Title
A Hybrid Training-Time and Run-Time Defense Against Adversarial Attacks in Modulation Classification
Abstract
Motivated by the superior performance of deep learning in many applications including computer vision and natural language processing, several recent studies have focused on applying deep neural network for devising future generations of wireless networks. However, several recent works have pointed out that imperceptible and carefully designed adversarial examples (attacks) can significantly deteriorate the classification accuracy. In this letter, we investigate a defense mechanism based on both training-time and run-time defense techniques for protecting machine learning-based radio signal (modulation) classification against adversarial attacks. The training-time defense consists of adversarial training and label smoothing, while the run-time defense employs a support vector machine-based neural rejection (NR). Considering a white-box scenario and real datasets, we demonstrate that our proposed techniques outperform existing state-of-the-art technologies.
Year
DOI
Venue
2022
10.1109/LWC.2022.3159659
IEEE Wireless Communications Letters
Keywords
DocType
Volume
DNNs,adversarial examples,projected gradient descent algorithm,adversarial training,label smoothing,neural rejection
Journal
11
Issue
ISSN
Citations 
6
2162-2337
1
PageRank 
References 
Authors
0.37
5
6
Name
Order
Citations
PageRank
Lingming Zhang12726154.39
Sangarapillai Lambotharan210.37
Gan Zheng32199115.78
Guisheng Liao4996126.36
Ambra Demontis510.37
Fabio Roli64846311.69