首页|基于雅可比显著图的电磁信号快速对抗攻击方法

基于雅可比显著图的电磁信号快速对抗攻击方法

扫码查看
为了生成高质量的电磁信号对抗样本,提出了快速雅可比显著图攻击(FJSMA)方法.FJSMA 通过计算攻击目标类别的雅可比矩阵,并根据该矩阵生成特征显著图,之后迭代选取显著性最强的特征点及其邻域内连续特征点添加扰动,同时引入单点扰动限制,最后生成对抗样本.实验结果表明,与雅可比显著图攻击方法相比,FJSMA在保持与之相同的高攻击成功率的同时,生成速度提升了约10 倍,相似度提升了超过11%;与其他基于梯度的方法相比,攻击成功率提升了超过20%,相似度提升了20%~30%.
Electromagnetic signal fast adversarial attack method based on Jacobian saliency map
In order to generate high-quality electromagnetic signal countermeasure examples,a fast Jacobian saliency map attack(FJSMA)method was proposed.The Jacobian matrix of the attack target class was calculated and feature sa-liency maps based on the matrix were generated,then the most salient feature points were iteratively selected and pertur-bations in their neighborhood were continuously added while introducing a single point perturbation constraint,finally adversarial examples were generated.Experimental results show that,compared with Jacobian saliency map attack method,FJSMA improves the generation speed by about 10 times while maintaining the same high attack success rate,and improves the similarity by more than 11%,and compared with other gradient-based methods,the attack success rate is improved by more than 20%,and the similarity is improved by 20%to 30%.

deep neural networkadversarial sampleelectromagnetic signal modulation recognitionJacobian saliency maptarget attack

张剑、周侠、张一然、王梓聪

展开 >

武汉数字工程研究所,湖北 武汉 430205

深度神经网络 对抗样本 电磁信号调制识别 雅可比显著图 目标攻击

国家自然科学基金资助项目

61873040

2024

通信学报
中国通信学会

通信学报

CSTPCD北大核心
影响因子:1.265
ISSN:1000-436X
年,卷(期):2024.45(1)
  • 7