In this paper, we consider a physical layer security (PLS) problem for a hybrid wiretapping wireless system in millimeter-wave transmission, where the active eavesdropper and passive eavesdropper (Eve) may coexist to intercept the confidential messages and emit jamming signals. To achieve secure and reliable transmission, we propose a switched phased-array directional modulation (DM) scheme that employs multi-beam symbol-level precoding with aided artificial noise (AN) technique at the transmitter, and array reception at legitimate users (LU). Here we consider a more practical case that the information of the eavesdropper (Eve) is unknown by the transmitter. Leveraging DM beamforming, we aim to minimize transmit message power by optimizing the beamforming vector, subject to prescribed symbol-level constraints, thus generating exact/relaxed phases at LU. The remaining transmit power can be utilized to generate AN. Additionally, by means of the minimum variance distortionless response method at the LU, the jamming caused by active Eve can be efficiently eliminated. Simulation results demonstrate the superiority of the proposed scheme.
In this paper, we consider a physical layer security (PLS) problem for a hybrid wiretapping wireless system in millimeter-wave transmission, where the active eavesdropper and passive eavesdropper (Eve) may coexist to intercept the confidential messages and emit jamming signals. To achieve secure and reliable transmission, we propose a switched phased-array directional modulation (DM) scheme that employs multi-beam symbol-level precoding with aided artificial noise (AN) technique at the transmitter, and array reception at legitimate users (LU). Here we consider a more practical case that the information of the eavesdropper (Eve) is unknown by the transmitter. Leveraging DM beamforming, we aim to minimize transmit message power by optimizing the beamforming vector, subject to prescribed symbol-level constraints, thus generating exact/relaxed phases at LU. The remaining transmit power can be utilized to generate AN. Additionally, by means of the minimum variance distortionless response method at the LU, the jamming caused by active Eve can be efficiently eliminated. Simulation results demonstrate the superiority of the proposed scheme.
This paper introduces a multi-beam secure communication scheme for hybrid near-field and far-field (hNF) scenarios, primarily designed to address the challenges faced by sixth-generation (6G) networks in simultaneously managing near-field and far-field communications. This method significantly reduces the signal quality at eavesdroppers(Eves) while ensuring high-quality reception for legitimate users, effectively enhancing communication security. At the transmitter, this study employs multi-beam symbol-level directional modulation to ensure secure and reliable transmission in a mixed eavesdropping environment. Given the uncertainty about eavesdropper information, the transmission beamforming vectors are specially designed to meet specific symbol-level constraints, thereby ensuring effective reception for legitimate users. Experimental and simulation results demonstrate the effectiveness of our approach in improving secrecy performance, reducing transmission power, and enhancing energy efficiency, offering a practical solution to the security challenges faced by future wireless networks.
Achieving secure transmission in wireless network is a significantly important research topic. Classic cryptography encrypts a confidential message to an unreadable cipher message. Thus only the authentic receiver with correct secrecy key is able to decrypt the message. However, with the growing computational capability of adversaries, the requirement of secrecy key generation and distribution is getting stringent. Another method to achieve wireless security, which has attracted much attention in recent years, is through physical layer processing, named physical layer security. In a typical wiretap channel model consisting of a transmitter, a legal receiver and an adversary (illegal receiver), early works have proven that it is possible to achieve positive secrecy rate using multiple antenna techniques, such as beamforming, at the transmitter. In this thesis, we focus on two types of malicious behaviors of the adversary: passive eavesdropping and active attack. For the passive eavesdropping, we first consider the multi-input-single-output (MISO) wiretap channel, in which the legitimate transmitter utilizes the artificial noise aided precoding strategy to maximize the achievable secrecy rate of the channel. Both scenarios of known and unknown channel state information (CSI) for the eavesdropper channels are considered. By deriving the closed-form expression of ergodic secrecy rate, we prove that there exists an optimal power ratio between the information signal and the artificial noise. We then extend our study to a four-node fading channel model in a wireless relay network, which includes two single-antenna users, one single-antenna eavesdropper and one relay node equipped with multiple antennas. By studying the decode-and-forward (DF) scheme, cooperative jamming (CJ) scheme and one proposed hybrid relay scheme, relay-and-jamming (RJ), we aims to find the optimal relay scheme with the condition that the transmitter and the relay node are under individual power constraints and the CSI of the illegitimate channel is only statistically known. Our analysis shows that the hybrid RJ scheme is optimal when the transmitter has a relatively small power budget and/or the transmitter is far away from the intended receiver. Besides the passive eavesdropping, the adversary could also choose the active attack. The pilot spoofing attack is one active attack conducted by the adversary during the channel estimation phase of the legitimate transmission. In practical systems, the pilot signals are usually known \textit{a priori} and repeatedly used information. In this attack, an intelligent adversary spoofs the transmitter on the estimation of CSI by sending the identical pilot signal as the legitimate receiver. By doing so, the adversary could obtain a larger channel rate in the data transmission phase, and also drastically weaken the strength of the received signal at the legitimate receiver if the adversary utilizes large enough power. Due to the serious consequences caused by such an attack, we first propose an energy ratio detector (ERD) that explores the asymmetry of received signal power levels at the transmitter and the legitimate receiver when the attack occurs. Our analysis shows that the ERD could provide very high probability of detection with certain requirement on the false alarming probability. Furthermore, we design a two-way training based scheme to provide not only attack detection but also secure transmission. The two-way training based detector (TWTD) exploits the intrusive component created by the adversary, followed by a secure beamforming-assisted data transmission. In addition to the good detection performance, our scheme could estimate both legitimate and illegitimate channels, with which the beamforming could be designed for data transmission.
Transmit beamforming and artificial noise-based methods have been widely employed to achieve physical-layer (PHY) security. However, these approaches may fail to provide satisfactory secure performance if the channels of legitimate user (LU) and eavesdropper (Eve) are highly correlated, which usually occurs in the case of close-located LU and Eve. The goal of this paper is to address the PHY security problem for proximal LU and Eve in millimeter-wave transmissions. To this end, we propose a novel frequency diverse array (FDA) beamforming approach, which intentionally introduces some frequency offsets across array antennas to decouple the highly correlated channels of LU and Eve. By exploiting this decoupling capability, the FDA beamforming can degrade Eve's reception and thus enhance PHY security. Leveraging FDA beamforming, we aim to maximize the secrecy rate by jointly optimizing the frequency offsets and the transmit beamformer. This secrecy rate maximization problem is difficult due to the tightly coupled variables. However, we show that it can be reformulated into a form only depending on the frequency offsets. Building upon this reformulation, we further employ the block successive upper-bound minimization method to iteratively obtain a solution with stationary convergence guarantee. Numerical results demonstrate that FDA beamforming can provide higher secrecy rate than conventional beamforming, especially for proximal LU and Eve.
This paper considers the physical layer security (PLS) and covertness of the signal transmission in a multiple-input single-output downlink adopting ultra-high reliability and low latency communication (URLLC). In the considered system, Alice transmits confidential signals to Bob in the presence of a multi-antenna eavesdropper (Eve) and a multi-antenna watchful adversary (Willie). Although artificial noise (AN) is a common PLS technique for protecting the confidential signal from wiretapping, it may reduce the communication covertness due to the additional signal emission. For maximizing the achievable secrecy rate, we propose an AN-aided secure and covert communication strategy through optimizing the information carrying beamformer and AN jointly subject to the covertness constraint. To tackle the formulated non-convex design problem, we propose a branch-reduce-and-bound (BRB)-based algorithm to solve the considered problem globally. Simulation results validate its efficiency compared with a benchmark algorithm and unveil the importance of exploiting AN.
Traditional approaches for providing confidentiality of wirelessly transmitted signals are often based on cryptographic techniques. While these techniques ensure that messages are encrypted and secured against eavesdropping, they are not sufficient to protect important transmission attributes at the physical (PHY) layer. Specifically, several elds in the headers of PHY and medium access control (MAC) frames are typically sent unencrypted to maintain proper protocol functionality (e.g., sender/receiver identification). As a result, they leak side-channel information (SCI), including payload size, frequency and phase oset, modulation and coding scheme, identities of communication nodes, frame type, transmission rate, etc. These SCI can be exploited by an adversary to launch various passive (eavesdropping) and active (jamming) attacks. To complement cryptographic techniques used at upper layers and prevent the leakage of SCI at the PHY/MAC layers, PHY-layer security techniques have been introduced. These techniques exploit the characteristics of the wireless channel along with multiple-input multiple-output (MIMO) technologies, in which multiple transmitting and receiving antennas are utilized to prevent information leakage to eavesdroppers and/or avoid jamming attacks. In particular, if the signal-to-interference-plus-noise ratio (SINR) at an adversary is lower than the one at a legitimate receiver, secure communication can be achieved through the so-called wiretap coding. MIMO systems enable the transmitter and/or the receiver to generate artificial noise, called friendly jamming (FJ), so as to reduce the SINR at the adversary without impacting the SINR at the legitimate receiver. In this dissertation, we focus on exploring the security threats to next-generation wireless systems. We develop MIMO-based PHY-layer security methods to achieve reliable and secret communications in these systems. First, we consider a broadcast channel, in which a multi-antenna transmitter (Alice) sends K confidential information signals to K legitimate receivers (Bobs) in the presence of L eavesdropping devices (Eves). Alice uses MIMO precoding to generate the information signals along with her own Tx-based friendly jamming (TxFJ). Interference at each Bob is removed via a technique called MIMO zero-forcing. This TxFJ, however, leaves an eavesdropping \vulnerability region" in the proximity of each Bob, which can be exploited by a nearby Eve. Specically, because of the high correlation in the channel state information (CSI) at a Bob and nearby Eves, the TxFJ becomes less effective in preventing eavesdropping at these Eves. We address this problem by augmenting TxFJ with receiver-based friendly jamming (RxFJ), generated by each Bob. Specifically, we allow each Bob to use self-interference suppression (SIS) techniques to transmit a friendly jamming signal while simultaneously receiving an information signal over the same channel. These SIS techniques exploit circulators to attenuate the self-interference power of RxFJ at Bobs and utilize analog/digital cancellation methods to clean out any remaining residual self-interference. Considering the resulting broadcast channel, we rst study a two-user scenario and develop a secrecy encoding scheme for constructing the signals intended to two Bobs. We characterize the corresponding achievable secrecy sum-rate and formulate an optimization problem to maximize this metric. We then extend our approach to K-user scenarios and study a power minimization problem. Particularly, in our analysis we minimize the powers allocated to information and friendly jamming signals (both TxFJ and RxFJ) while guaranteeing individual secrecy rates for various Bobs. The problem is solved for the cases when the eavesdropper's CSI (ECSI) is known or unknown (but with a known distribution). Simulations show the effectiveness of the proposed solutions. Furthermore, we discuss how to schedule transmissions when the rate requirements need to be satised on average rather than instantaneously. In low and high power regime, a scheduling algorithm that serves only the strongest receivers is shown to outperform the one that schedules all receivers. Next, we consider a single-cell massive MIMO system in which a base station (BS) with a large number of antennas transmits simultaneously to several single antenna users. The BS acquires the CSI for various receivers using uplink pilot transmissions. We demonstrate the vulnerability of the CSI estimation process to a pilot-contamination (PC) attack that aims at minimizing the sum-rate of downlink transmissions by contaminating uplink pilots. We rst study PC attacks for two downlink power allocation strategies under the assumption that the attacker knows the locations of the BS and its users. Later on, we relax this assumption and consider the case when such knowledge is probabilistic. The formulated problems are solved using stochastic optimization, Lagrangian minimization, and game-theoretic methods. A closed-form solution for a special case of the problem is obtained. Furthermore, we analyze the \achievable individual secrecy rates" under PC attacks, and provide an upper-bound on these rates. We also study this scenario without a priori knowledge of user locations at the attacker by introducing chance constraints. Another attack model is considered, where the attacker generates jamming signals in both the CSI estimation and data transmission phases by exploiting inband full-duplex techniques. Our results indicate that such attacks can degrade the throughput of a massive MIMO system by more than 50%, and reduce fairness among users significantly.
For physical layer security with multiple antennas over wireless channels, we consider an artificial noise-aided secure beamforming system. A transmitter can send the confidential information to the legitimate user more securely without eavesdropping when an artificial jamming signal interfering eavesdroppers is transmitted with the confidential information signal. The transmitter splits its transmit power for both the information and jamming signals with a power splitting factor. Under such a system model, we investigate the impacts on secrecy performance of a power splitting factor, the numbers of antennas and eavesdroppers, and noise variance at the legitimate receivers and eavesdroppers by analyzing the expected secrecy rate. The optimal power splitting factor and limiting secrecy rate with large number of antennas are also derived. Moreover, we examine the expected secrecy rate loss caused by channel variation over time. It is shown that the secrecy rate loss is independent of system parameters like a power splitting factor, the numbers of antennas and eavesdroppers in a high signal to interference plus noise ratio (SINR) region. In a low SINR region, on the other hand, the secrecy rate loss changes with system parameters. Simulation results verify these observations on ergodic secrecy rate and its loss due to time-varying channels.