arXiv:2511.01172cs.LGcs.AI2025-11被引 2

统一防御对抗攻击与域偏移,提升通信调制识别鲁棒性

Adapt under Attack and Domain Shift: Unified Adversarial Meta-Learning and Domain Adaptation for Robust Automatic Modulation Classification

  • 分两阶段训练:先用元学习学抗扰能力,再在线适配新域
  • 在对抗攻击与域偏移下准确率显著提升,无需大量标注数据
  • 适合部署于动态通信环境的鲁棒调制识别系统

深度学习已成为自动调制分类(AMC)的主流方法,性能优于传统方法。然而,其易受对抗攻击影响且对数据分布变化敏感,限制了在真实动态环境中的实际应用。为此,我们提出一种新型统一框架,将元学习与域适应结合,使AMC系统同时抵御对抗攻击和环境变化。框架采用两阶段策略:离线阶段,利用元学习在单一源域的干净样本和对抗扰动样本上训练模型,使其具备对未知攻击组合的泛化防御能力;在线阶段,通过域适应将模型特征对齐至新目标域,实现低标注成本的快速适应。实验表明,该框架在联合威胁下显著提升了分类准确率,为现代AMC系统的部署与运行提供了关键解决方案。

原文摘要 · Abstract (English)

Deep learning has emerged as a leading approach for Automatic Modulation Classification (AMC), demonstrating superior performance over traditional methods. However, vulnerability to adversarial attacks and susceptibility to data distribution shifts hinder their practical deployment in real-world, dynamic environments. To address these threats, we propose a novel, unified framework that integrates meta-learning with domain adaptation, making AMC systems resistant to both adversarial attacks and environmental changes. Our framework utilizes a two-phase strategy. First, in an offline phase, we employ a meta-learning approach to train the model on clean and adversarially perturbed samples from a single source domain. This method enables the model to generalize its defense, making it resistant to a combination of previously unseen attacks. Subsequently, in the online phase, we apply domain adaptation to align the model's features with a new target domain, allowing it to adapt without requiring substantial labeled data. As a result, our framework achieves a significant improvement in modulation classification accuracy against these combined threats, offering a critical solution to the deployment and operational challenges of modern AMC systems.

调制识别对抗鲁棒性域适应

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。