Information Importance-Aware Defense against Adversarial Attack for Automatic Modulation Classification:An XAI-Based Approach

TL;DR

This paper introduces an XAI-based defense method for automatic modulation classification that identifies and removes adversarial attack effects using SHAP, improving robustness and reducing resource use.

Contribution

It proposes a novel SHAP-based feature importance method to defend against adversarial attacks in AMC, enhancing robustness and efficiency.

Findings

Classification performance improved by 15%-20% under attacks

Model robustness increased against various attack levels

Resource consumption reduced during defense process

Abstract

Deep learning (DL) has significantly improved automatic modulation classification (AMC) by leveraging neural networks as the feature extractor.However, as the DL-based AMC becomes increasingly widespread, it is faced with the severe secure issue from various adversarial attacks. Existing defense methods often suffer from the high computational cost, intractable parameter tuning, and insufficient robustness.This paper proposes an eXplainable artificial intelligence (XAI) defense approach, which uncovers the negative information caused by the adversarial attack through measuring the importance of input features based on the SHapley Additive exPlanations (SHAP).By properly removing the negative information in adversarial samples and then fine-tuning(FT) the model, the impact of the attacks on the classification result can be mitigated.Experimental results demonstrate that the proposed SHAP-FT improves the classification performance of the model by 15%-20% under different attack levels,which not only enhances model robustness against various attack levels but also reduces the resource consumption, validating its effectiveness in safeguarding communication networks.