Research Article

Transferable Adversarial Attacks against Automatic Modulation Classifier in Wireless Communications

Figure 11

Modulation samples with 18 dB before and after adding adversarial perturbation.
(a) QPSK signal before and after attacked with FGSM
(b) QPSK signal before and after attacked with AL-MIM
(c) QAM16 signal before and after attacked with FGSM
(d) QAM16 signal before and after attacked with AL-MIM