | |
dc.identifier.doi | 10.1007/978-3-319-99626-4_3 | |
dc.identifier.issn | 1860-949X | |
dc.identifier.uri | https://hdl.handle.net/11556/1699 | |
dc.identifier.url | http://www.scopus.com/inward/record.url?scp=85053457377&partnerID=8YFLogxK | |
dc.language.iso | eng | |
dc.publisher | Springer Verlag | |
dc.relation.ispartof | Studies in Computational Intelligence | |
dc.relation.ispartofseries | Studies in Computational Intelligence | |
dc.relation.projectID | AEI/FEDER | |
dc.relation.projectID | BERC | |
dc.relation.projectID | Australian Education International, Australian Government, AEI | |
dc.relation.projectID | Federación Española de Enfermedades Raras, FEDER | |
dc.relation.projectID | Eusko Jaurlaritza | |
dc.relation.projectID | Ministerio de Economía y Competitividad, MINECO, TIN2017-82626-R-SEV-2013-0323-SVP-2014-068574 | |
dc.rights | info:eu-repo/semantics/restrictedAccess | |
dc.subject.keywords | Adversarial machine learning | |
dc.subject.keywords | Elastic similarity measures | |
dc.subject.keywords | Time series classification | |
dc.subject.keywords | Artificial Intelligence | |
dc.title | Adversarial sample crafting for time series classification with elastic similarity measures | en |
dc.type | book part |