Abstract:For the modulation classification problems, the deep learning approaches can determine the unknown modulation formats in high confidence. However, it has been maliciously used by eavesdroppers. In this paper, we consider the wireless communication scenario, in which Alice intends to communicate with Bob confidentially in the threat of Eve, who tries to determine the unknown modulation formats of Alice using some deep learning approach. Recent advancements in adversarial machine learning have demonstrated that the deep learning techniques are vulnerable to crafted perturbations. To prevent Eve from classifying Alice’s modulation formats, Alice transmits the modulation signal with the well-designed adversarial perturbation. We first formulate an optimization problem to determine the optimized adversarial perturbation, in which the objective is to mislead the modulation classifier of Eve subject to the communication constraints, i.e., the power efficiency, the achievable rate, and the reliability. Then, the augmented Lagrangian method is adopted to solve the perturbation optimization problem, in which the implicit objective is evaluated using the Monte Carlo method, and the gradients of the implicit constraints are obtained using the Gaussian-based estimation algorithm. We further extend the perturbation design to the both cases of Alice having and not having the prior knowledge of Eve. Finally, the input-independent universal perturbation for the specific modulation type is proposed, which is deployed via a lookup table method. Numerical results show that the designed perturbation with 10% power of the modulated signal can attack Eve’s modulation classifier with the great success while ensuring both the achievable rate and the reliability close to the ideal case (say, no perturbation). Compared to the existing methods, the designed perturbation achieves the better attack performance and is robust to the filtering, the oversampling, and the time/frequency offset. Furthermore, this paper reveals that the structure type of Eve’s model has a large impact on the attack performance, and verifies that the adversarial perturbation can effectively attack the modulation classifiers that resort to the expert knowledge.

Adversarial Deception on Deep-Learning Based Radio Waveforms Classification

Radio Signal Smart Deception Based on Adversarial Learning

Adversarial Attacks on Deep-Learning Based Radio Signal Classification

Countermeasures Against Adversarial Examples in Radio Signal Classification

Over-the-Air Adversarial Attacks on Deep Learning Based Modulation Classifier over Wireless Channels

Frequency-selective Adversarial Attack Against Deep Learning-Based Wireless Signal Classifiers

Adversarial Examples Detection of Radio Signals Based on Multifeature Fusion.

Sparse Adversarial Attacks against DL-Based Automatic Modulation Classification

A Hybrid Training-time and Run-time Defense Against Adversarial Attacks in Modulation Classification

Minimum Power Adversarial Attacks in Communication Signal Modulation Classification with Deep Learning

AIR: Threats of Adversarial Attacks on Deep Learning-Based Information Recovery

Radio Waveforms Classification Via Deep Q Learning Network

Conformal Shield: A Novel Adversarial Attack Detection Framework for Automatic Modulation Classification

Threats of Adversarial Attacks in DNN-Based Modulation Recognition

Intra-Class Universal Adversarial Attacks on Deep Learning-Based Modulation Classifiers

Adversarial Attacks with Multiple Antennas Against Deep Learning-Based Modulation Classifiers

GAN Against Adversarial Attacks in Radio Signal Classification

Anti-modulation-classification Transmitter Design Against Deep Learning Approaches

Evaluating Adversarial Evasion Attacks in the Context of Wireless Communications

Waveform Manipulation Against DNN-based Modulation Classification Attacks

Hidden Backdoor Attack against Deep Learning-Based Wireless Signal Modulation Classifiers