IEEE Transactions on Wireless Communications · 2023 · 231 citations · 28 references
ComputingCommunicationComputer ScienceFeature EngineeringMachine LearningNatural Language ProcessingDeep LearningPattern RecognitionRepresentation LearningSource CodingAdversarial RobustnessFeature ImportanceNoise RobustnessRobust Feature RepresentationRobustnessSparse Feature RepresentationSystem Robustness
Semantic communications have shown good performance, yet their robustness to semantic noise—misleading between intended and received symbols—has not been thoroughly investigated. This work proposes a robust end‑to‑end semantic communication framework to mitigate semantic noise. The framework analyzes sample‑dependent and sample‑independent noise, employs adversarial training with weight perturbation, masks frequently noisy input, introduces a masked VQ‑VAE with a shared discrete codebook, and adds a feature‑importance module to transmit only task‑relevant feature indices. Simulations demonstrate that the method substantially improves robustness to semantic noise, reduces transmission overhead, and performs well across multiple downstream tasks.
Although semantic communications have exhibited satisfactory performance on a large number of tasks, the impact of semantic noise and the robustness of the systems have not been well investigated. Semantic noise refers to the misleading between the intended semantic symbols and received ones, thus causes the failure of tasks. In this paper, we first propose a framework for the robust end-to-end semantic communication systems to combat the semantic noise. In particular, we analyze sample-dependent and sample-independent semantic noise. To combat the semantic noise, the adversarial training with weight perturbation is developed to incorporate the samples with semantic noise in the training dataset. Then, we propose to mask a portion of the input, where the semantic noise appears frequently, and design the masked vector quantized-variational autoencoder (VQ-VAE) with the noise-related masking strategy. We use a discrete codebook shared by the transmitter and the receiver for encoded feature representation. To further improve the system robustness, we develop a feature importance module (FIM) to suppress the noise-related and task-unrelated features. Thus, the transmitter simply needs to transmit the indices of these important task-related features in the codebook. Simulation results show that the proposed method can be applied in many downstream tasks and significantly improve the robustness against semantic noise with remarkable reduction on the transmission overhead.
28
The Limitations of Deep Learning in Adversarial Settings
Nicolas Papernot, Patrick McDaniel, Somesh Jha et al. · 2016 · 3.9K citations
Universal Adversarial Perturbations
Seyed-Mohsen Moosavi-Dezfooli, Alhussein Fawzi, Omar Fawzi et al. · 2017 · 2.7K citations · Full text