Real-World Adversarial Attacks on RF-Based Drone Detectors

• URL: http://arxiv.org/abs/2512.20712v1
• Date: Tue, 23 Dec 2025 19:19:45 GMT
• Title: Real-World Adversarial Attacks on RF-Based Drone Detectors
• Authors: Omer Gazit, Yael Itzhakev, Yuval Elovici, Asaf Shabtai,
• Abstract summary: We present the first physical attack on RF image based drone detectors.<n>We optimize class-specific universal complex baseband (I/Q) waveforms that are transmitted alongside legitimate communications.<n>Our results show that modest, structured I/Q perturbations are compatible with standard RF chains and reliably reduce target drone detection.
• Score: 23.665242593779904
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: Radio frequency (RF) based systems are increasingly used to detect drones by analyzing their RF signal patterns, converting them into spectrogram images which are processed by object detection models. Existing RF attacks against image based models alter digital features, making over-the-air (OTA) implementation difficult due to the challenge of converting digital perturbations to transmittable waveforms that may introduce synchronization errors and interference, and encounter hardware limitations. We present the first physical attack on RF image based drone detectors, optimizing class-specific universal complex baseband (I/Q) perturbation waveforms that are transmitted alongside legitimate communications. We evaluated the attack using RF recordings and OTA experiments with four types of drones. Our results show that modest, structured I/Q perturbations are compatible with standard RF chains and reliably reduce target drone detection while preserving detection of legitimate drones.

Related papers

• RF-GPT: Teaching AI to See the Wireless World [48.294819966466044]
  Large language models (LLMs) and multimodal models have become powerful general-purpose reasoning systems.<n>RF-GPT is a radio-frequency language model (RFLM) that utilizes the visual encoders of multimodals to process and understand RF spectrograms.<n>A text-only LLM then converts these captions into RF-grounded instruction-answer pairs, yielding roughly 12,000 RF scenes and 25 million examples.
  arXiv  Detail & Related papers  (2026-02-16T15:24:56Z)
• Few-Shot Radar Signal Recognition through Self-Supervised Learning and Radio Frequency Domain Adaptation [48.265859815346985]
  Radar signal recognition plays a pivotal role in electronic warfare (EW)<n>Recent advances in deep learning have shown significant potential in improving radar signal recognition.<n>These methods fall short in EW scenarios where annotated radio frequency (RF) data are scarce or impractical to obtain.
  arXiv  Detail & Related papers  (2025-01-07T01:35:56Z)
• Rydberg Atomic Quantum Receivers for Multi-Target DOA Estimation [77.32323151235285]
  Rydberg atomic quantum receivers (RAQRs) have emerged as a promising solution to classical wireless communication and sensing.<n>We first conceive a Rydberg atomic quantum uniform linear array (RAQ-ULA) aided wireless receiver for multi-target DOA detection and propose the corresponding signal model of this sensing system.<n>To solve this sensor gain mismatch problem, we propose the Rydberg atomic quantum ESPRIT (RAQ-ESPRIT) relying on our model.
  arXiv  Detail & Related papers  (2025-01-06T07:42:23Z)
• Rydberg Atomic Quantum Receivers for Classical Wireless Communications and Sensing: Their Models and Performance [78.76421728334013]
  Rydberg atomic quantum receivers (RAQRs) are an eminent solution for detecting the electric field of radio frequency (RF) signals.<n>We introduce the RAQR to the wireless community by presenting an end-to-end reception scheme.<n>We then develop a corresponding equivalent baseband signal model relying on a realistic reception flow.
  arXiv  Detail & Related papers  (2024-12-07T06:25:54Z)
• RF Challenge: The Data-Driven Radio Frequency Signal Separation Challenge [66.33067693672696]
  We address the critical problem of interference rejection in radio-frequency (RF) signals using a data-driven approach that leverages deep-learning methods.<n>A primary contribution of this paper is the introduction of the RF Challenge, which is a publicly available, diverse RF signal dataset.
  arXiv  Detail & Related papers  (2024-09-13T13:53:41Z)
• Vulnerabilities in AI-generated Image Detection: The Challenge of Adversarial Attacks [39.524974831780874]
  We show that adversarial attack is truly a real threat to AIGI detectors, because FPBA can deliver successful black-box attacks.<n>We name our method as Frequency-based Post-train Bayesian Attack, or FPBA.
  arXiv  Detail & Related papers  (2024-07-30T14:07:17Z)
• Multi-Stage Fusion Architecture for Small-Drone Localization and Identification Using Passive RF and EO Imagery: A Case Study [0.1872664641238533]
  This work develops a multi-stage fusion architecture using passive radio frequency (RF) and electro-optic (EO) imagery data. Supervised deep learning based techniques and unsupervised foreground/background separation techniques are explored to cope with challenging environments. The proposed fusion architecture is tested and the tracking and performance is quantified over the range.
  arXiv  Detail & Related papers  (2024-03-30T22:53:28Z)
• A Two-Dimensional Deep Network for RF-based Drone Detection and Identification Towards Secure Coverage Extension [7.717171534776764]
  We use Short-Time Fourier Transform to extract two-dimensional features from the raw signals, which contain both time-domain and frequency-domain information. Then, we employ a Convolutional Neural Network (CNN) built with ResNet structure to achieve multi-class classifications. Our experimental results show that the proposed ResNet-STFT can achieve higher accuracy and faster convergence on the extended dataset.
  arXiv  Detail & Related papers  (2023-08-26T15:43:39Z)
• One-shot Generative Distribution Matching for Augmented RF-based UAV Identification [0.0]
  This work addresses the challenge of identifying Unmanned Aerial Vehicles (UAV) using radiofrequency (RF) fingerprinting in limited RF environments. The complexity and variability of RF signals, influenced by environmental interference and hardware imperfections, often render traditional RF-based identification methods ineffective. One-shot generative methods for augmenting transformed RF signals offer a significant improvement in UAV identification.
  arXiv  Detail & Related papers  (2023-01-20T02:35:43Z)
• Exploring Frequency Adversarial Attacks for Face Forgery Detection [59.10415109589605]
  We propose a frequency adversarial attack method against face forgery detectors. Inspired by the idea of meta-learning, we also propose a hybrid adversarial attack that performs attacks in both the spatial and frequency domains.
  arXiv  Detail & Related papers  (2022-03-29T15:34:13Z)
• Spectro-Temporal RF Identification using Deep Learning [3.8137985834223507]
  WRIST is a Wideband, Real-time RF Identification system with Spectro-Temporal detection, framework and system. Our resulting deep learning model is capable to detect, classify, and precisely locate RF emissions in time and frequency. WRIST detector achieves 90 mean Average Precision even in extremely congested environment in the wild.
  arXiv  Detail & Related papers  (2021-07-11T19:02:07Z)
• WaveTransform: Crafting Adversarial Examples via Input Decomposition [69.01794414018603]
  We introduce WaveTransform', that creates adversarial noise corresponding to low-frequency and high-frequency subbands, separately (or in combination) Experiments show that the proposed attack is effective against the defense algorithm and is also transferable across CNNs.
  arXiv  Detail & Related papers  (2020-10-29T17:16:59Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.