arXiv:2503.23103cs.ITeess.IV2025-03被引 19

用可逆神经网络隐藏私密信息,让智能窃听者误以为看到的是普通数据。

Towards Secure Semantic Communications in the Presence of Intelligent Eavesdroppers

  • 用生成式AI和模型反演攻击模拟智能窃听,能从语义信号中还原隐私内容。
  • 提出基于可逆网络的隐写模块,使窃听成功率从80%以上降至0。
  • 适合6G语义通信安全设计,尤其关注隐蔽传输与防侦测场景。

语义通信作为第六代移动通信(6G)提升通信效率的有前景范式,其无线信道的广播特性使其易受窃听威胁,危及数据隐私。本文研究在智能窃听者存在下的安全语义通信系统。首先分析窃听者利用先进人工智能技术,通过模型反演和生成式AI(GenAI)重建语义编码后的私密数据的能力,该方法在白盒与黑盒环境下均有效。现有防御手段常导致窃听重构数据失真,易引发警觉。为此,本文提出一种基于可逆神经网络(INN)的语义隐写通信方法:将私密样本的输入信号嵌入非敏感的宿主样本中,从而误导窃听者。无此模块者仅能提取宿主信息,无法察觉隐藏内容。图像传输任务的大量仿真结果表明,在多种信道条件下,传统窃听策略对私密信息的重建成功率超过80%,而所提方法可将成功率降至0。

原文摘要 · Abstract (English)

Semantic communication has emerged as a promising paradigm for enhancing communication efficiency in sixth-generation (6G) networks. However, the broadcast nature of wireless channels makes SemCom systems vulnerable to eavesdropping, which poses a serious threat to data privacy. Therefore, we investigate secure SemCom systems that preserve data privacy in the presence of eavesdroppers. Specifically, we first explore a scenario where eavesdroppers are intelligent and can exploit semantic information to reconstruct the transmitted data based on advanced artificial intelligence (AI) techniques. To counter this, we introduce novel eavesdropping attack strategies that utilize model inversion attacks and generative AI (GenAI) models. These strategies effectively reconstruct transmitted private data processed by the semantic encoder, operating in both glass-box and closed-box settings. Existing defense mechanisms against eavesdropping often cause significant distortions in the data reconstructed by eavesdroppers, potentially arousing their suspicion. To address this, we propose a semantic covert communication approach that leverages an invertible neural network (INN)-based signal steganography module. This module covertly embeds the channel input signal of a private sample into that of a non-sensitive host sample, thereby misleading eavesdroppers. Without access to this module, eavesdroppers can only extract host-related information and remain unaware of the hidden private content. We conduct extensive simulations under various channel conditions in image transmission tasks. Numerical results show that while conventional eavesdropping strategies achieve a success rate of over 80\% in reconstructing private information, the proposed semantic covert communication effectively reduces the eavesdropping success rate to 0.

语义通信隐私保护隐写术6G安全

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。