paper-with-me

Papers

TimeGuard: Channel-wise Pool Training for Backdoor Defense in Time Series Forecasting

2026-05-21 · Quang Duc Nguyen, Siyuan Liang, Yiming Li, Fushuo Huo, Dacheng Tao arxiv

Time Series Forecasting (TSF) is highly vulnerable to backdoor attacks, yet effective defenses remain underexplored due to challenges arising from data entanglement and shifts in task formulation. To fill this gap, we conduct a systematic evaluation of thirteen representative backdoor defenses across the TSF life cycle and analyze their failure modes. Our results reveal two fundamental issues: (1) data entanglement induces channel-level signal dilution, rendering sample-filtering and trigger-synthesis defenses ineffective at localizing backdoors; and (2) task-formulation shift leads to training-loss degeneration, causing poisoned and clean windows to become indistinguishable at training stages. Based on these findings, we propose a training-time backdoor defense for TSF, termed TimeGuard. Our method adopts channel-wise pool training as the core paradigm and initializes a high-confidence pool using time-aware criteria to mitigate signal dilution. Moreover, we introduce distance-regularized loss selection to progressively expand the reliable pool during training and ease loss degeneration. Extensive experiments across multiple datasets, forecasting architectures, and TSF backdoor attacks demonstrate that TimeGuard substantially improves robustness, boosting $\mathrm{MAE}_\mathrm{P}$ by $1.96\times$ over the leading baseline, while preserving clean performance within 5% $\mathrm{MAE}_\mathrm{C}$.

📄 PDF Abstract BibTeX arXiv:2605.22365

Code (0)

등록된 구현이 없습니다.

Tasks

Time Series Forecasting

Similar Papers 제목 키워드 기반

Backdoor Defense via Adaptively Splitting Poisoned Dataset

2023-03-23 · CVPR 2023 1 · Kuofeng Gao, Yang Bai, Jindong Gu, Yong Yang 외

Backdoor defenses have been studied to alleviate the threat of deep neural networks (DNNs) being backdoor attacked and thus maliciously altered. Since DNNs usually adopt some external training data from an untrusted thir…

backdoor defense

Speaker embeddings by modeling channel-wise correlations

2021-04-06 · Themos Stafylakis, Johan Rohdin, Lukas Burget

Speaker embeddings extracted with deep 2D convolutional neural networks are typically modeled as projections of first and second order statistics of channel-frequency pairs onto a linear layer, using either average or at…

Speaker RecognitionStyle Transfer

Group Generalized Mean Pooling for Vision Transformer

2022-12-08 · Byungsoo Ko, Han-Gyu Kim, Byeongho Heo, Sangdoo Yun 외

Vision Transformer (ViT) extracts the final representation from either class token or an average of all patch tokens, following the architecture of Transformer in Natural Language Processing (NLP) or Convolutional Neural…

Image RetrievalRepresentation LearningRetrieval

Dynamic Backdoors with Global Average Pooling

2022-03-04 · Stefanos Koffas, Stjepan Picek, Mauro Conti

Outsourced training and machine learning as a service have resulted in novel attack vectors like backdoor attacks. Such attacks embed a secret functionality in a neural network activated when the trigger is added to its …

Classificationimage-classificationImage ClassificationSentiment Analysis+1

Boosting Backdoor Attack with A Learnable Poisoning Sample Selection Strategy

2023-07-14 · Zihao Zhu, Mingda Zhang, Shaokui Wei, Li Shen 외

Data-poisoning based backdoor attacks aim to insert backdoor into models by manipulating training datasets without controlling the training process of the target model. Existing attack methods mainly focus on designing t…

Backdoor AttackData Poisoning