arXiv AI

FLINT: Fingerprinting Federated Learning Architectures from 5G PHY-Layer Side Channels

arXiv:2607. 15469v1 Announce Type: cross Abstract: Federated Learning (FL) over 5G cellular networks protects raw data but remains vulnerable to side-channel leakage.

Hugging Face Trending Papers
Jul 16

FLINT: Fingerprinting Federated Learning Architectures from 5G PHY-Layer Side Channels

Federated Learning (FL) over 5G cellular networks protects raw data but remains vulnerable to side-channel leakage. Prior fingerprinting attacks assume packet-level network visibility, an assumption that does not hold at the 5G Physical (PHY) layer, where user payloads are encrypted and Radio Network Temporary Identifiers (RNTIs) may change over time.

arXiv AI
Sep 11

Adaptive Distributed Physical-Layer Authentication and Attack Detection in 6G Non-Terrestrial Networks via Causal Meta-Learning

The paper introduces SAFA-MZ, a secure adaptive framework for physical‑layer authentication in non‑terrestrial networks. It fuses multiple spatial, angular, combiner, subspace, and Doppler‑delay features into a distributed fingerprint and employs a causal meta‑learning strategy with invariant risk minimization to adapt quickly to new environments. A two‑stage authentication process combines local recognition with selective TDOA localization using a graph attention network, reducing backhaul overhead while achieving 92% accuracy and 96% AUC in simulations.

By Parsa Rajabi, Mohammad Reza Abedi, Nader Mokari, Paeiz Azmi, Halim Yanikomeroglu
arXiv AI
Aug 19

Learnware for CSI Feedback: Scene-specific Small Models Can Do Big

The paper proposes a Learnware-based framework for deploying scene‑specific CSI feedback models in 6G systems. A centralized AI data center maintains a catalog of pre‑trained models, each tagged with semantic and statistical specifications. Base stations retrieve the most relevant model using only statistical fingerprints, which reduces data privacy risks, lowers retrieval latency, and cuts fine‑tuning effort, achieving up to 57.7% performance gains over a general model.

By Xiangyi Li, Jiajia Guo, Chao-Kai Wen, Xin Geng, Shi Jin, Zhi-Hua Zhou
arXiv Machine Learning
Sep 16

Channel-Informed Neural Network for Physical Layer Key Generation

The paper presents a channel-informed neural network for physical-layer key generation (PKG) that extracts binary key features directly from IQ measurements while grounding the representation in the multipath channel. The multi-task recurrent network jointly learns reciprocity-preserving features and an auxiliary channel estimate, using deep metric learning and channel-informed supervision. Experiments on indoor and outdoor software-defined-radio data show lower bit disagreement for legitimate users, improved key diversity with ray-traced augmentation, and successful NIST randomness tests after SHA-3 privacy amplification.

By Jose Angel Sanchez Viloria, George Sklivanitis, Dimitris Pados, Elizabeth Serena Bentley
arXiv Machine Learning
Aug 18

6G Native AI and Channel Foundation Models

arXiv:2608. 14591v1 Announce Type: cross Abstract: The integration of artificial intelligence (AI) and wireless communications is widely regarded as a core objective of sixth-generation (6G) systems.

By Shugong Xu, Jun Jiang, Yuan Gao
arXiv AI
Jul 14

JEPA for AI-Native 6G: Predictive Representations and Open Challenges

arXiv:2607. 09798v1 Announce Type: cross Abstract: Sixth-generation (6G) networks are moving toward AI-native operation, where learning modules are embedded across the radio access network (RAN), edge, and core.

By Sheikh Salman Hassan, Irshad A. Meer, Almoatssimbillah Saifaldawla, Yan Kyaw Tun, Mustafa Ozger, Madyan Alsenwi, Nguyen Van Huynh, Woong-Hee Lee, Cedomir Stefanovic, Mathini Sellathurai, Henk Wymeersch, Tharmalingam Ratnarajah
arXiv Machine Learning
Sep 4

Privacy Leakage in Federated Learning: Gradient-Based Client Identity Inference and Defenses for Inertial Sensing in Vehicular Edge Networks

The paper investigates how federated learning (FL) updates in vehicular edge networks can reveal client identities through gradient-based attacks on inertial sensor data, using the UCI Human Activity Recognition benchmark as a proxy. Experiments show that an honest-but-curious server can identify clients with near-perfect accuracy from unprotected updates. The authors evaluate lightweight defenses—clipping followed by Gaussian noise and ensemble FL—to mitigate this privacy risk while preserving model utility, reporting differential‑privacy budgets and empirical results across multiple attack classifiers and data partitions.

By Ali Akarma (Islamic University of Madinah, Madinah, Saudi Arabia, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia), Toqeer Ali Syed (Islamic University of Madinah, Madinah, Saudi Arabia), Muhammad Khan (University of the West of England, Bristol, U.K), Qurat-ul-ain Mastoi (University of the West of England, Bristol, U.K), Adeel Ahmad (Islamic University of Madinah, Madinah, Saudi Arabia)