Abstract:Recently, the design of wireless receivers using deep neural networks (DNNs), known as deep receivers, has attracted extensive attention for ensuring reliable communication in complex channel environments. To adapt quickly to dynamic channels, online learning has been adopted to update the weights of deep receivers with over-the-air data (e.g., pilots). However, the fragility of neural models and the openness of wireless channels expose these systems to malicious attacks. To this end, understanding these attack methods is essential for robust receiver design. In this paper, we propose a transfer-based adversarial poisoning attack method for online receivers. Without knowledge of the attack target, adversarial perturbations are injected to the pilots, poisoning the online deep receiver and impairing its ability to adapt to dynamic channels and nonlinear effects. In particular, our attack method targets Deep Soft Interference Cancellation (DeepSIC)[1] using online meta-learning. As a classical model-driven deep receiver, DeepSIC incorporates wireless domain knowledge into its architecture. This integration allows it to adapt efficiently to time-varying channels with only a small number of pilots, achieving optimal performance in a multi-input and multi-output (MIMO) scenario. The deep receiver in this scenario has a number of applications in the field of wireless communication, which motivates our study of the attack methods targeting it. Specifically, we demonstrate the effectiveness of our attack in simulations on synthetic linear, synthetic nonlinear, static, and COST 2100 channels. Simulation results indicate that the proposed poisoning attack significantly reduces the performance of online receivers in rapidly changing scenarios.

Security Enhancement of mmWave MIMO Wireless Communication System Using Adversarial Training

Downlink Power Allocation in Massive MIMO via Deep Learning: Adversarial Attacks and Training

The Adversarial Security Mitigations of mmWave Beamforming Prediction Models using Defensive Distillation and Adversarial Retraining

Adversarial Attacks on Deep Learning Based Power Allocation in a Massive MIMO Network

Magmaw: Modality-Agnostic Adversarial Attacks on Machine Learning-Based Wireless Communication Systems

Adversarial Attack on DL-based Massive MIMO CSI Feedback

Security concerns on machine learning solutions for 6G networks in mmWave beam prediction

Adversarial Machine Learning for 5G Communications Security

Adversarial Security and Differential Privacy in mmWave Beam Prediction in 6G networks

Adversarial Deception on Deep-Learning Based Radio Waveforms Classification

Security of AI-Driven Beam Selection for Distributed MIMO in an Adversarial Setting

Transfer-based Adversarial Poisoning Attacks for Online (MIMO-)Deep Receviers

Defending Adversarial Attacks on Deep Learning Based Power Allocation in Massive MIMO Using Denoising Autoencoders

Adversarial Machine Learning in Wireless Communications using RF Data: A Review

Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications

Deep Learning for Beam Training in Millimeter Wave Massive MIMO Systems

Online machine learning-based physical layer authentication for MmWave MIMO systems

Adversarial Attacks with Multiple Antennas Against Deep Learning-Based Modulation Classifiers

A Hybrid Training-time and Run-time Defense Against Adversarial Attacks in Modulation Classification

Deep Learning-Based Secure MIMO Communications with Imperfect CSI for Heterogeneous Networks.

Adversarial Attacks Against Double RIS-Assisted MIMO Systems-based Autoencoder in Finite-Scattering Environments