信号调制识别的对抗样本攻防技术研究进展  

Research Progress of Adversarial Attack and Defense for Signal Modulation Recognition

作　　者：江汉 胡林 李文 焦雨涛 徐煜华 徐逸凡 JIANG Han;HU Lin;LI Wen;JIAO Yutao;XU Yuhua;XU Yifan(College of Communication Engineering,Army Engineering University of PLA,Nanjing 210007,China;China Electronics Technology Corporation 29th Research Institute,Chengdu 610036,China)

机构地区：[1]陆军工程大学通信工程学院,南京210007 [2]中国电子科技集团公司第二十九研究所,成都610036

出　　处：《数据采集与处理》2023年第6期1235-1256,共22页Journal of Data Acquisition and Processing

基　　金：国家自然联合基金(U22B2002);国家自然科学基金(62101594);江苏省基础研究计划(自然科学基金)前沿引领技术基础研究专项(BK20212001)。

摘　　要：对调制识别的对抗样本攻击这一研究热点进行了综述,首先给出调制识别中对抗样本的的相关概述和专业术语,将对抗样本攻击和防御方法的相关研究成果进行梳理回顾,并对现有对抗攻击方法进行分类,阐述了其生成机理。针对在无线通信场景下对抗攻击所面临的挑战,梳理了调制识别任务下的对抗样本攻击现有关键技术,深入分析了调制识别对抗样本攻击的防御技术。最后,依据现有研究与潜在的机遇和挑战,结合人工智能算法的各项优势,对下一代智能无线通信中对抗攻击的技术方向和发展前景进行了展望。The hot research topic of adversarial sample attacks on modulation recognition is reviewed.Firstly,we introduce the concepts and terms related to modulation recognition adversarial samples.Then we review and sort out the related research results on adversarial sample attacks and defense methods,and classify the existing adversarial attack methods and explain their generation mechanisms.Finally,based on the existing research,potential opportunities and challenges,and the advantages of artificial intelligence algorithms,the technical directions and development prospects of adversarial attacks in next-generation intelligent wireless communications are presented.

关 键 词：深度学习 自动调制识别 对抗攻击 对抗攻击防御 无线安全 

分 类 号：TN972[电子电信—信号与信息处理]