The invention relates to a black-box
signal anti-
attack method and device based on spectrum characteristics, and the method comprises the steps: S1, carrying out the preprocessing of an input IQ
signal, converting a
time domain signal into a
frequency domain characteristic through
Fourier transform, calculating an optimal
frequency band according to the length of the input signal, and uniformly dividing the signal into a plurality of frequency bands; s2, performing
nonlinear transformation on the spectrum features by using an adaptive spectrum disturbance generator, extracting key feature representation in the spectrum, and constructing
frequency domain disturbance through the extracted amplitude and phase parameters; s3, performing
time domain reconstruction on the
frequency domain disturbance by using inverse
Fourier transform, and superposing original signals to generate a target confrontation sample; s4, designing a
loss function according to the
attack effect, gradient guidance and disturbance constraint to optimize a spectrum disturbance generator; and S5, selecting a sensitive
frequency band based on a dynamic
mask mechanism, and iteratively optimizing
countermeasure disturbance based on the selected
frequency band. And when the query resources are consumed up, returning a final confrontation sample. The method only depends on input and output of a model, a self-adaptive spectrum disturbance generator and a dynamic
mask mechanism are used for dynamically updating frequency domain confrontation disturbance, the frequency domain confrontation disturbance is converted into a
time domain through inverse
Fourier transform, and finally a confrontation sample with higher concealment is generated.