EAAI Journal 2026 Journal Article
Physics-aware learning for detecting robust universal perturbation attacks in wind power forecasting
- Liliang Wang
- Zheng Qian
- Jiaqi Ruan
- Lu Wei
- Gaoqi Liang
Wind power forecasting (WPF) models can be vulnerable to adversarial attacks, where minor perturbations may introduce large forecast errors. However, existing attack methods are typically customized for specific models, temporal instances, and wind farms, often suboptimal because they require excessive computational resources that are incompatible with real-time dispatch requirements. Moreover, effective defense mechanisms for addressing such adversarial attacks in WPF models remain scarce. This paper addresses these challenges through dual contributions: algorithmic innovations in artificial intelligence (AI) security and engineering applications for critical infrastructure protection. Algorithmically, we first develop a universal perturbation (UP) framework trained offline to target multiple WPF models across diverse spatiotemporal contexts. Building on this, we propose the robust universal perturbation (RUP) method, which uses weighted density ensemble learning to aggregate UPs generated under various conditions—such as different train–validation splits, initialization parameters, and model architectures—achieving superior transferability and robustness. Additionally, we introduce the physics-aware learning model (PALM), the first framework to leverage physical constraints for detecting adversarial attacks in WPF systems by quantifying deviations from established physical principles, marking a departure from conventional data-driven approaches. From an engineering perspective, RUP closely approaches state-of-the-art attack performance while reducing real-time computational overhead by 98% through offline preprocessing, facilitating practical deployment. PALM ensures operational integrity with 100% precision and recall, validated using operational wind farm datasets. These advances bridge AI security theory with critical infrastructure requirements, exposing vulnerabilities in safety-critical energy systems and delivering implementable solutions for robust power grid AI deployment.