arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 2103.14977eess.SPcs.LG
收藏

稳健模型在调制识别中的作用

On the benefits of robust models in modulation recognition

EPFL(洛桑联邦理工学院);Armasuisse(瑞士联邦国防采购局)

Javier Maroto, Gérôme Bovet, Pascal Frossard

摘要:

鉴于电信系统的快速变化及其对人工智能的高度依赖,拥有能够在不同(可能是不利的)条件下表现良好的模型变得越来越重要。使用卷积层的深度神经网络(DNN)在通信中的许多任务中都是最先进的。然而,在其他领域,如图像分类,DNN已被证明容易受到对抗性扰动的影响,这些扰动由不可感知的精心制作的噪声组成,当添加到数据中时,这些噪声会使模型陷入错误分类。这对DNN在通信任务中的安全性提出了质疑,特别是在调制识别中。我们提出了一个新的框架来测试当前最先进的模型的鲁棒性,其中对抗性扰动强度取决于信号强度,并使用“信号扰动比”(SPR)进行测量。我们表明,目前国家的最先进的模型容易受到这些扰动。与当前关于图像分类主题的研究相比,调制识别使我们能够通过查看星座空间来轻松了解DNN学习的特征的有用性。在分析这些脆弱的模型时,我们发现对抗性扰动不会将符号移向星座空间中最近的类。这表明DNN的决策不是基于对贝叶斯最优调制识别模型很重要的信号统计,而是基于训练数据中的虚假相关性。我们的功能分析和建议的框架可以帮助在任务中找到更好的模型通信系统。

英文摘要:

Given the rapid changes in telecommunication systems and their higher dependence on artificial intelligence, it is increasingly important to have models that can perform well under different, possibly adverse, conditions. Deep Neural Networks (DNNs) using convolutional layers are state-of-the-art in many tasks in communications. However, in other domains, like image classification, DNNs have been shown to be vulnerable to adversarial perturbations, which consist of imperceptible crafted noise that when added to the data fools the model into misclassification. This puts into question the security of DNNs in communication tasks, and in particular in modulation recognition. We propose a novel framework to test the robustness of current state-of-the-art models where the adversarial perturbation strength is dependent on the signal strength and measured with the "signal to perturbation ratio" (SPR). We show that current state-of-the-art models are susceptible to these perturbations. In contrast to current research on the topic of image classification, modulation recognition allows us to have easily accessible insights on the usefulness of the features learned by DNNs by looking at the constellation space. When analyzing these vulnerable models we found that adversarial perturbations do not shift the symbols towards the nearest classes in constellation space. This shows that DNNs do not base their decisions on signal statistics that are important for the Bayes-optimal modulation recognition model, but spurious correlations in the training data. Our feature analysis and proposed framework can help in the task of finding better models for communication systems.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑