Countermeasures Against Adversarial Examples in Radio Signal Classification
Roli, FabioLast
2021-01-01
Abstract
Deep learning algorithms have been shown to be powerful in many communication network design problems, including that in automatic modulation classification. However, they are vulnerable to carefully crafted attacks called adversarial examples. Hence, the reliance of wireless networks on deep learning algorithms poses a serious threat to the security and operation of wireless networks. In this letter, we propose for the first time a countermeasure against adversarial examples in modulation classification. Our countermeasure is based on a neural rejection technique, augmented by label smoothing and Gaussian noise injection, that allows to detect and reject adversarial examples with high accuracy. Our results demonstrate that the proposed countermeasure can protect deep-learning based modulation classification systems against adversarial examples.File | Size | Format | |
---|---|---|---|
Countermeasures_Against_Adversarial_Examples_in_Radio_Signal_Classification-3.pdf Solo gestori archivio
Type: versione editoriale
Size 983.55 kB
Format Adobe PDF
|
983.55 kB | Adobe PDF | & nbsp; View / Open Request a copy |
postprint+radiosignal(3) (2).pdf open access
Type: versione post-print
Size 2.71 MB
Format Adobe PDF
|
2.71 MB | Adobe PDF | View/Open |
Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.