High-robustness integrated adversarial training method for fingerprint-based indoor localization systems
In response to the vulnerability of fingerprint-based indoor positioning models to adversarial sample attacks, as well as the high resource overhead and limited generalization ability of traditional adversarial training, an ensemble adversarial defense method based on data augmentation and distillat...
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | zho |
| Published: |
Editorial Department of Journal on Communications
2025-01-01
|
| Series: | Tongxin xuebao |
| Subjects: | |
| Online Access: | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2025138/ |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1849227134123376640 |
|---|---|
| author | ZHANG Xuejun LI Mei CHEN Hui WANG Guohua |
| author_facet | ZHANG Xuejun LI Mei CHEN Hui WANG Guohua |
| author_sort | ZHANG Xuejun |
| collection | DOAJ |
| description | In response to the vulnerability of fingerprint-based indoor positioning models to adversarial sample attacks, as well as the high resource overhead and limited generalization ability of traditional adversarial training, an ensemble adversarial defense method based on data augmentation and distillation, named EDEAD, was proposed. In EDEAD, the data distillation technique was employed to improve the quality of the augmented data and the early stopping algorithm was used to save training costs. Additionally, a coherence gradient alignment loss term was introduced to enhance adversarial response consistency among sub-models while maintaining inter-model diversity. This effectively reduced the transferability of adversarial samples among different positioning models and enhanced the robustness and generalization of the entire indoor positioning system. Experimental results show that under strong black-box attacks, comparing to the traditional high-robustness ensemble strategies GAL and DVERGE, EDEAD reduces time overhead by 30.6% and 26.1%, respectively, while improving positioning accuracy by 70.6% and 28.3%. These findings verify that EDEAD optimizes computational efficiency while maintaining high robustness. |
| format | Article |
| id | doaj-art-232c8a152ed74b57a7217be9c107d91f |
| institution | Kabale University |
| issn | 1000-436X |
| language | zho |
| publishDate | 2025-01-01 |
| publisher | Editorial Department of Journal on Communications |
| record_format | Article |
| series | Tongxin xuebao |
| spelling | doaj-art-232c8a152ed74b57a7217be9c107d91f2025-08-23T19:00:09ZzhoEditorial Department of Journal on CommunicationsTongxin xuebao1000-436X2025-01-01114123248223High-robustness integrated adversarial training method for fingerprint-based indoor localization systemsZHANG XuejunLI MeiCHEN HuiWANG GuohuaIn response to the vulnerability of fingerprint-based indoor positioning models to adversarial sample attacks, as well as the high resource overhead and limited generalization ability of traditional adversarial training, an ensemble adversarial defense method based on data augmentation and distillation, named EDEAD, was proposed. In EDEAD, the data distillation technique was employed to improve the quality of the augmented data and the early stopping algorithm was used to save training costs. Additionally, a coherence gradient alignment loss term was introduced to enhance adversarial response consistency among sub-models while maintaining inter-model diversity. This effectively reduced the transferability of adversarial samples among different positioning models and enhanced the robustness and generalization of the entire indoor positioning system. Experimental results show that under strong black-box attacks, comparing to the traditional high-robustness ensemble strategies GAL and DVERGE, EDEAD reduces time overhead by 30.6% and 26.1%, respectively, while improving positioning accuracy by 70.6% and 28.3%. These findings verify that EDEAD optimizes computational efficiency while maintaining high robustness.http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2025138/indoor localizationensemble adversarial trainingblack-box attackrobustness |
| spellingShingle | ZHANG Xuejun LI Mei CHEN Hui WANG Guohua High-robustness integrated adversarial training method for fingerprint-based indoor localization systems Tongxin xuebao indoor localization ensemble adversarial training black-box attack robustness |
| title | High-robustness integrated adversarial training method for fingerprint-based indoor localization systems |
| title_full | High-robustness integrated adversarial training method for fingerprint-based indoor localization systems |
| title_fullStr | High-robustness integrated adversarial training method for fingerprint-based indoor localization systems |
| title_full_unstemmed | High-robustness integrated adversarial training method for fingerprint-based indoor localization systems |
| title_short | High-robustness integrated adversarial training method for fingerprint-based indoor localization systems |
| title_sort | high robustness integrated adversarial training method for fingerprint based indoor localization systems |
| topic | indoor localization ensemble adversarial training black-box attack robustness |
| url | http://www.joconline.com.cn/zh/article/doi/10.11959/j.issn.1000-436x.2025138/ |
| work_keys_str_mv | AT zhangxuejun highrobustnessintegratedadversarialtrainingmethodforfingerprintbasedindoorlocalizationsystems AT limei highrobustnessintegratedadversarialtrainingmethodforfingerprintbasedindoorlocalizationsystems AT chenhui highrobustnessintegratedadversarialtrainingmethodforfingerprintbasedindoorlocalizationsystems AT wangguohua highrobustnessintegratedadversarialtrainingmethodforfingerprintbasedindoorlocalizationsystems |