Adversarial training is a method for enhancing neural networks to improve the robustness against adversarial examples. Besides the security concerns of potential adversarial examples, adversarial training can also improve the performance of the neural networks, train robust neural networks, and provide interpretability for neural networks. In this work, we take the first step to introduce adversarial training in time series analysis by taking the finance field as an example. Rethinking existing researches of adversarial training, we propose the adaptively scaled adversarial training (ASAT) in time series analysis, by treating data at different time slots with time-dependent importance weights. Experimental results show that the proposed ASAT can improve both the accuracy and the adversarial robustness of neural networks. Besides enhancing neural networks, we also propose the dimension-wise adversarial sensitivity indicator to probe the sensitivities and importance of input dimensions. With the proposed indicator, we can explain the decision bases of black box neural networks.
翻译:对抗性培训是加强神经网络以提高对抗性实例的稳健性的一种方法,除了潜在对抗性实例的安全关切外,对抗性培训还可以改善神经网络的性能,培训强大的神经网络,并为神经网络提供解释性。在这项工作中,我们首先以金融领域为例,在时间序列分析中引入对抗性培训,重新思考对立性培训的现有研究,我们提议在时间序列分析中采用适应性尺度的对抗性培训,在不同的时间档处理数据时使用取决于时间的重要性重量。实验结果表明,拟议的反向培训可以提高神经网络的准确性和对抗性强性。除了加强神经网络外,我们还提出以维度为根据的对抗性敏感度指标,以探究投入层面的敏感性和重要性。用拟议指标,我们可以解释黑盒神经网络的决策基础。