Automatic modulation classification (AMC) using the Deep Neural Network (DNN) approach outperforms the traditional classification techniques, even in the presence of challenging wireless channel environments. However, the adversarial attacks cause the loss of accuracy for the DNN-based AMC by injecting a well-designed perturbation to the wireless channels. In this paper, we propose a novel generative adversarial network (GAN)-based countermeasure approach to safeguard the DNN-based AMC systems against adversarial attack examples. GAN-based aims to eliminate the adversarial attack examples before feeding to the DNN-based classifier. Specifically, we have shown the resiliency of our proposed defense GAN against the Fast-Gradient Sign method (FGSM) algorithm as one of the most potent kinds of attack algorithms to craft the perturbed signals. The existing defense-GAN has been designed for image classification and does not work in our case where the above-mentioned communication system is considered. Thus, our proposed countermeasure approach deploys GANs with a mixture of generators to overcome the mode collapsing problem in a typical GAN facing radio signal classification problem. Simulation results show the effectiveness of our proposed defense GAN so that it could enhance the accuracy of the DNN-based AMC under adversarial attacks to 81%, approximately.
翻译:使用深神经网络(DNN)的自动调控分类(AMC ) 使用深神经网络(DNNN) 的方法优于传统的分类技术,即便在具有挑战性的无线频道环境中也是如此。然而,对抗性攻击通过向无线频道注入设计完善的扰动,导致基于DNN的AMC算法的准确性丧失。在本文中,我们提议采用新的基于DNNA的反制办法,以保护基于DNNA的AMC系统不受对抗性攻击的例子。基于GAN的反制办法,目的是在向基于DNNN的分类师提供之前消除对抗性攻击实例。具体地说,我们已经展示了我们提议的GAN的防御GAN对快敏信号方法(FGSM)的弹性算法,作为最有力的攻击算法之一,用以制造受扰动信号的信号。在考虑上述通信系统时,现有的国防-GAN的反制式反制方法没有发挥作用。因此,我们提议的GAN的反制方法在典型的GAN的GAN的GAN攻击中,可以将GAN的精确度提升为GNM的反向GNM的防制。