Replicating the Signature: Unsupervised Targeted Impersonation Attack on RF Fingerprinting
- URL: http://arxiv.org/abs/2607.05549v1
- Date: Mon, 06 Jul 2026 18:33:57 GMT
- Title: Replicating the Signature: Unsupervised Targeted Impersonation Attack on RF Fingerprinting
- Abstract summary: This paper presents a novel impersonation attack framework that aims to fool RF Fingerprinting (RFFP) identification systems by synthesizing signals that replicate the hardware-specific impairments of a target device.<n>Our framework leverages unsupervised learning to enable accurate impairment estimation, combined with signal processing-based generation to synthesize high-fidelity adversarial signals.
- Score: 3.065243326333468
- License: http://creativecommons.org/licenses/by/4.0/
- Abstract: This paper presents a novel impersonation attack framework that aims to fool RF Fingerprinting (RFFP) identification systems by synthesizing signals that replicate the hardware-specific impairments of a target device. Our framework leverages unsupervised learning to enable accurate impairment estimation, combined with signal processing-based generation to synthesize high-fidelity adversarial signals. Unlike prior works that assume full access to the legitimate (victim) RFFP classifier, we consider a more realistic attack strategy where the adversary performs the attack from a completely different transceiver hardware. We further evaluate our proposed attack under realistic and challenging deployment settings, including over-the-air transmission in both Line-of-Sight (LoS) and Non-Line-of-Sight (NLoS) scenarios. Extensive experiments conducted on a Bluetooth Low Energy (BLE) device testbed demonstrate that our attacks remain highly effective even under severe access constraints, significantly outperforming existing baselines in terms of targeted attack success rates by over 80%. We additionally analyze the effects of cross-domain generalization, signal representation mismatch, and classifier diversity, highlighting the robustness and
Related papers
- Intelligent Disruption: Undetectable Attacks on Wireless Autoencoders [24.417698562621467]
Adversarial attacks can degrade the legitimate decision performance in wireless autoencoder communications.<n>We propose a deep learning based intelligent attack framework to jointly enhance the undetectability, aggressivity and adaptability of adversarial attacks.<n>We show that the proposed framework outperforms benchmarks in terms of attack undetectability, aggressivity and adaptability.
arXiv Detail & Related papers (2026-07-21T12:28:01Z) - Sample-wise Targeted Adversarial Attacks on Test-time Adaptation [1.7839351559374899]
Test-time adaptation (TTA) effectively counters distribution shifts but exposes models to adversarial manipulation via the unlabeled test stream.<n>We introduce a sample-wise targeted attack to capture a more realistic threat.<n>Unlike prior approaches, the attacker aims to misclassify only inputs carrying an attacker-chosen trigger, while preserving the global label distribution of benign queries to evade detection.
arXiv Detail & Related papers (2026-05-22T09:18:22Z) - TwinGate: Stateful Defense against Decompositional Jailbreaks in Untraceable Traffic via Asymmetric Contrastive Learning [60.68349524623048]
Decompositional jailbreaks pose a critical threat to large language models.<n>We present TwinGate, a stateful dual-encoder defense framework.<n>We construct a comprehensive dataset of over 3.62 million instructions spanning 8,600 distinct malicious intents.
arXiv Detail & Related papers (2026-04-30T13:44:01Z) - Prompt-Unknown Promotion Attacks against LLM-based Sequential Recommender Systems [51.504307822017985]
Large language model-powered sequential recommender systems (LLM-SRSs) have recently demonstrated remarkable performance.<n>This paper investigates the item promotion attack in LLM-SRSs under a more realistic setting where both the system prompt and victim model are unknown to the attacker.
arXiv Detail & Related papers (2026-04-26T10:09:26Z) - Elevating Intrusion Detection and Security Fortification in Intelligent Networks through Cutting-Edge Machine Learning Paradigms [5.706727902661187]
This study proposes a robust multiclass machine learning based intrusion detection framework.<n>It integrates advanced feature selection techniques to identify critical attributes, mitigating redundancy and enhancing detection accuracy.<n>The proposed ensemble architecture achieves superior performance, with an accuracy of 98%, precision of 98%, recall of 98%, and a false positive rate of just 2%.
arXiv Detail & Related papers (2025-12-22T05:14:26Z) - RAG-targeted Adversarial Attack on LLM-based Threat Detection and Mitigation Framework [0.19116784879310025]
The rapid expansion of the Internet of Things (IoT) is reshaping communication and operational practices across industries, but it also broadens the attack surface and increases susceptibility to security breaches.<n>Artificial Intelligence has become a valuable solution in securing IoT networks, with Large Language Models (LLMs) enabling automated attack behavior analysis and mitigation suggestion.<n>We attack an LLM-based IoT attack analysis and mitigation framework to test its adversarial robustness.
arXiv Detail & Related papers (2025-11-09T03:50:17Z) - Collusion-Driven Impersonation Attack on Channel-Resistant RF Fingerprinting [15.295614131186142]
We propose a collusion-driven impersonation attack that achieves deceptive RF-level mimicry.<n>The proposed attack scheme essentially maintains a success rate of over 95% under different channel conditions.
arXiv Detail & Related papers (2025-09-26T10:13:34Z) - The Silent Saboteur: Imperceptible Adversarial Attacks against Black-Box Retrieval-Augmented Generation Systems [101.68501850486179]
We explore adversarial attacks against retrieval-augmented generation (RAG) systems to identify their vulnerabilities.<n>This task aims to find imperceptible perturbations that retrieve a target document, originally excluded from the initial top-$k$ candidate set.<n>We propose ReGENT, a reinforcement learning-based framework that tracks interactions between the attacker and the target RAG.
arXiv Detail & Related papers (2025-05-24T08:19:25Z) - Multi-granular Adversarial Attacks against Black-box Neural Ranking Models [111.58315434849047]
We create high-quality adversarial examples by incorporating multi-granular perturbations.
We transform the multi-granular attack into a sequential decision-making process.
Our attack method surpasses prevailing baselines in both attack effectiveness and imperceptibility.
arXiv Detail & Related papers (2024-04-02T02:08:29Z) - FaultGuard: A Generative Approach to Resilient Fault Prediction in Smart Electrical Grids [53.2306792009435]
FaultGuard is the first framework for fault type and zone classification resilient to adversarial attacks.
We propose a low-complexity fault prediction model and an online adversarial training technique to enhance robustness.
Our model outclasses the state-of-the-art for resilient fault prediction benchmarking, with an accuracy of up to 0.958.
arXiv Detail & Related papers (2024-03-26T08:51:23Z) - AudioFool: Fast, Universal and synchronization-free Cross-Domain Attack
on Speech Recognition [0.9913418444556487]
We investigate the needed properties of robust attacks compatible with the Over-The-Air (OTA) model.
We design a method of generating attacks with arbitrary such desired properties.
We evaluate our method on standard keyword classification tasks and analyze it in OTA.
arXiv Detail & Related papers (2023-09-20T16:59:22Z) - Downlink Power Allocation in Massive MIMO via Deep Learning: Adversarial
Attacks and Training [62.77129284830945]
This paper considers a regression problem in a wireless setting and shows that adversarial attacks can break the DL-based approach.
We also analyze the effectiveness of adversarial training as a defensive technique in adversarial settings and show that the robustness of DL-based wireless system against attacks improves significantly.
arXiv Detail & Related papers (2022-06-14T04:55:11Z)
This list is automatically generated from the titles and abstracts of the papers in this site.
This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.