A Neural Rejection System Against Universal Adversarial Perturbations in Radio Signal Classification
Fuente:
arXiv
Salvato in:
| Autori principali: | , , , |
|---|---|
| Natura: | Preprint |
| Pubblicazione: |
2025
|
| Soggetti: | |
| Accesso online: | |
| Tags: |
Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
|
| _version_ | 1866908407314776064 |
|---|---|
| author | Zhang, Lu Lambotharan, Sangarapillai Zheng, Gan Roli, Fabio |
| author_facet | Zhang, Lu Lambotharan, Sangarapillai Zheng, Gan Roli, Fabio |
| contents | Advantages of deep learning over traditional methods have been demonstrated for radio signal classification in the recent years. However, various researchers have discovered that even a small but intentional feature perturbation known as adversarial examples can significantly deteriorate the performance of the deep learning based radio signal classification. Among various kinds of adversarial examples, universal adversarial perturbation has gained considerable attention due to its feature of being data independent, hence as a practical strategy to fool the radio signal classification with a high success rate. Therefore, in this paper, we investigate a defense system called neural rejection system to propose against universal adversarial perturbations, and evaluate its performance by generating white-box universal adversarial perturbations. We show that the proposed neural rejection system is able to defend universal adversarial perturbations with significantly higher accuracy than the undefended deep neural network. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2506_11901 |
| institution | arXiv |
| publishDate | 2025 |
| record_format | arxiv |
| spellingShingle | A Neural Rejection System Against Universal Adversarial Perturbations in Radio Signal Classification Zhang, Lu Lambotharan, Sangarapillai Zheng, Gan Roli, Fabio Machine Learning Artificial Intelligence Advantages of deep learning over traditional methods have been demonstrated for radio signal classification in the recent years. However, various researchers have discovered that even a small but intentional feature perturbation known as adversarial examples can significantly deteriorate the performance of the deep learning based radio signal classification. Among various kinds of adversarial examples, universal adversarial perturbation has gained considerable attention due to its feature of being data independent, hence as a practical strategy to fool the radio signal classification with a high success rate. Therefore, in this paper, we investigate a defense system called neural rejection system to propose against universal adversarial perturbations, and evaluate its performance by generating white-box universal adversarial perturbations. We show that the proposed neural rejection system is able to defend universal adversarial perturbations with significantly higher accuracy than the undefended deep neural network. |
| title | A Neural Rejection System Against Universal Adversarial Perturbations in Radio Signal Classification |
| topic | Machine Learning Artificial Intelligence |
| url | https://arxiv.org/abs/2506.11901 |