Paper Reading AI Learner

The Dark Side of Digital Twins: Adversarial Attacks on AI-Driven Water Forecasting

2025-04-28 22:34:11
Mohammadhossein Homaei, Victor Gonzalez Morales, Oscar Mogollon-Gutierrez, Andres Caro

Abstract

Digital twins (DTs) are improving water distribution systems by using real-time data, analytics, and prediction models to optimize operations. This paper presents a DT platform designed for a Spanish water supply network, utilizing Long Short-Term Memory (LSTM) networks to predict water consumption. However, machine learning models are vulnerable to adversarial attacks, such as the Fast Gradient Sign Method (FGSM) and Projected Gradient Descent (PGD). These attacks manipulate critical model parameters, injecting subtle distortions that degrade forecasting accuracy. To further exploit these vulnerabilities, we introduce a Learning Automata (LA) and Random LA-based approach that dynamically adjusts perturbations, making adversarial attacks more difficult to detect. Experimental results show that this approach significantly impacts prediction reliability, causing the Mean Absolute Percentage Error (MAPE) to rise from 26% to over 35%. Moreover, adaptive attack strategies amplify this effect, highlighting cybersecurity risks in AI-driven DTs. These findings emphasize the urgent need for robust defenses, including adversarial training, anomaly detection, and secure data pipelines.

Abstract (translated)

数字孪生(DT)通过使用实时数据、分析和预测模型来优化运营,正在改善水分配系统。本文介绍了一个专为西班牙供水网络设计的数字孪生平台,并利用长短期记忆(LSTM)网络来预测用水量。然而,机器学习模型容易受到诸如快速梯度符号法(FGSM)和投影梯度下降(PGD)等对抗性攻击的影响。这些攻击操纵关键的模型参数,在不影响数据外观的情况下注入细微扰动以降低预测准确性。为了进一步利用这些漏洞,我们引入了一种基于学习自动机(LA)和随机学习自动机的方法,该方法能够动态调整扰动,使对抗性攻击更难被检测到。实验结果表明,这种方法显著影响了预测的可靠性,导致平均绝对百分比误差(MAPE)从26%上升至超过35%。此外,适应性的攻击策略放大了这种效果,突显了AI驱动的数字孪生中的网络安全风险。这些发现强调了建立强大的防御措施的迫切需要,包括对抗性训练、异常检测和安全的数据管道。

URL

https://arxiv.org/abs/2504.20295

PDF

https://arxiv.org/pdf/2504.20295.pdf


Tags
3D Action Action_Localization Action_Recognition Activity Adversarial Agent Attention Autonomous Bert Boundary_Detection Caption Chat Classification CNN Compressive_Sensing Contour Contrastive_Learning Deep_Learning Denoising Detection Dialog Diffusion Drone Dynamic_Memory_Network Edge_Detection Embedding Embodied Emotion Enhancement Face Face_Detection Face_Recognition Facial_Landmark Few-Shot Gait_Recognition GAN Gaze_Estimation Gesture Gradient_Descent Handwriting Human_Parsing Image_Caption Image_Classification Image_Compression Image_Enhancement Image_Generation Image_Matting Image_Retrieval Inference Inpainting Intelligent_Chip Knowledge Knowledge_Graph Language_Model LLM Matching Medical Memory_Networks Multi_Modal Multi_Task NAS NMT Object_Detection Object_Tracking OCR Ontology Optical_Character Optical_Flow Optimization Person_Re-identification Point_Cloud Portrait_Generation Pose Pose_Estimation Prediction QA Quantitative Quantitative_Finance Quantization Re-identification Recognition Recommendation Reconstruction Regularization Reinforcement_Learning Relation Relation_Extraction Represenation Represenation_Learning Restoration Review RNN Robot Salient Scene_Classification Scene_Generation Scene_Parsing Scene_Text Segmentation Self-Supervised Semantic_Instance_Segmentation Semantic_Segmentation Semi_Global Semi_Supervised Sence_graph Sentiment Sentiment_Classification Sketch SLAM Sparse Speech Speech_Recognition Style_Transfer Summarization Super_Resolution Surveillance Survey Text_Classification Text_Generation Time_Series Tracking Transfer_Learning Transformer Unsupervised Video_Caption Video_Classification Video_Indexing Video_Prediction Video_Retrieval Visual_Relation VQA Weakly_Supervised Zero-Shot