面向对抗鲁棒的信号识别设计方法

The design method for signal modulation recognition oriented to adversarial robustness

  • 摘要: 深度学习在信号调制分类任务上取得了显著进展,然而,在实际应用中,深度神经网络已被证明存在内在脆弱性,容易受到对抗样本的攻击。对抗样本通过向输入添加细微扰动,致使模型产生错误的分类结果,给通信系统的安全性带来了严重的威胁与隐患。本文在对抗训练框架的基础上提出了一种新颖的防御方法:混合信号对抗训练(Hybrid Signal Adversarial Training, HSAT),以提高信号调制分类模型的鲁棒性。针对训练数据稀缺以及通过对抗样本训练所得网络表征能力不足的问题,提出一种基于线性插值的混合信号数据增强策略提升模型性能。同时,应用最大间隔损失函数替代交叉熵损失函数,增加模型决策边界距离,增强模型对于扰动输入的鲁棒性。通过对当前先进的对抗攻击算法的验证,本文的方法相较于传统对抗训练,在三种攻击算法上的对抗鲁棒性平均提升7.07%,标准分类准确率仅下降1.61%。

     

    Abstract: Deep learning has made significant progress in signal modulation classification tasks. However, in practical applications, deep neural networks have demonstrated inherent vulnerabilities, making them susceptible to adversarial attacks. Adversarial examples, created by adding subtle perturbations to inputs, can cause models to produce incorrect classification results, posing serious threats and risks to the security of communication systems. This paper proposes a novel defense method, Hybrid Signal Adversarial Training (HSAT), based on the adversarial training framework to enhance the robustness of signal modulation classification models. To address the issues of limited training data and insufficient network representation capabilities resulting from adversarial training, a mixed signal data augmentation strategy based on linear interpolation is proposed to improve model performance. Additionally, a maximum margin loss function is employed to replace the cross-entropy loss function, thereby increasing the distance of the model's decision boundaries and enhancing robustness against perturbed inputs. Through validation against current state-of-the-art adversarial attack algorithms, the proposed method demonstrates an average improvement of 7.07% in adversarial robustness across three attack algorithms, with only a 1.61% decrease in standard classification accuracy compared to traditional adversarial training.

     

/

返回文章
返回