Transferable Anti-Intelligence Recognition Radar Waveform Design Based on Adversarial Attacks

Ruibin Zhang, Yunjie Li, Jiabin Liu*

*Corresponding author for this work

Research output: Contribution to journalArticlepeer-review

Abstract

The widespread integration of deep neural networks in modern electronic reconnaissance systems has resulted in a significant enhancement in the perception ability of these systems, thereby improving their interference effect against radar systems. In response to this challenge, this article proposes a method for designing an antirecognition waveform (ARW) based on adversarial attacks for the radar side. The proposed method can effectively degrade the automatic modulation recognition (AMR) performance of the reconnaissance side. Specifically, the method mainly consists of two operations: 1) variance tuning; and 2) weighted forecasting gradients attack (VWFGA), and random packet ensemble (RPE). VWFGA incorporates weighted forecasting gradients, gradient variance, and adaptive step size to boost the ARW's transferability and accelerate the algorithm's convergence. In addition, RPE further enhances transferability through the formulation of various model ensembles based on gradient similarities. The generated ARW can mislead AMR networks within reconnaissance systems while maintaining compatibility with signal processing methods commonly used in radar systems like pulse Doppler radar and synthetic aperture radar. Extensive experiments on a simulated dataset based on domain knowledge demonstrate that our method outperforms state-of-the-art methods and reduces the average accuracy of 17 models by 32.82% in the black-box scenario.

Original languageEnglish
Pages (from-to)3798-3812
Number of pages15
JournalIEEE Transactions on Aerospace and Electronic Systems
Volume61
Issue number2
DOIs
Publication statusPublished - 2025

Keywords

  • Adversarial attacks
  • automatic modulation recognition (AMR)
  • deep neural networks
  • similarity constraint
  • waveform design

Fingerprint

Dive into the research topics of 'Transferable Anti-Intelligence Recognition Radar Waveform Design Based on Adversarial Attacks'. Together they form a unique fingerprint.

Cite this