Deep joint source and channel coding (JSCC) transmits a source by mapping it directly to channel symbols through an end-to-end deep neural network (DNN) and reconstructing it at the receiver. Taking image transmission as an application, this DNN pipeline behaves as a black box: the receiver cannot readily detect security attacks when the transmitted images are corrupted, thereby introducing a new security vulnerability. In this letter, we study defense against input-patch backdoor attacks on deep JSCC, in which a small trigger patch attached to the input forces the decoder to emit an attacker-chosen target image. Most existing patch-trigger defenses are designed for classification, leaving the reconstruction setting of deep JSCC unaddressed. We adapt the gradient mask defense to this reconstruction setting as a baseline and then propose mask-region optimized purification (MROP), which operates at inference and requires no retraining of the JSCC model. Unlike the baseline, which localizes the trigger from the input--output gradient, MROP instead places a per-pixel mask at the encoder input and optimizes it via a Gumbel-sigmoid relaxation to localize the trigger, then refines the trigger region to reconstruct the pure images better. In numerical results, we evaluate the proposed method on CIFAR-10 and STL-10 datasets along with the DeepJSCC and SwinJSCC models. By doing so, we show that the proposed method substantially lowers the attack success rate (ASR) while preserving the peak signal-to-noise ratio (PSNR) of clean reconstructions.
Seongkyu Yang, Hyeonho Noh, Hyun Jong Yang et al.· 0 citations
Spectrally efficient frequency-division multiplexing (SEFDM) is an attractive waveform to improve communication spectral efficiency by compressing the subcarrier spacing, yet its use for integrated sensing and communication (ISAC) poses a fundamental sensing challenge. Specifically, the intentional loss of subcarrier orthogonality generates SEFDM-induced intercarrier interference (S-ICI), which combines with Doppler-induced ICI (D-ICI) from moving targets to blur range--velocity maps and severely degrade sensing accuracy. Building on multi-user multi-input-multi-output (MIMO) SEFDM systems, this paper develops a model-driven ISAC framework that supports spectrally efficient multi-user communication while mitigating both S-ICI and D-ICI in sensing. To this end, an intercarrier interference mitigation network (IMNet) is proposed, which exploits the distinct physical structures of the two interferences. A bank of Doppler correction filters first compensates the velocity-dependent D-ICI over multiple Doppler hypotheses, and an axial-attention network subsequently suppresses the residual D-ICI and the long-range S-ICI to recover reliable sensing signals. To further improve range and velocity estimation accuracy, IMNet with local refinement (IMNet-LR) is proposed, which performs maximum-likelihood refinement with nuisance projection around the IMNet detections to achieve sub-cell precision without an exhaustive global search. Simulation results show that IMNet-LR achieves near-maximum-likelihood range and velocity estimation accuracy with more than three orders of magnitude lower execution time compared to conventional detection methods.
Hyeonho Noh· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
