# SignDeepSC: A Semantic Signature-based Approach for Robust Semantic Communication

arXiv: https://arxiv.org/abs/2607.25676 · HTML: https://mlsanity.com/paper/2607.25676/

## Key facts

- Cited by 2 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 28 Jul 2026.

## Built on by (most cited first, 2 of 2)

- [Privacy-Preserving Deep Joint Source-Channel Coding with In-Loop Concept Erasure](https://mlsanity.com/paper/2609.13393/) (2026)
- [Channel-Adaptive Region Adjacency Graph Carriers for Semantic Image Communication](https://mlsanity.com/paper/2609.14616/) (2026)

## Abstract (arXiv)

Semantic communication systems such as deep semantic communication (DeepSC) offer high efficiency but are vulnerable to adversarial attacks on their underlying neural networks. We address a physical-layer man-in-the-middle (MitM) threat in which an adversary injects perturbations into the transmitted signal to distort its meaning. We propose SignDeepSC, an architectural defense that achieves adversarial robustness without requiring explicit adversarial example generation during training. The approach is built on a perceiver-inspired semantic signature, a compact vector summary of the source features transmitted over a separate low-rate auxiliary channel. This signature is used by a self-repairing decoder that leverages cross-attention to correct distortions and can additionally drive a scrambler that shuffles the feature layout. We evaluate SignDeepSC over Rayleigh fading and additive white Gaussian noise channels under both single-step fast gradient sign method (FGSM) and iterative projected gradient descent (PGD) attacks. Under PGD (ε = 0.7), at 12~dB signal-to-noise ratio with Rayleigh fading, SignDeepSC achieves a bilingual evaluation understudy (BLEU-4) score of 0.237 and bidirectional encoder representations from transformers (BERT) sentence similarity of 0.646, outperforming all baselines without degrading clean-channel performance, when the signature channel is well protected.