基于雅可比显著图的电磁信号快速对抗攻击方法

Electromagnetic signal fast adversarial attack method based on Jacobian saliency map

为了生成高质量的电磁信号对抗样本,提出了快速雅可比显著图攻击(FJSMA)方法。FJSMA通过计算攻击目标类别的雅可比矩阵,并根据该矩阵生成特征显著图,之后迭代选取显著性最强的特征点及其邻域内连续特征点添加扰动,同时引入单点扰动限制,最后生成对抗样本。实验结果表明,与雅可比显著图攻击方法相比,FJSMA在保持与之相同的高攻击成功率的同时,生成速度提升了约10倍,相似度提升了超过11%;与其他基于梯度的方法相比,攻击成功率提升了超过20%,相似度提升了20%~30%。

In order to generate high-quality electromagnetic signal countermeasure examples,a fast Jacobian saliency map attack(FJSMA)method was proposed.The Jacobian matrix of the attack target class was calculated and feature saliency maps based on the matrix were generated,then the most salient feature points were iteratively selected and perturbations in their neighborhood were continuously added while introducing a single point perturbation constraint,finally adversarial examples were generated.Experimental results show that,compared with Jacobian saliency map attack method,FJSMA improves the generation speed by about 10 times while maintaining the same high attack success rate,and improves the similarity by more than 11%,and compared with other gradient-based methods,the attack success rate is improved by more than 20%,and the similarity is improved by 20%to 30%.