arXiv:2412.21164cs.NIcs.AI2024-12被引 7

用深度学习识别LoRa设备并区分真伪,发现攻击可轻易欺骗模型。

Adversarial Attack and Defense for LoRa Device Identification and Authentication via Deep Learning

  • 用DNN分析真实LoRa信号,实现设备识别与真伪分类
  • 对抗攻击使分类准确率下降超40%,多任务模型更脆弱
  • 提出对抗训练防御,提升模型对恶意干扰的鲁棒性

LoRa在物联网中提供远距离、低功耗通信,但设备身份认证安全仍存隐患。本文采用深度神经网络(DNN),基于实际LoRa信号数据,解决两个关键问题:(i)识别设备身份,(ii)分类为合法或非法设备。使用卷积与前馈神经网络进行训练,并考虑攻击者通过核密度估计(KDE)伪造信号的场景。研究分两种设置:分别训练单任务分类器,或联合训练多任务分类器。采用快速梯度符号法(FGSM)实施无目标与有目标对抗攻击,测试个体与共用扰动对单任务及多任务模型的影响。结果表明,现有DNN对输入扰动极为敏感,准确率显著下降。为此,提出通过对抗训练增强分类器鲁棒性,验证其有效性。研究揭示了LoRa信号分类任务的严重脆弱性,强调需加强物联网系统对这类隐蔽但高效的攻击防护。

原文摘要 · Abstract (English)

LoRa provides long-range, energy-efficient communications in Internet of Things (IoT) applications that rely on Low-Power Wide-Area Network (LPWAN) capabilities. Despite these merits, concerns persist regarding the security of LoRa networks, especially in situations where device identification and authentication are imperative to secure the reliable access to the LoRa networks. This paper explores a deep learning (DL) approach to tackle these concerns, focusing on two critical tasks, namely (i) identifying LoRa devices and (ii) classifying them to legitimate and rogue devices. Deep neural networks (DNNs), encompassing both convolutional and feedforward neural networks, are trained for these tasks using actual LoRa signal data. In this setting, the adversaries may spoof rogue LoRa signals through the kernel density estimation (KDE) method based on legitimate device signals that are received by the adversaries. Two cases are considered, (i) training two separate classifiers, one for each of the two tasks, and (ii) training a multi-task classifier for both tasks. The vulnerabilities of the resulting DNNs to manipulations in input samples are studied in form of untargeted and targeted adversarial attacks using the Fast Gradient Sign Method (FGSM). Individual and common perturbations are considered against single-task and multi-task classifiers for the LoRa signal analysis. To provide resilience against such attacks, a defense approach is presented by increasing the robustness of classifiers with adversarial training. Results quantify how vulnerable LoRa signal classification tasks are to adversarial attacks and emphasize the need to fortify IoT applications against these subtle yet effective threats.

LoRa安全对抗攻击深度学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。