.png){kind=icon}
返回
Data poisoning attacks on traffic state estimation and prediction
.png){kind=icon}
PRE
AI
DOI：10.1016/j.trc.2024.104577.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Data has become ubiquitous nowadays in transportation, including vehicular data and infrastructure-generated data. The growing reliance on data poses potential cybersecurity issues to transportation systems, among which the so-called data poisoning attacks by adversaries are becoming increasingly critical. Such attacks aim to compromise a system's performance by adding systematic and malicious noises, perturbations, or deviations to the dataset used by the system. Formal investigations of data poisoning attacks are essential for understanding the attacks and developing effective defense methods. This study develops a general data poisoning attack model for traffic state estimation and prediction (TSEP) that is a basic application in transportation. We first formulate data poisoning attacks as a general sensitivity analysis of parameterized optimization problems over parameter changes (i.e., data perturbations) and study the Lipschitz continuity property of the solution with the presence of general (equality and inequality) constraints. Then, we develop attack models that fit a broader spectrum of learning applications (such as TSEP) by extending existing models that only focus on learning problems with no or equality constraints (widely used in the cybersecurity field). Since the solution of such general problems is often continuous but not differentiable with data changes, we apply the generalized implicit function theorem to compute the semi-derivatives that express how the TSEP solution responds to data perturbations. The semi-derivatives enable us to evaluate TSEP models' vulnerability (at each data point) and solve the proposed attack model. We demonstrate the generality and effectiveness of the proposed method on two TSEP models using mobile sensing data.
Keyword:
Data poisoning attacks
Attack model
Traffic state estimation and prediction
Lipschitz continuity
Semi-derivatives
期刊
IF:
7.9
论文数:
4.9K
被引数:
3.2W
机构
引用论文
Mobile markerless augmented reality and its application in forensic medicine移动无标记增强现实技术及其在法医学中的应用
PREAI
分享收藏RANDOM SAMPLE CONSENSUS - A PARADIGM FOR MODEL-FITTING WITH APPLICATIONS TO IMAGE-ANALYSIS AND AUTOMATED CARTOGRAPHY随机样本共识-模型拟合的范例，可应用于图像分析和自动制图
OAAI
OAAI分享收藏Threat of Adversarial Attacks on Deep Learning in Computer Vision: A Survey计算机视觉中对抗性攻击对深度学习的威胁: 一项调查.png)
IEEE ACCESS
OAAI
IEEE ACCESSIF3.6
OAAI分享收藏
查看更多内容