论文标题
基于防御性蒸馏的对抗攻击缓解方法用于使用下一代无线网络中深度学习模型的渠道估计
Defensive Distillation based Adversarial Attacks Mitigation Method for Channel Estimation using Deep Learning Models in Next-Generation Wireless Networks
论文作者
论文摘要
未来的无线网络(5G及以后)是即将到来的蜂窝系统的愿景,将数十亿个设备和人员联系在一起。在过去的几十年中,通过高级电信技术,用于高速数据传输,高细胞容量和低潜伏期的高级电信技术,蜂窝网络已经显着增长。这些技术的主要目的是支持各种新应用,例如虚拟现实,元视,远程医疗,在线教育,自动驾驶和飞行的车辆,智能城市,智能电网,高级制造等。 NextG网络的关键动机是通过改善和优化网络功能来满足这些应用程序的高需求。人工智能(AI)具有很高的潜力,可以通过整合到网络的所有层中的应用中,以实现这些要求。但是,使用基于AI的模型(即模型启用)对NextG网络函数的安全问题尚未进行深入研究。因此,它需要使用基于AI的方法来设计有效的缓解技术并为NextG网络提供安全解决方案。本文提出了对深度学习(DL)基于基于的通道估计模型的全面漏洞分析,该模型训练了从MATLAB的5G工具箱获得的数据集,用于对抗性攻击和基于防御性蒸馏的缓解方法。对抗性攻击通过操纵训练有素的DL模型来在NextG网络中估算频道估计,从而产生错误的结果,同时通过缓解方法使模型更强大地抵抗任何攻击。本文还介绍了针对通道估计模型的每种对抗性攻击的建议防御蒸馏方法的性能。结果表明,提出的缓解方法可以捍卫基于DL的渠道估计模型,以防止NextG网络中的对抗攻击。
Future wireless networks (5G and beyond) are the vision of forthcoming cellular systems, connecting billions of devices and people together. In the last decades, cellular networks have been dramatically growth with advanced telecommunication technologies for high-speed data transmission, high cell capacity, and low latency. The main goal of those technologies is to support a wide range of new applications, such as virtual reality, metaverse, telehealth, online education, autonomous and flying vehicles, smart cities, smart grids, advanced manufacturing, and many more. The key motivation of NextG networks is to meet the high demand for those applications by improving and optimizing network functions. Artificial Intelligence (AI) has a high potential to achieve these requirements by being integrated in applications throughout all layers of the network. However, the security concerns on network functions of NextG using AI-based models, i.e., model poising, have not been investigated deeply. Therefore, it needs to design efficient mitigation techniques and secure solutions for NextG networks using AI-based methods. This paper proposes a comprehensive vulnerability analysis of deep learning (DL)-based channel estimation models trained with the dataset obtained from MATLAB's 5G toolbox for adversarial attacks and defensive distillation-based mitigation methods. The adversarial attacks produce faulty results by manipulating trained DL-based models for channel estimation in NextG networks, while making models more robust against any attacks through mitigation methods. This paper also presents the performance of the proposed defensive distillation mitigation method for each adversarial attack against the channel estimation model. The results indicated that the proposed mitigation method can defend the DL-based channel estimation models against adversarial attacks in NextG networks.