Transferable Anti-Intelligence Recognition Radar Waveform Design Based on Adversarial Attacks

The widespread integration of deep neural networks in modern electronic reconnaissance systems has resulted in a significant enhancement in the perception ability of these systems, thereby improving their interference effect against radar systems. In response to this challenge, this article proposes a method for designing an antirecognition waveform (ARW) based on adversarial attacks for the radar side. The proposed method can effectively degrade the automatic modulation recognition (AMR) performance of the reconnaissance side. Specifically, the method mainly consists of two operations: 1) variance tuning; and 2) weighted forecasting gradients attack (VWFGA), and random packet ensemble (RPE). VWFGA incorporates weighted forecasting gradients, gradient variance, and adaptive step size to boost the ARW's transferability and accelerate the algorithm's convergence. In addition, RPE further enhances transferability through the formulation of various model ensembles based on gradient similarities. The generated ARW can mislead AMR networks within reconnaissance systems while maintaining compatibility with signal processing methods commonly used in radar systems like pulse Doppler radar and synthetic aperture radar. Extensive experiments on a simulated dataset based on domain knowledge demonstrate that our method outperforms state-of-the-art methods and reduces the average accuracy of 17 models by 32.82% in the black-box scenario.