Abstract Despite the success of deep learning models for the state-of-health estimation of lithium-ion batteries in battery management systems, their susceptibility to adversarial attacks raises concerns about security risks, leading to misdiagnosis and unnecessary maintenance. However, their practical robustness against adversarial perturbations remains largely underexplored, despite its importance for real-world deployment. Thus, we develop a novel adversarial attack to unveil potential risks associated with battery management systems. Our approach assesses model robustness in practical scenarios where model information is inaccessible by selectively exploiting frequency information that benefits the capture of unique characteristics for the state of health. In particular, we generate a malicious but imperceptible example by manipulating low-frequency components of a signal while preserving their relationships. Through a series of experiments, we demonstrate the effectiveness of our approach in uncovering and understanding potential risks associated with deep learning models in battery management systems.
Min et al. (Fri,) studied this question.