发表机构
South Carolina State University; North Carolina A&T State University; ECPI University; Benedict College; Dakota State University（南卡罗来纳州立大学; 北卡罗来纳农工州立大学; ECPI大学; 本尼迪克特学院; 达科他州立大学）
机构由 AI 辅助整理，请以论文原文为准。AI 中文总结
针对V2X中基于降雨的毫米波频段选择，提出天气数据欺骗攻击可控制通信范围，并设计基于SINR与雨衰对比的防御，验证其检测强制提升攻击的有效性及局限性。
AI 中文摘要
网联车辆使用毫米波（mmWave）侧行链路以满足协同驾驶所需的数据速率，新兴设计根据感知到的降雨量选择载波频段。我们表明，这种天气感知是一个攻击面：仅欺骗降雨输入的对手即可决定受害者的载波频率，进而决定其通信范围，而无需在信道上进行传输。我们在MilliCar中评估了该攻击，MilliCar是一个ns-3模块，将所选频段作为真实的3GPP NR V2X载波运行，并具有每频段传播、波束成形和阻塞特性。将频段强制提升至73 GHz时，八车队列的可靠通信范围保持在38米，而诚实基线将其加倍至82米；将频段强制降低至5 GHz时，长距离接收率维持在97%，但传输块大小缩减至三分之一，长距离延迟增加至四倍，达到12.5毫秒。随后，我们实现了该机制所隐含的防御措施。雨衰随距离线性增长，而路径损耗随距离对数增长，因此接收器将实测信噪比（SINR）与其报告天气所预测的衰减进行对比，可在1.5秒内以98%的概率标记强制提升攻击，误报率为1%，重新选择后可将长距离接收率从60%恢复至75%。同一测试在结构上对强制降低攻击无效，因为5 GHz备用频段几乎不受降雨影响。一个平流雨胞将局部降雨率从15毫米/小时摆动至81毫米/小时，所有结果保持不变。因此，天气感知频段选择需要经过认证的气象输入；物理交叉检查仅覆盖了一半的威胁。
英文摘要
Connected vehicles use millimeter-wave (mmWave) sidelinks for the data rates cooperative driving demands, and emerging designs select the carrier band from sensed rainfall. We show that this weather awareness is an attack surface: an adversary who spoofs only the rainfall input dictates the victim's carrier frequency, and through it its communication range, without transmitting on the channel. We evaluate the attack in MilliCar, an ns-3 module that runs the selected band as the real 3GPP NR V2X carrier with per-band propagation, beamforming, and blockage. Forcing the band up to 73 GHz holds an eight-vehicle platoon's reliable range at 38 m while the honest baseline doubles it to 82 m; forcing it down to 5 GHz sustains 97% long-range reception but collapses the transport block to a third and quadruples long-range latency to 12.5 ms. We then implement the defense the mechanism implies. Rain loss grows linearly with distance while path loss grows logarithmically, so a receiver that tests measured SINR against the attenuation its reported weather predicts flags force-up with 98% probability within 1.5 s at a 1% false-alarm rate, and re-selection then restores long-range reception from 60% to 75%. The same test is structurally blind to force-down, because the 5 GHz fallback is nearly rain-immune. An advecting rain cell that swings the local rate from 15 to 81 mm/h leaves every result unchanged. Weather-aware band selection therefore requires an authenticated meteorological input; physical cross-checking covers one half of the threat.
Comments6 pages, 4 figures, Submitted to The 14th Annual IEEE International Conference on Wireless for Space and Extreme Environments (WISEE 2026)
