arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2002.09896cs.ITeess.SPmath.IT
收藏

针对基于深度学习的大规模 MIMO CSI 反馈的对抗攻击

Adversarial Attack on DL-based Massive MIMO CSI Feedback

Qing Liu, Jiajia Guo, Chao-Kai Wen, Shi Jin

AI总结:

本文提出一种针对基于深度学习的大规模 MIMO CSI 反馈的白盒对抗攻击构造方法,并通过归一化均方误差验证其破坏性,同时对比干扰攻击,揭示 DL 通信物理层安全风险。

摘要:

随着深度学习(DL)算法在无线通信中的应用日益增加,物理层面临由对抗攻击引发的新挑战。此类攻击已对计算机视觉中的神经网络产生显著影响。我们选择基于 DL 的模拟信道状态信息(CSI),以展示对抗攻击对基于 DL 的通信系统的影响。我们提出了一种实用方法,用于在基于 DL 的 CSI 反馈过程中构造白盒对抗攻击。仿真结果通过分析归一化均方误差的性能,展示了对抗攻击对基于 DL 的 CSI 反馈造成的破坏性影响。我们还发起了干扰攻击以进行比较,并发现通过某些预防措施可以阻止干扰攻击。随着 DL 算法成为无线通信发展的趋势,本工作引发了人们对使用基于 DL 的算法时安全性的担忧。

英文摘要:

With the increasing application of deep learning (DL) algorithms in wireless communications, the physical layer faces new challenges caused by adversarial attack. Such attack has significantly affected the neural network in computer vision. We chose DL-based analog channel state information (CSI) to show the effect of adversarial attack on DL-based communication system. We present a practical method to craft white-box adversarial attack on DL-based CSI feedback process. Our simulation results showed the destructive effect adversarial attack caused on DL-based CSI feedback by analyzing the performance of normalized mean square error. We also launched a jamming attack for comparison and found that the jamming attack could be prevented with certain precautions. As DL algorithm becomes the trend in developing wireless communication, this work raises concerns regarding the security in the use of DL-based algorithms.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑