Robust Spatiotemporal Traffic Forecasting with Reinforced Dynamic Adversarial Training

被引:3
作者
Liu, Fan [1 ]
Zhang, Weijia [1 ]
Liu, Hao [1 ,2 ]
机构
[1] Hong Kong Univ Sci & Technol Guangzhou, Artificial Intelligence Thrust, Guangzhou, Peoples R China
[2] Hong Kong Univ Sci & Technol, Dept Comp Sci & Engn, Guangzhou, Peoples R China
来源
PROCEEDINGS OF THE 29TH ACM SIGKDD CONFERENCE ON KNOWLEDGE DISCOVERY AND DATA MINING, KDD 2023 | 2023年
基金
中国国家自然科学基金;
关键词
robust spatiotemporal traffic forecasting; adversarial training; adversarial learning;
D O I
10.1145/3580305.3599492
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
Machine learning-based forecasting models are commonly used in Intelligent Transportation Systems (ITS) to predict traffic patterns and provide city-wide services. However, most of the existing models are susceptible to adversarial attacks, which can lead to inaccurate predictions and negative consequences such as congestion and delays. Therefore, improving the adversarial robustness of these models is crucial for ITS. In this paper, we propose a novel framework for incorporating adversarial training into spatiotemporal traffic forecasting tasks. We demonstrate that traditional adversarial training methods designated for static domains cannot be directly applied to traffic forecasting tasks, as they fail to effectively defend against dynamic adversarial attacks. Then, we propose a reinforcement learning-based method to learn the optimal node selection strategy for adversarial examples, which simultaneously strengthens the dynamic attack defense capability and reduces the model overfitting. Additionally, we introduce a self-knowledge distillation regularization module to overcome the "forgetting issue" caused by continuously changing adversarial nodes during training. We evaluate our approach on two real-world traffic datasets and demonstrate its superiority over other baselines. Our method effectively enhances the adversarial robustness of spatiotemporal traffic forecasting models. The source code for our framework is available at https://github.com/usail- hkust/RDAT.
引用
收藏
页码:1417 / 1428
页数:12
相关论文
共 42 条
  • [21] AdvMind: Inferring Adversary Intent of Black-Box Attacks
    Pang, Ren
    Zhang, Xinyang
    Ji, Shouling
    Luo, Xiapu
    Wang, Ting
    [J]. KDD '20: PROCEEDINGS OF THE 26TH ACM SIGKDD INTERNATIONAL CONFERENCE ON KNOWLEDGE DISCOVERY & DATA MINING, 2020, : 1899 - 1907
  • [22] Bilateral Dependency Optimization: Defending Against Model-inversion Attacks
    Peng, Xiong
    Liu, Feng
    Zhang, Jingfeng
    Lan, Long
    Ye, Junjie
    Liu, Tongliang
    Han, Bo
    [J]. PROCEEDINGS OF THE 28TH ACM SIGKDD CONFERENCE ON KNOWLEDGE DISCOVERY AND DATA MINING, KDD 2022, 2022, : 1358 - 1367
  • [23] Pairwise Adversarial Training for Unsupervised Class-imbalanced Domain Adaptation
    Shi, Weili
    Zhu, Ronghang
    Li, Sheng
    [J]. PROCEEDINGS OF THE 28TH ACM SIGKDD CONFERENCE ON KNOWLEDGE DISCOVERY AND DATA MINING, KDD 2022, 2022, : 1598 - 1606
  • [24] Simple and Efficient Hard Label Black-box Adversarial Attacks in Low Query Budget Regimes
    Shukla, Satya Narayan
    Sahu, Anit Kumar
    Willmott, Devin
    Kolter, Zico
    [J]. KDD '21: PROCEEDINGS OF THE 27TH ACM SIGKDD CONFERENCE ON KNOWLEDGE DISCOVERY & DATA MINING, 2021, : 1461 - 1469
  • [25] Sun Yusheng, 1992, ANAL INSTRUMENT, V12, P1
  • [26] Analysis and Applications of Class-wise Robustness in Adversarial Training
    Tian, Qi
    Kuang, Kun
    Jiang, Kelu
    Wu, Fei
    Wang, Yisen
    [J]. KDD '21: PROCEEDINGS OF THE 27TH ACM SIGKDD CONFERENCE ON KNOWLEDGE DISCOVERY & DATA MINING, 2021, : 1561 - 1570
  • [27] Tramèr F, 2019, ADV NEUR IN, V32
  • [28] Integral and measure-turnpike properties for infinite-dimensional optimal control systems
    Trelat, Emmanuel
    Zhang, Can
    [J]. MATHEMATICS OF CONTROL SIGNALS AND SYSTEMS, 2018, 30 (01)
  • [29] Certified Robustness of Graph Neural Networks against Adversarial Structural Perturbation
    Wang, Binghui
    Jia, Jinyuan
    Cao, Xiaoyu
    Gong, Neil Zhenqiang
    [J]. KDD '21: PROCEEDINGS OF THE 27TH ACM SIGKDD CONFERENCE ON KNOWLEDGE DISCOVERY & DATA MINING, 2021, : 1645 - 1653
  • [30] Attackability Characterization of Adversarial Evasion Attack on Discrete Data
    Wang, Yutong
    Han, Yufei
    Bao, Hongyan
    Shen, Yun
    Ma, Fenglong
    Li, Jin
    Zhang, Xiangliang
    [J]. KDD '20: PROCEEDINGS OF THE 26TH ACM SIGKDD INTERNATIONAL CONFERENCE ON KNOWLEDGE DISCOVERY & DATA MINING, 2020, : 1415 - 1425