Transferable Adversarial Attacks against Automatic Modulation Classifier in Wireless Communications

Table 1

Attack indicator results.

Type	Misclassification	Imperceptible		Signal characteristics
Attack methods	ASR (%)			ACR	APD	PSR	TR
FGSM	95.46	0.85	5.14	1.41	0.30	-12.98	0.15
BIM	96.80	0.78	0.88	0.08	0.11	-23.38	0.40
MIM	97.45	0.70	1.01	0.11	0.14	-22.01	0.46
AL-BIM	98.90	0.50	0.95	0.07	0.10	-25.63	0.70
AL-MIM	99.97	0.32	0.22	0.06	0.03	-27.45	0.75