SignDeepSC：一种基于语义签名的鲁棒语义通信方法
SignDeepSC: A Semantic Signature-based Approach for Robust Semantic Communication
浏览论文内容
中文总结 AI 辅助
针对语义通信系统易受对抗攻击的问题，提出SignDeepSC方法，基于语义签名，通过自修复解码器和加扰器实现对抗鲁棒性，在特定信道和攻击下评估，性能优于基线且不影响干净信道性能。
中文摘要 AI 辅助
语义通信系统如深度语义通信（DeepSC）虽效率高，但易受对其底层神经网络的对抗攻击影响。我们应对一种物理层中间人（MitM）威胁，即对手向传输信号中注入干扰以歪曲其含义。我们提出SignDeepSC，一种架构防御方法，在训练期间无需显式生成对抗示例即可实现对抗鲁棒性。该方法基于受感知器启发的语义签名，即通过单独的低速率辅助信道传输的源特征的紧凑向量摘要。此签名由利用交叉注意力纠正失真的自修复解码器使用，并且还可驱动打乱特征布局的加扰器。我们在单步快速梯度符号法（FGSM）和迭代投影梯度下降（PGD）攻击下，在瑞利衰落和加性高斯白噪声信道上评估SignDeepSC。在PGD（$\epsilon = 0.7$）下，在瑞利衰落且信噪比为\(12dB\)时，当签名信道得到良好保护时，SignDeepSC实现了双语评估辅助（BLEU - 4）分数为\(0.237\)以及双向编码器表征来自变换器（BERT）句子相似度为\(0.646\)，优于所有基线且不降低干净信道性能。
英文摘要
Semantic communication systems such as deep semantic communication (DeepSC) offer high efficiency but are vulnerable to adversarial attacks on their underlying neural networks. We address a physical-layer man-in-the-middle (MitM) threat in which an adversary injects perturbations into the transmitted signal to distort its meaning. We propose SignDeepSC, an architectural defense that achieves adversarial robustness without requiring explicit adversarial example generation during training. The approach is built on a perceiver-inspired semantic signature, a compact vector summary of the source features transmitted over a separate low-rate auxiliary channel. This signature is used by a self-repairing decoder that leverages cross-attention to correct distortions and can additionally drive a scrambler that shuffles the feature layout. We evaluate SignDeepSC over Rayleigh fading and additive white Gaussian noise channels under both single-step fast gradient sign method (FGSM) and iterative projected gradient descent (PGD) attacks. Under PGD ($ε= 0.7$), at 12~dB signal-to-noise ratio with Rayleigh fading, SignDeepSC achieves a bilingual evaluation understudy (BLEU-4) score of 0.237 and bidirectional encoder representations from transformers (BERT) sentence similarity of 0.646, outperforming all baselines without degrading clean-channel performance, when the signature channel is well protected.
