Qingzhao Zhang

Revisiting the Adversarial Robustness of Graph-Based Traffic Forecasting

This work reframe robustness as a detection problem, introducing a learned physics-informed detector whose output is fed to a hardened forecaster as an input feature and trained against adaptive attacks with the forecaster fixed and improves even on adversarial training hardened against the physics-aware attack itself.