{"id":"https://openalex.org/W7160850095","doi":"https://doi.org/10.1109/tccn.2026.3692196","title":"Over-the-Air Backdoor Threats Against Pre-Trained Models for Automatic Modulation Recognition","display_name":"Over-the-Air Backdoor Threats Against Pre-Trained Models for Automatic Modulation Recognition","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7160850095","doi":"https://doi.org/10.1109/tccn.2026.3692196"},"language":null,"primary_location":{"id":"doi:10.1109/tccn.2026.3692196","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tccn.2026.3692196","pdf_url":null,"source":{"id":"https://openalex.org/S2484188435","display_name":"IEEE Transactions on Cognitive Communications and Networking","issn_l":"2332-7731","issn":["2332-7731","2372-2045"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cognitive Communications and Networking","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100874337","display_name":"Gan Xu","orcid":"https://orcid.org/0009-0008-5818-7038"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xu Gan","raw_affiliation_strings":["College of Electronic Engineering, National University of Defense Technology, Hefei, China"],"raw_orcid":"https://orcid.org/0009-0008-5818-7038","affiliations":[{"raw_affiliation_string":"College of Electronic Engineering, National University of Defense Technology, Hefei, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135890642","display_name":"Hongjun Wang","orcid":"https://orcid.org/0000-0001-8295-0103"},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongjun Wang","raw_affiliation_strings":["College of Electronic Engineering, National University of Defense Technology, Hefei, China"],"raw_orcid":"https://orcid.org/0000-0001-6736-6566","affiliations":[{"raw_affiliation_string":"College of Electronic Engineering, National University of Defense Technology, Hefei, China","institution_ids":["https://openalex.org/I170215575"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135906610","display_name":"Xinhao Li","orcid":null},"institutions":[{"id":"https://openalex.org/I170215575","display_name":"National University of Defense Technology","ror":"https://ror.org/05d2yfz11","country_code":"CN","type":"education","lineage":["https://openalex.org/I170215575"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xinhao Li","raw_affiliation_strings":["College of Electronic Engineering, National University of Defense Technology, Hefei, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Electronic Engineering, National University of Defense Technology, Hefei, China","institution_ids":["https://openalex.org/I170215575"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I170215575"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.5691238,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"12","issue":null,"first_page":"8030","last_page":"8044"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12131","display_name":"Wireless Signal Modulation Classification","score":0.9804999828338623,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12131","display_name":"Wireless Signal Modulation Classification","score":0.9804999828338623,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.004100000020116568,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.862500011920929},{"id":"https://openalex.org/keywords/modulation","display_name":"Modulation (music)","score":0.37619999051094055},{"id":"https://openalex.org/keywords/frequency-modulation","display_name":"Frequency modulation","score":0.3228999972343445},{"id":"https://openalex.org/keywords/signal-processing","display_name":"Signal processing","score":0.31049999594688416},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.30230000615119934},{"id":"https://openalex.org/keywords/automatic-target-recognition","display_name":"Automatic target recognition","score":0.3018999993801117}],"concepts":[{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.862500011920929},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8331000208854675},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3937000036239624},{"id":"https://openalex.org/C123079801","wikidata":"https://www.wikidata.org/wiki/Q750240","display_name":"Modulation (music)","level":2,"score":0.37619999051094055},{"id":"https://openalex.org/C28490314","wikidata":"https://www.wikidata.org/wiki/Q189436","display_name":"Speech recognition","level":1,"score":0.32429999113082886},{"id":"https://openalex.org/C11930861","wikidata":"https://www.wikidata.org/wiki/Q181417","display_name":"Frequency modulation","level":3,"score":0.3228999972343445},{"id":"https://openalex.org/C104267543","wikidata":"https://www.wikidata.org/wiki/Q208163","display_name":"Signal processing","level":3,"score":0.31049999594688416},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.30230000615119934},{"id":"https://openalex.org/C117623542","wikidata":"https://www.wikidata.org/wiki/Q621974","display_name":"Automatic target recognition","level":3,"score":0.3018999993801117},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.2712000012397766},{"id":"https://openalex.org/C32022120","wikidata":"https://www.wikidata.org/wiki/Q797225","display_name":"Interference (communication)","level":3,"score":0.2676999866962433},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.2624000012874603},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tccn.2026.3692196","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tccn.2026.3692196","pdf_url":null,"source":{"id":"https://openalex.org/S2484188435","display_name":"IEEE Transactions on Cognitive Communications and Networking","issn_l":"2332-7731","issn":["2332-7731","2372-2045"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Cognitive Communications and Networking","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3348246166","display_name":"\u57fa\u4e8e\u591a\u91cd\u673a\u5668\u5b66\u4e60\u7684\u65e0\u7ebf\u901a\u4fe1\u7f51\u4fe1\u53f7\u6001\u52bf\u5168\u8986\u76d6\u611f\u77e5\u7b97\u6cd5\u7814\u7a76","funder_award_id":"61971473","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7701723719","display_name":"\u6df7\u5408\u6a21\u62df\u6570\u5b57\u7ed3\u6784\u7a7a\u95f4\u8c03\u5236\u65e0\u7ebf\u7f51\u7edc\u5b89\u5168\u4f20\u8f93\u7406\u8bba\u4e0e\u6280\u672f\u7814\u7a76","funder_award_id":"62071234","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Automatic":[0],"modulation":[1,112],"recognition":[2],"(AMR)":[3],"is":[4,123],"a":[5,111,139,153,180,207],"key":[6,119],"technology":[7],"for":[8,59,183,193],"intelligent":[9],"communications":[10],"and":[11,28,55,68,79,114,120,135,147,167,187],"spectrum":[12],"sharing":[13],"in":[14,37,107,206],"cognitive":[15],"radio":[16],"networks.":[17],"Existing":[18],"supervised":[19],"AMR":[20,45],"methods":[21],"typically":[22],"rely":[23],"on":[24,92,110],"massive":[25],"labeled":[26],"signals":[27,54,129],"struggle":[29],"to":[30,32,47,56,94,124,130,174],"generalize":[31],"unknown":[33],"classes.":[34],"Recent":[35],"advances":[36],"self-supervised":[38],"learning-based":[39],"large":[40],"language":[41],"models":[42,50],"have":[43],"inspired":[44],"researchers":[46],"develop":[48],"pre-trained":[49],"(PTMs)":[51],"from":[52],"unlabeled":[53],"deploy":[57],"PTMs":[58,71,93,106,151],"various":[60],"downstream":[61,89,227],"communication":[62,211],"tasks.":[63,228],"However,":[64],"open":[65],"wireless":[66,191,210],"propagation":[67],"publicly":[69],"available":[70],"can":[72,87],"introduce":[73],"potential":[74],"security":[75],"risks,":[76],"particularly":[77],"emerging":[78],"severe":[80],"backdoor":[81,97,103,148,204],"threats.":[82],"To":[83],"reveal":[84],"how":[85],"attackers":[86],"induce":[88],"classifiers":[90],"built":[91],"inherit":[95],"malicious":[96,194],"behaviors,":[98],"we":[99,178,198],"explore":[100],"the":[101,133,162,189,200],"first":[102,201],"attack":[104,205,215],"against":[105],"AMR,":[108],"focusing":[109],"class-agnostic":[113],"data-free":[115],"practical":[116],"scenario.":[117],"Our":[118],"novel":[121],"idea":[122],"decouple":[125],"latent":[126],"representations":[127],"of":[128,164,226],"implicitly":[131],"bridge":[132],"trigger":[134,145,184,195],"target":[136,141],"class":[137],"through":[138],"proxy":[140],"prototype.":[142],"We":[143,160],"formalize":[144],"generation":[146],"implantation":[149],"into":[150],"as":[152],"joint":[154],"optimization":[155],"problem":[156,166],"with":[157],"dual-level":[158],"constraints.":[159],"prove":[161],"non-convexity":[163],"this":[165],"derive":[168],"an":[169,214],"iterative":[170],"projection":[171],"descent":[172],"method":[173],"solve":[175],"it.":[176],"Meanwhile,":[177],"propose":[179],"random":[181],"design":[182],"embedding":[185],"positions":[186],"model":[188],"dynamic":[190],"channel":[192],"propagation.":[196],"Furthermore,":[197],"implement":[199],"real-world":[202],"over-the-air":[203],"non-line-of-sight":[208],"(NLoS)":[209],"scenario,":[212],"achieving":[213],"success":[216],"rate":[217],"that":[218],"exceeds":[219],"86%":[220],"despite":[221],"lacking":[222],"any":[223],"prior":[224],"knowledge":[225]},"counts_by_year":[],"updated_date":"2026-05-16T06:04:12.930555","created_date":"2026-05-12T00:00:00"}