Privacy-Preserving Semantic Communications via Multi-Task Learning and Adversarial Perturbations
This addresses privacy concerns in next-generation wireless semantic communication systems against adaptive eavesdroppers, representing an incremental improvement over existing security approaches.
The paper tackles the problem of semantic communications leaking sensitive information to eavesdroppers by proposing a deep learning framework that jointly supports multiple receiver tasks while limiting semantic leakage. The result shows that the min-max mechanism significantly reduces the eavesdropper's inference performance without degrading the legitimate receiver, and the perturbation layer successfully reduces semantic leakage even when trained only for the legitimate task.
Semantic communications conveys task-relevant meaning rather than focusing solely on message reconstruction, improving bandwidth efficiency and robustness for next-generation wireless systems. However, learned semantic representations can still leak sensitive information to unintended receivers (eavesdroppers). This paper presents a deep learning-based semantic communication framework that jointly supports multiple receiver tasks while explicitly limiting semantic leakage to an eavesdropper. The legitimate link employs a learned encoder at the transmitter, while the receiver trains decoders for semantic inference and data reconstruction. The security problem is formulated via an iterative min-max optimization in which an eavesdropper is trained to improve its semantic inference, while the legitimate transmitter-receiver pair is trained to preserve task performance while reducing the eavesdropper's success. We also introduce an auxiliary layer that superimposes a cooperative, adversarially crafted perturbation on the transmitted waveform to degrade semantic leakage to an eavesdropper. Performance is evaluated over Rayleigh fading channels with additive white Gaussian noise using MNIST and CIFAR-10 datasets. Semantic accuracy and reconstruction quality improve with increasing latent dimension, while the min-max mechanism reduces the eavesdropper's inference performance significantly without degrading the legitimate receiver. The perturbation layer is successful in reducing semantic leakage even when the legitimate link is trained only for its own task. This comprehensive framework motivates semantic communication designs with tunable, end-to-end privacy against adaptive adversaries in realistic wireless settings.