用AI实时检测无线芯片中的隐蔽信道,防信息外泄。
AI-Enabled Covert Channel Detection in RF Receiver Architectures

- 直接分析原始I/Q数据,实时识别隐蔽信道
- 在高于1dB SNR下检测准确率90.28%,20dB以上超97%
- 模型小巧可部署,适合边缘设备,硬件效率高
无线芯片中的隐蔽信道(CC)构成严重安全威胁,可使敏感信息被外部攻击者窃取。本文提出一种部署于射频接收端的AI防御机制,模型直接监测原始I/Q样本,实时检测嵌入在正常信号中的隐蔽信道。首先,将先进的卷积神经网络(CNN)压缩,参数量减少80%,满足边缘部署需求。在基于硬件木马(HT)的公开隐蔽信道数据集上,压缩后的CNN在信噪比(SNR)高于1 dB时,对隐蔽信道检测平均准确率达90.28%,对底层硬件木马识别准确率为86.50%。在实际通信场景中(SNR > 20 dB),两项任务准确率均超过97%,性能下降不足2%。该模型在准确率与模型大小间表现优异,优于其他分类器。进一步设计轻量级CNN硬件加速器,并在FPGA上实现,资源占用极低,能效达107 GOPs/W。作为首个专为隐蔽信道检测设计的AI硬件加速器,其性能优于现有用于调制识别等任务的先进AI加速器。
原文摘要 · Abstract (English)
Covert channels (CCs) in wireless chips pose a serious security threat, as they enable the exfiltration of sensitive information from the chip to an external attacker. In this work, we propose an AI-based defense mechanism deployed at the RF receiver, where the model directly monitors raw I/Q samples to detect, in real time, the presence of a CC embedded within an otherwise nominal signal. We first compact a state-of-the-art convolutional neural network (CNN), achieving an 80% reduction in parameters, which is an essential requirement for efficient edge deployment. When evaluated on the open-source hardware Trojan (HT)-based CC dataset, the compacted CNN attains an average accuracy of 90.28% for CC detection and 86.50% for identifying the underlying HT, with results averaged across SNR values above 1 dB. For practical communication scenarios where SNR > 20 dB, the model achieves over 97% accuracy for both tasks. These results correspond to a minimal performance degradation of less than 2% compared to the baseline model. The compacted CNN is further benchmarked against alternative classifiers, demonstrating an excellent accuracy-model size trade-off. Finally, we design a lightweight CNN hardware accelerator and demonstrate it on an FPGA, achieving very low resource utilization and an efficiency of 107 GOPs/W. Being the first AI hardware accelerator proposed specifically for CC detection, we compare it against state-of-the-art AI accelerators for RF signal classification tasks such as modulation recognition, showing superior performance.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。