Generative AI-Empowered Resilient Adaptive ISAC Against Adversarial Machine Learning Attacks
Why this work is in the frame
A frame that forgets how it found something cannot be audited. These are the routes that admitted this work.
Bibliographic record
Abstract
In this paper, we present a novel resilient adaptive integrated sensing and communication (RAd-ISAC) framework. It aims to enhance ISAC systems for advanced driver-assistance systems (ADASs) to mitigate adversarial machine learning (AML) threats and improve resource efficiency. AML attacks target ADASs by injecting false Range-Doppler maps (RDMs) to mislead the system about target vehicles (TVs), resulting in resource inefficiency. Our approach introduces a generative adversarial network (GAN) equipped with a differentiable Kolmogorov-Smirnov (KS) loss function, termed KSGAN. This significantly enhances AML attack detection by generating highly realistic RDM samples, improving the robustness of the AML detector. To optimize resource allocation in ISAC systems, we propose an adaptive signal transmission method. This allows the source vehicle (SV) to switch dynamically between ISAC and communication-only signals based on the AML detector's output and 2D constant false alarm rate (CFAR) analyses. We conduct extensive simulations with synthetic data using IBM's adversarial robustness toolbox (ART). Our results show that KSGAN outperforms standard GAN, Wasserstein GAN (WGAN), and relational GAN (RGAN) in AML detection. Additionally, when compared to other ISAC designs, including standalone ISAC, Faster-than-Nyquist ISAC (FTN-ISAC), ISAC-accelerated edge intelligence system, and hybrid-ISAC, our Rad-ISAC framework achieves the lowest root mean square error (RMSE) and Cramér-Rao lower bound (CRLB). This work highlights an unexplored vulnerability of ISAC systems to AML attacks and demonstrates advancements in ADAS vehicle safety and efficiency.
Fetched live from OpenAlex and de-inverted. Abstracts are not stored in this database: the inverted indexes are 8.6 GB of the frame’s 9.3 GB of text, and the host has 13 GB free.
Full frame distilled prediction
Teacher imitationNot calibrated prevalence, not ground truth. Human validation pending. Learned from the 10,348 direct Codex labels and 10,348 direct Gemma labels. Candidate is the union of thresholded teacher heads; consensus is their intersection. These outputs are machine_predicted_unvalidated and are not human labels or direct frontier model labels.
Codex and Gemma teacher scores by category
| Category | Codex | Gemma |
|---|---|---|
| Metaresearch | 0.000 | 0.000 |
| Meta-epidemiology (narrow) | 0.000 | 0.000 |
| Meta-epidemiology (broad) | 0.000 | 0.000 |
| Bibliometrics | 0.001 | 0.002 |
| Science and technology studies | 0.001 | 0.000 |
| Scholarly communication | 0.000 | 0.000 |
| Open science | 0.001 | 0.000 |
| Research integrity | 0.001 | 0.002 |
| Insufficient payload (model declined to judge) | 0.000 | 0.000 |
Machine scores (provisional)
The two teacher heads of the student model, read on this work. A score orders the frame for review; it never asserts a category, and the validation status ships verbatim with every row.
Baseline scores from an immature model (maturity gate not passed, 7 training rounds). Scores rank; they never assert a category.
score_only:v0-immature-baseline · verbatim from the scoring run: score_only means the number may rank works, and no category label ships from it