Zhang, Z;
Liu, M;
Chen, Y;
Zhao, N;
Tang, J;
Wong, KK;
Karagiannidis, GK;
(2025)
Adversarial Waveform Design for Wireless Transceivers Toward Intelligent Eavesdropping.
IEEE Transactions on Information Forensics and Security
, 20
pp. 7793-7807.
10.1109/TIFS.2025.3592530.
Preview |
PDF
4277077AAM.pdf - Accepted Version Download (867kB) | Preview |
Abstract
In wireless communications, the communication channel between the transmitter and receiver can be monitored by an eavesdropper. The eavesdropper uses deep learning (DL) to quickly identify the modulation parameters of signals and further disrupt legitimate communications. Since DL has been proven to be vulnerable to adversarial attacks, this paper proposes to attack the eavesdropper's model by designing adversarial waveforms, preventing the eavesdropper from correctly identifying the modulation schemes used by legitimate users, and thereby preventing the eavesdropper from interfering with normal communications. This paper proposes an attention-based black-box attack method, which uses the prediction of different networks in the ensemble model to assign adversarial attention factors to each network. This greatly improves the transmission attack performance of the designed adversarial examples. In addition, by analysing the influence of the channel on the adversarial waveform, we further design the adversarial waveform that can be transmitted in the channel to improve the practicability of the attack algorithm. Finally, we theoretically derive the bounds of the adversarial risk increase that the attack brings to the target model. Simulation results show that the proposed method can improve the success rate of the attack on the eavesdropper's modulation detection model, cause the model to misidentify the signal modulation type, and improve the security and reliability of legitimate transceivers in wireless communication systems.
| Type: | Article |
|---|---|
| Title: | Adversarial Waveform Design for Wireless Transceivers Toward Intelligent Eavesdropping |
| Open access status: | An open access version is available from UCL Discovery |
| DOI: | 10.1109/TIFS.2025.3592530 |
| Publisher version: | https://doi.org/10.1109/tifs.2025.3592530 |
| Language: | English |
| Additional information: | This version is the author accepted manuscript. For information on re-use, please refer to the publisher's terms and conditions. |
| Keywords: | Adversarial waveform design, deep learning, modulation recognition, black-box attack, transferability |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Electronic and Electrical Eng |
| URI: | https://discovery.ucl.ac.uk/id/eprint/10212277 |
Archive Staff Only
 |
View Item |
