Adversarial Machine Learning Threat Analysis and Remediation in Open Radio Access Network (O-RAN)

arXiv 2201.06093 ↗First posted 16 Jan 2022cs.CR cs.LGcited by 3

Not on the map. Why?

Abstract (arXiv)

O-RAN is a new, open, adaptive, and intelligent RAN architecture. Motivated by the success of artificial intelligence in other domains, O-RAN strives to leverage machine learning (ML) to automatically and efficiently manage network resources in diverse use cases such as traffic steering, quality of experience prediction, and anomaly detection. Unfortunately, it has been shown that ML-based systems are vulnerable to an attack technique referred to as adversarial machine learning (AML). This special kind of attack has already been demonstrated in recent studies and in multiple domains. In this paper, we present a systematic AML threat analysis for O-RAN. We start by reviewing relevant ML use cases and analyzing the different ML workflow deployment scenarios in O-RAN. Then, we define the threat model, identifying potential adversaries, enumerating their adversarial capabilities, and analyzing their main goals. Next, we explore the various AML threats associated with O-RAN and review a large number of attacks that can be performed to realize these threats and demonstrate an AML attack on a traffic steering model. In addition, we analyze and propose various AML countermeasures for mitigating the identified threats. Finally, based on the identified AML threats and countermeasures, we present a methodology and a tool for performing risk assessment for AML attacks for a specific ML use case in O-RAN.

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 63 of its 123 references that are in the map. First posted on arXiv 16 Jan 2022.

Builds on

63 of 123 references.

References · 63

2015Distilling the Knowledge in a Neural Networkcited by 10,076
2014Explaining and Harnessing Adversarial Examplescited by 7,287
2013Intriguing properties of neural networkscited by 5,114
2016Towards Evaluating the Robustness of Neural Networkscited by 2,976
2016Deep Learning with Differential Privacycited by 2,682
2019RandAugment: Practical automated data augmentation with a reduced search spacecited by 2,261
2016Membership Inference Attacks against Machine Learning Modelscited by 2,221
2020The Many Faces of Robustness: A Critical Analysis of Out-of-Distribution Generalizationcited by 1,842
2016Adversarial examples in the physical worldcited by 1,762
2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,442
2018Obfuscated Gradients Give a False Sense of Security: Circumventing Defenses to Adversarial Examplescited by 1,259
2017BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chaincited by 1,052

38 more

2016Practical Black-Box Attacks against Machine Learningcited by 893
2018AutoAugment: Learning Augmentation Policies from Datacited by 728
2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 656
2017Adversarial Examples Are Not Easily Detected: Bypassing Ten Detection Methodscited by 542
2018Poison Frogs! Targeted Clean-Label Poisoning Attacks on Neural Networkscited by 500
2017Feature Squeezing: Detecting Adversarial Examples in Deep Neural Networkscited by 484
2016Transferability in Machine Learning: from Phenomena to Black-Box Attacks using Adversarial Samplescited by 439
2017Mitigating Adversarial Effects Through Randomizationcited by 382
2020Label-Only Membership Inference Attackscited by 371
2018Defense-GAN: Protecting Classifiers Against Adversarial Attacks Using Generative Modelscited by 362
2018Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooringcited by 334
2019HopSkipJumpAttack: A Query-Efficient Decision-Based Attackcited by 328
2018Feature Denoising for Improving Adversarial Robustnesscited by 312
2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 276
2018Audio Adversarial Examples: Targeted Attacks on Speech-to-Textcited by 268
2019Simple Black-box Adversarial Attackscited by 249
2021Improving Robustness using Generated Datacited by 233
2018Manipulating Machine Learning: Poisoning Attacks and Countermeasures for Regression Learningcited by 219
2020Information Leakage in Embedding Modelscited by 199
2017Towards Poisoning of Deep Learning Algorithms with Back-gradient Optimizationcited by 188
2017Machine Learning Models that Remember Too Muchcited by 165
2018ShapeShifter: Robust Physical Adversarial Attack on Faster R-CNN Object Detectorcited by 159
2018PRADA: Protecting against DNN Model Stealing Attackscited by 159
2017EAD: Elastic-Net Attacks to Deep Neural Networks via Adversarial Examplescited by 154
2022Reconstructing Training Data with Informed Adversariescited by 143
2013Hacking Smart Machines with Smarter Ones: How to Extract Meaningful Data from Machine Learning Classifierscited by 128
2019Imperceptible, Robust, and Targeted Adversarial Examples for Automatic Speech Recognitioncited by 123
2017Adversarial Frontier Stitching for Remote Neural Network Watermarkingcited by 110
2020Sponge Examples: Energy-Latency Attacks on Neural Networkscited by 108
2018A generic framework for privacy preserving deep learningcited by 103
2017Deceiving Google's Perspective API Built for Detecting Toxic Commentscited by 99
2019Wasserstein Adversarial Examples via Projected Sinkhorn Iterationscited by 89
2018Exploring Connections Between Active Learning and Model Extractioncited by 84
2018Copycat CNN: Stealing Knowledge by Persuading Confession with Random Non-Labeled Datacited by 69
2019Bypassing Backdoor Detection Algorithms in Deep Learningcited by 69
2014Differential Privacy and Machine Learning: a Survey and Reviewcited by 66
2017Efficient Defenses Against Adversarial Attackscited by 53

50 most cited of 63 All 63 (JSON)

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2025: 1; 2026: 2.

3 papers.