Trajectory clustering, a core component of Location-Based Services (LBS), partitions trajectory data into clusters based on similarity criteria. Despite recent advances using deep neural networks to enhance clustering performance, these models struggle with learning adequate representations from trajectory data, especially under conditions of uneven or low sampling rates. This limitation compromises the security and robustness of the models, resulting in incorrect predictions. In this work, we investigate the adversarial robustness of trajectory clustering models and propose a hard label-based black-box attack named Trajectory Granularity Adaptive Iteration (TGAI). TGAI generates real world adversarial trajectory examples by efficiently utilizing global and local features of the trajectory data, minimizing added perturbation. Our experimental results demonstrate the effectiveness of TGAI, achieving a 96.37% attack success rate on the E2DTC model with minimal perturbations, highlighting significant vulnerabilities in current trajectory clustering approaches.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

TGAI: A Hard Label-Based Black-Box Attack for Trajectory Clustering

  • Chenguang Fan,
  • Guangyao Bai,
  • Lin Wei,
  • Lei Shi,
  • Yucheng Shi,
  • Yufei Gao,
  • Jie Li,
  • Qiushi Li

摘要

Trajectory clustering, a core component of Location-Based Services (LBS), partitions trajectory data into clusters based on similarity criteria. Despite recent advances using deep neural networks to enhance clustering performance, these models struggle with learning adequate representations from trajectory data, especially under conditions of uneven or low sampling rates. This limitation compromises the security and robustness of the models, resulting in incorrect predictions. In this work, we investigate the adversarial robustness of trajectory clustering models and propose a hard label-based black-box attack named Trajectory Granularity Adaptive Iteration (TGAI). TGAI generates real world adversarial trajectory examples by efficiently utilizing global and local features of the trajectory data, minimizing added perturbation. Our experimental results demonstrate the effectiveness of TGAI, achieving a 96.37% attack success rate on the E2DTC model with minimal perturbations, highlighting significant vulnerabilities in current trajectory clustering approaches.