Abstract:Integrating cognitive radio (CR) technique with wireless networks is an effective way to solve the increasingly crowded spectrum. Automatic modulation classification (AMC) plays an important role in CR. AMC significantly improves the intelligence of CR system by classifying the modulation type and signal parameters of received communication signals. AMC can provide more information for decision making of the CR system. In addition, AMC can help the CR system dynamically adjust the modulation type and coding rate of the communication signal to adapt to different channel qualities, and the AMC technique help eliminate the cost of broadcast modulation type and coding rate. Deep learning (DL) has recently emerged as one most popular method in AMC of communication signals. Despite their success, DL models have recently been shown vulnerable to adversarial attacks in pattern recognition and computer vision. Namely, they can be easily deceived if a small and carefully designed perturbation called an adversarial attack is imposed on the input, typically an image in pattern recognition. Owing to the very different nature of communication signals, it is interesting yet crucially important to study if adversarial perturbation could also fool AMC. In this paper, we make a first attempt to investigate how we can design a special adversarial attack on AMC. we start from the assumption of a linear binary classifier which is further extended to multi-way classifier. We consider the minimum power consumption that is different from existing adversarial perturbation but more reasonable in the context of AMC. We then develop a novel adversarial perturbation generation method that leads to high attack success to communication signals. Experimental results on real data show that the method is able to successfully spoof the 11-class modulation classification at a model with a minimum cost of about − 21 dB in automatic modulation classification task. The visualization results demonstrate that the adversarial perturbation manifests in the time domain as imperceptible undulations of the signal, and in the frequency domain as small noise outside the signal band.

Learn to Defend: Adversarial Multi-Distillation for Automatic Modulation Recognition Models

A knowledge distillation strategy for enhancing the adversarial robustness of lightweight automatic modulation classification models

Detection Tolerant Black-Box Adversarial Attack Against Automatic Modulation Classification With Deep Learning

Boosting Robustness in Automatic Modulation Recognition for Wireless Communications

Minimum Power Adversarial Attacks in Communication Signal Modulation Classification with Deep Learning

A Hybrid Training-time and Run-time Defense Against Adversarial Attacks in Modulation Classification

A Pruning Method Combined with Resilient Training to Improve the Adversarial Robustness of Automatic Modulation Classification Models

MDM: Advancing Multi-Domain Distribution Matching for Automatic Modulation Recognition Dataset Synthesis

DIBAD: A Disentangled Information Bottleneck Adversarial Defense Method using Hilbert-Schmidt Independence Criterion for Spectrum Security

Adversarial Robustness of Distilled and Pruned Deep Learning-based Wireless Classifiers

Automatic Modulation Classification Using Deep Residual Neural Network with Masked Modeling for Wireless Communications

Adversarial Attacks in DNN-based Modulation Recognition: A Preliminary Study.

Enhancing Automatic Modulation Recognition through Robust Global Feature Extraction

EDDA:An Efficient Divide-and-Conquer Domain Adapter for Automatics Modulation Recognition

HFAD: Homomorphic Filtering Adversarial Defense Against Adversarial Attacks in Automatic Modulation Classification

Information Importance-Aware Defense against Adversarial Attack for Automatic Modulation Classification:An XAI-Based Approach

AIR: Threats of Adversarial Attacks on Deep Learning-Based Information Recovery

Meta-Learning Guided Label Noise Distillation for Robust Signal Modulation Classification

Distributed Learning for Automatic Modulation Classification in Edge Devices

DL-PR: Generalized automatic modulation classification method based on deep learning with priori regularization

Attention-Enhanced Defensive Distillation Network for Channel Estimation in V2X mm-Wave Secure Communication