Abstract:Deep learning-based discriminative classifiers, despite their remarkable success, remain vulnerable to adversarial examples that can mislead model predictions. While adversarial training can enhance robustness, it fails to address the intrinsic vulnerability stemming from the opaque nature of these black-box models. We present a deep ensemble model that combines discriminative features with generative models to achieve both high accuracy and adversarial robustness. Our approach integrates a bottom-level pre-trained discriminative network for feature extraction with a top-level generative classification network that models adversarial input distributions through a deep latent variable model. Using variational Bayes, our model achieves superior robustness against white-box adversarial attacks without adversarial training. Extensive experiments on CIFAR-10 and CIFAR-100 demonstrate our model's superior adversarial robustness. Through evaluations using counterfactual metrics and feature interaction-based metrics, we establish correlations between model interpretability and adversarial robustness. Additionally, preliminary results on Tiny-ImageNet validate our approach's scalability to more complex datasets, offering a practical solution for developing robust image classification models.
Abstract:As electronic systems become increasingly complex and prevalent in modern vehicles, securing onboard networks is crucial, particularly as many of these systems are safety-critical. Researchers have demonstrated that modern vehicles are susceptible to various types of attacks, enabling attackers to gain control and compromise safety-critical electronic systems. Consequently, several Intrusion Detection Systems (IDSs) have been proposed in the literature to detect such cyber-attacks on vehicles. This paper introduces a novel generative classifier-based Intrusion Detection System (IDS) designed for anomaly detection in automotive networks, specifically focusing on the Controller Area Network (CAN). Leveraging variational Bayes, our proposed IDS utilizes a deep latent variable model to construct a causal graph for conditional probabilities. An auto-encoder architecture is utilized to build the classifier to estimate conditional probabilities, which contribute to the final prediction probabilities through Bayesian inference. Comparative evaluations against state-of-the-art IDSs on a public Car-hacking dataset highlight our proposed classifier's superior performance in improving detection accuracy and F1-score. The proposed IDS demonstrates its efficacy by outperforming existing models with limited training data, providing enhanced security assurance for automotive systems.
Abstract:Wireless connections are a communication channel used to support different applications in our life such as microwave connections, mobile cellular networks, and intelligent transportation systems. The wireless communication channels are affected by different weather factors such as rain, snow, fog, dust, and sand. This effect is more evident in the high frequencies of the millimeter-wave (mm-wave) band. Recently, the 5G opened the door to support different applications with high speed and good quality. A recent study investigates the effect of rain and snow on the 5G communication channel to reduce the challenge of using high millimeter-wave frequencies. This research investigates the impact of dust and sand on the communication channel of 5G mini links using Mie scattering model to estimate the propagating wave's attenuation by computing the free space loss of a dusty region. Also, the cross-polarization of the propagating wave with dust and sand is taken into account at different distances of the propagating length. Two kinds of mini links, ML-6363, and ML-6352, are considered to demonstrate the effect of dust and sand in these specific operating frequency bands. The 73.5 GHz (V-band) and (21.5GHz (K-band) are the ML-6352 and ML-6363 radio frequency, respectively. Also, signal depolarization is another important radio frequency transmission parameter that is considered heroin. The numerical and simulation results show that the 5G ML-6352 is more effect by dust and sand than ML6363. The 5G toolbox is used to build the communication system and simulate the effect of the dust and sand on the different frequency bands.