What question did this study set out to answer?

This research aims to evaluate the effectiveness of adversarial attacks on deep learning-based LPI detectors.

February 28, 2026

Adversarial Vulnerability of Deep Learning–Based LPI Detectors

Key Points

This research aims to evaluate the effectiveness of adversarial attacks on deep learning-based LPI detectors.
Conducted modulation-wise evaluations against FGSM and PGD attacks.
Utilized black-box threat models to analyze transferable perturbations.
Experimented with twelve representative LPI modulations to assess adversarial impacts.
Demonstrated significant effectiveness of adversarial examples on detector performance.
Quantified the trade-off between distortion and evasion relative to original signals.
Identified configurations that maximize evasion with minimal perturbation.

Abstract

Deep learning detectors operating on time-frequency images (TFIs) achieve strong performance in detecting and recognizing low-probability-of-intercept (LPI) radar waveforms, yet their robustness to adversarial perturbations has received limited attention. This paper provides a modulation-wise evaluation of two canonical attacks—Fast Gradient Sign Method (FGSM) and Projected Gradient Descent (PGD)—against a convolutional neural networks based LPI detector under a black-box threat model, where transferable perturbations are crafted via surrogate models. Experiments cover twelve representative LPI modulations. Using per-modulation adversarial accuracy, attack success rate, and a TFI-domain perturbation budget , we demonstrate both the effectiveness of adversarial examples and quantify the distortion–evasion trade-off relative to the original signals. The findings offer modulation-aware guidance on optimal attack settings, and highlight configurations that achieve maximal evasion with minimal perturbation.

Demander à l'IA

Bookmark