论文标题
在对手的存在下基于频率的自动调制分类
Frequency-based Automated Modulation Classification in the Presence of Adversaries
论文作者
论文摘要
自动调制分类(AMC)旨在通过自动预测无线RF信号的调制星座来提高拥挤的无线电频谱的效率。最近的工作表明,使用原始内部和正交(IQ)时间样本实现深度学习的能力。然而,深度学习模型非常容易受到对抗干扰的影响,这会导致智能预测模型以高度的信心错误分类。此外,对抗性干扰通常是可以转移的,从而使对手能够用专为特定分类网络精心制作的单个扰动来攻击多个深度学习模型。在这项工作中,我们介绍了一种新颖的接收器结构,该架构由能够承受可转移的对抗干扰的深度学习模型组成。具体来说,我们表明,为愚弄按时间域特征训练的愚蠢模型而制作的对抗性攻击不容易转移到使用频域功能训练的模型。以这种能力,我们证明了复发性神经网络(RNN)的分类性能改善,而卷积神经网络(CNN)的分类性能提高了30%。我们进一步证明了基于频率功能的分类模型,以实现在没有攻击的情况下获得大于99%的精度。
Automatic modulation classification (AMC) aims to improve the efficiency of crowded radio spectrums by automatically predicting the modulation constellation of wireless RF signals. Recent work has demonstrated the ability of deep learning to achieve robust AMC performance using raw in-phase and quadrature (IQ) time samples. Yet, deep learning models are highly susceptible to adversarial interference, which cause intelligent prediction models to misclassify received samples with high confidence. Furthermore, adversarial interference is often transferable, allowing an adversary to attack multiple deep learning models with a single perturbation crafted for a particular classification network. In this work, we present a novel receiver architecture consisting of deep learning models capable of withstanding transferable adversarial interference. Specifically, we show that adversarial attacks crafted to fool models trained on time-domain features are not easily transferable to models trained using frequency-domain features. In this capacity, we demonstrate classification performance improvements greater than 30% on recurrent neural networks (RNNs) and greater than 50% on convolutional neural networks (CNNs). We further demonstrate our frequency feature-based classification models to achieve accuracies greater than 99% in the absence of attacks.