arXiv:2501.01620cs.LGcs.CR2025-01被引 7

用元学习让通信调制分类模型快速抗新攻击

Adaptive Meta-learning-based Adversarial Training for Robust Automatic Modulation Classification

  • 基于元学习设计自适应对抗训练框架
  • 仅需少量新样本即可应对未知对抗攻击
  • 适合实时通信系统中快速防御新威胁

基于深度学习的自动调制分类(AMC)模型极易受到对抗攻击,微小输入扰动即可导致严重误判。传统对抗训练虽能提升对特定攻击的鲁棒性,但对其他攻击无效。由于对抗扰动理论上无限多样,实际部署中难免遭遇未见过的新攻击。此外,实时系统难以获取新数据且计算资源有限,无法进行完整的在线重训练。为此,我们提出一种基于元学习的对抗训练框架,显著增强AMC模型对未见攻击的鲁棒性,并可在仅有少量新样本的情况下快速适应新攻击。实验表明,该框架在保持高准确率的同时,所需在线训练时间远低于传统方法,极大提升了实际部署效率。

原文摘要 · Abstract (English)

DL-based automatic modulation classification (AMC) models are highly susceptible to adversarial attacks, where even minimal input perturbations can cause severe misclassifications. While adversarially training an AMC model based on an adversarial attack significantly increases its robustness against that attack, the AMC model will still be defenseless against other adversarial attacks. The theoretically infinite possibilities for adversarial perturbations mean that an AMC model will inevitably encounter new unseen adversarial attacks if it is ever to be deployed to a real-world communication system. Moreover, the computational limitations and challenges of obtaining new data in real-time will not allow a full training process for the AMC model to adapt to the new attack when it is online. To this end, we propose a meta-learning-based adversarial training framework for AMC models that substantially enhances robustness against unseen adversarial attacks and enables fast adaptation to these attacks using just a few new training samples, if any are available. Our results demonstrate that this training framework provides superior robustness and accuracy with much less online training time than conventional adversarial training of AMC models, making it highly efficient for real-world deployment.

对抗训练元学习通信安全模型鲁棒性

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。