Academic Journal

A knowledge distillation strategy for enhancing the adversarial robustness of lightweight automatic modulation classification models.

التفاصيل البيبلوغرافية
العنوان: A knowledge distillation strategy for enhancing the adversarial robustness of lightweight automatic modulation classification models.
المؤلفون: Xu, Fanghao1 (AUTHOR), Wang, Chao1 (AUTHOR), Liang, Jiakai1 (AUTHOR), Zuo, Chenyang1 (AUTHOR), Yue, Keqiang1 (AUTHOR) kqyue@hdu.edu.cn, Li, Wenjun1 (AUTHOR)
المصدر: IET Communications (Wiley-Blackwell). Aug2024, Vol. 18 Issue 14, p827-845. 19p.
مصطلحات موضوعية: *WIRELESS communications, AUTOMATIC classification, WIRELESS channels, COGNITIVE radio, DISTILLATION
مستخلص: Automatic modulation classification models based on deep learning models are at risk of being interfered by adversarial attacks. In an adversarial attack, the attacker causes the classification model to misclassify the received signal by adding carefully crafted adversarial interference to the transmitted signal. Based on the requirements of efficient computing and edge deployment, a lightweight automatic modulation classification model is proposed. Considering that the lightweight automatic modulation classification model is more susceptible to interference from adversarial attacks and that adversarial training of the lightweight auto‐modulation classification model fails to achieve the desired results, an adversarial attack defense system for the lightweight automatic modulation classification model is further proposed, which can enhance the robustness when subjected to adversarial attacks. The defense method aims to transfer the adversarial robustness from a trained large automatic modulation classification model to a lightweight model through the technique of adversarial robust distillation. The proposed method exhibits better adversarial robustness than current defense techniques in feature fusion based automatic modulation classification models in white box attack scenarios. [ABSTRACT FROM AUTHOR]
Copyright of IET Communications (Wiley-Blackwell) is the property of Wiley-Blackwell and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder's express written permission. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
قاعدة البيانات: Business Source Index
الوصف
تدمد:17518628
DOI:10.1049/cmu2.12793