SENTINEL: Securing Indoor Localization Against Adversarial Attacks With Capsule Neural Networks

被引:1
作者
Gufran, Danish [1 ]
Anandathirtha, Pooja [1 ]
Pasricha, Sudeep [1 ]
机构
[1] Colorado State Univ, Dept Elect & Comp Engn, Ft Collins, CO 80523 USA
基金
美国国家科学基金会;
关键词
Location awareness; Training; Fluctuations; Working environment noise; Neural networks; Fingerprint recognition; Real-time systems; Indoor environment; Wireless fidelity; Resilience; Adversarial attacks; adversarial training; capsule neural networks; device heterogeneity; evil twin attacks; man-in-the-middle attacks; rogue access points (APs); Wi-Fi received signal strength (RSS) fingerprinting; ALGORITHM;
D O I
10.1109/TCAD.2024.3446717
中图分类号
TP3 [计算技术、计算机技术];
学科分类号
0812 ;
摘要
With the increasing demand for edge device-powered location-based services in indoor environments, Wi-Fi received signal strength (RSS) fingerprinting has become popular, given the unavailability of GPS indoors. However, achieving robust and efficient indoor localization faces several challenges, due to RSS fluctuations from dynamic changes in indoor environments and heterogeneity of edge devices, leading to diminished localization accuracy. While advances in machine learning (ML) have shown promise in mitigating these phenomena, it remains an open problem. Additionally, emerging threats from adversarial attacks on ML-enhanced indoor localization systems, especially those introduced by malicious or rogue access points (APs), can deceive ML models to further increase localization errors. To address these challenges, we present SENTINEL, a novel embedded ML framework utilizing modified capsule neural networks to bolster the resilience of indoor localization solutions against adversarial attacks, device heterogeneity, and dynamic RSS fluctuations. We also introduce RSSRogueLoc, a novel dataset capturing the effects of rogue APs from several real-world indoor environments. Experimental evaluations demonstrate that SENTINEL achieves significant improvements, with up to $3.5\times $ reduction in mean error and $3.4\times $ reduction in worst-case error compared to state-of-the-art frameworks using simulated adversarial attacks. SENTINEL also achieves improvements of up to $2.8\times $ in mean error and $2.7\times $ in worst-case error compared to state-of-the-art frameworks when evaluated with the real-world RSSRogueLoc dataset.
引用
收藏
页码:4021 / 4032
页数:12
相关论文
共 43 条
[1]   Applying Deep Neural Network (DNN) for Robust Indoor Localization in Multi-Building Environment [J].
Adege, Abebe Belay ;
Lin, Hsin-Piao ;
Tarekegn, Getaneh Berie ;
Jeng, Shiann-Shiun .
APPLIED SCIENCES-BASEL, 2018, 8 (07)
[2]   Deep learning methods for fingerprint-based indoor positioning: a review [J].
Alhomayani, Fahad ;
Mahoor, Mohammad H. .
JOURNAL OF LOCATION BASED SERVICES, 2020, 14 (03) :129-200
[3]   RSS Certainty: An Efficient Solution for RSS Variation due to Device Heterogeneity in WLAN Fingerprinting-based Indoor Positioning System [J].
Alshami, Iyad H. ;
Ahmad, Noor Azurati ;
Sahibuddin, Shamsul .
2021 PALESTINIAN INTERNATIONAL CONFERENCE ON INFORMATION AND COMMUNICATION TECHNOLOGY (PICICT 2021), 2021, :71-76
[4]  
[Anonymous], 2023, EPIC-CSU: Heterogeneous RSSI indoor navigation
[5]  
Dakkak M, 2014, IEEE SYS MAN CYBERN, P1366, DOI 10.1109/SMC.2014.6974105
[6]   Boosting Adversarial Attacks with Momentum [J].
Dong, Yinpeng ;
Liao, Fangzhou ;
Pang, Tianyu ;
Su, Hang ;
Zhu, Jun ;
Hu, Xiaolin ;
Li, Jianguo .
2018 IEEE/CVF CONFERENCE ON COMPUTER VISION AND PATTERN RECOGNITION (CVPR), 2018, :9185-9193
[7]  
Duong Doan, 2018, IEEE VEHICULAR TECHN
[8]  
Elsayed G., 2020, Proc. PMLR, P1
[9]  
Finlayson SG, 2019, Arxiv, DOI arXiv:1804.05296
[10]  
Gufran D., 2023, P IEEE ISPIN, P1