arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2303.16633cs.LGcs.CR

针对风电功率预测的定向对抗攻击

Targeted Adversarial Attacks on Wind Power Forecasts

Fraunhofer Institute for Energy Economics and Energy System Technology (IEE)(弗劳恩霍夫能源经济与能源系统技术研究所(IEE));University of Kassel(卡塞尔大学)

René Heinrich, Christoph Scholz, Stephan Vogt, Malte Lehna

AI总结:

本文研究风电功率预测模型面临的定向、半定向和无定向对抗攻击,提出TARS指标量化回归模型鲁棒性,并通过LSTM与CNN实验揭示常规CNN脆弱而对抗训练可显著增强其防御能力。

摘要:

近年来,研究人员提出了多种用于风电功率预测的深度学习模型。与传统机器学习算法或物理模型相比,这些模型能够更准确地预测单个风电场或整个区域的风力发电量。然而,最新研究表明,深度学习模型往往会被对抗攻击操纵。由于风电功率预测对现代电力系统的稳定性至关重要,因此保护这些模型免受此类威胁十分重要。在本研究中,我们调查了两种不同预测模型在定向、半定向和无定向对抗攻击下的脆弱性。我们采用一个长短期记忆(LSTM)网络来预测单个风电场的发电量,并采用一个卷积神经网络(CNN)来预测全德国的风力发电量。此外,我们提出了总对抗鲁棒性分数(TARS),这是一种用于量化回归模型对定向和半定向对抗攻击鲁棒性的评估指标。该指标通过给出一个介于0(非常脆弱)和1(非常鲁棒)之间的分数,评估攻击对模型性能的影响以及攻击者目标的实现程度。在我们的实验中,LSTM预测模型表现出相当强的鲁棒性,在所考察的所有对抗攻击中均取得了超过0.78的TARS值。CNN预测模型在常规训练下仅取得低于0.10的TARS值,因此非常脆弱。不过,通过对抗训练,其鲁棒性可以得到显著提升,且对抗训练总能使其TARS高于0.46。

英文摘要:

In recent years, researchers proposed a variety of deep learning models for wind power forecasting. These models predict the wind power generation of wind farms or entire regions more accurately than traditional machine learning algorithms or physical models. However, latest research has shown that deep learning models can often be manipulated by adversarial attacks. Since wind power forecasts are essential for the stability of modern power systems, it is important to protect them from this threat. In this work, we investigate the vulnerability of two different forecasting models to targeted, semi-targeted, and untargeted adversarial attacks. We consider a Long Short-Term Memory (LSTM) network for predicting the power generation of individual wind farms and a Convolutional Neural Network (CNN) for forecasting the wind power generation throughout Germany. Moreover, we propose the Total Adversarial Robustness Score (TARS), an evaluation metric for quantifying the robustness of regression models to targeted and semi-targeted adversarial attacks. It assesses the impact of attacks on the model's performance, as well as the extent to which the attacker's goal was achieved, by assigning a score between 0 (very vulnerable) and 1 (very robust). In our experiments, the LSTM forecasting model was fairly robust and achieved a TARS value of over 0.78 for all adversarial attacks investigated. The CNN forecasting model only achieved TARS values below 0.10 when trained ordinarily, and was thus very vulnerable. Yet, its robustness could be significantly improved by adversarial training, which always resulted in a TARS above 0.46.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑