Universal Black-Box Adversarial Attack on Deep Learning for Specific Emitter Identification

Specific emitter identification (SEI) plays an integral role in network security. In recent years, deep neural networks (DNNs) have demonstrated significant success in various application scenarios. The robust feature extraction capabilities of DNNs have led to advancements in SEI. However, it has been shown that DNNs are susceptible to adversarial attacks. The proposal of well-performing adversarial attacks is conducive to improving the security of SEI with DNN-based models. This paper introduces an universal black-box adversarial attack algorithm, named UBBA, for SEI with DNN-based models. The experimental findings indicate that this universal black-box adversarial attack algorithm substantially reduces the identification accuracy of SEI models. Given a sufficient number of queries, the proposed algorithm achieves an attack effect similar to that of the universal adversarial perturbations (UAP), a universal white-box attack algorithm. Additionally, the results demonstrate that when the perturbation signal is not synchronized with the signal under attack, the proposed algorithm outperforms the fast gradient sign method (FGSM).