Zhao, Tianya, Wang, Xuyu, Zhang, Junqing 
ORCID: 0000-0002-3502-2926 and Mao, Shiwen
(2024)
Explanation-Guided Backdoor Attacks on Model-Agnostic RF Fingerprinting.
In: IEEE INFOCOM 2024 - IEEE Conference on Computer Communications, 2024-5-20 - 2024-5-23.
|
PDF
INFOCOM2024_BackdoorRFFI.pdf - Author Accepted Manuscript Download (1MB) | Preview |
Abstract
Despite the proven capabilities of deep neural networks (DNNs) for radio frequency (RF) fingerprinting, their security vulnerabilities have been largely overlooked. Unlike the extensively studied image domain, few works have explored the threat of backdoor attacks on RF signals. In this paper, we analyze the susceptibility of DNN-based RF fingerprinting to backdoor attacks, focusing on a more practical scenario where attackers lack access to control model gradients and training processes. We propose leveraging explainable machine learning techniques and autoencoders to guide the selection of positions and values, enabling the creation of effective backdoor triggers in a model-agnostic manner. To comprehensively evaluate our backdoor attack, we employ four diverse datasets with two protocols (Wi-Fi and LoRa) across various DNN architectures. Given that RF signals are often transformed into the frequency or time-frequency domains, this study also assesses attack efficacy in the time-frequency domain. Furthermore, we experiment with potential defenses, demonstrating the difficulty of fully safeguarding against our attacks.
| Item Type: | Conference Item (Unspecified) |
|---|---|
| Uncontrolled Keywords: | 4606 Distributed Computing and Systems Software, 46 Information and Computing Sciences, 4611 Machine Learning, 4604 Cybersecurity and Privacy, Networking and Information Technology R&D (NITRD), Machine Learning and Artificial Intelligence |
| Divisions: | Faculty of Science and Engineering > School of Electrical Engineering, Electronics and Computer Science |
| Depositing User: | Symplectic Admin |
| Date Deposited: | 11 Jan 2024 08:46 |
| Last Modified: | 20 Aug 2025 02:56 |
| DOI: | 10.1109/infocom52122.2024.10621289 |
| Related Websites: | |
| URI: | https://livrepository.liverpool.ac.uk/id/eprint/3177798 |
Altmetric
Altmetric