On Identifying Adversarial Intent Injection in AI-Native 6G Networks
Dual-path CNN and AutoEncoder framework detects adversarial intent injection in AI-native 6G networks, reaching 0.97 accuracy and 0.98 F1.
The paper defines a fine-grained threat model for adversarial intent injection in AI-native 6G intent-based networking, where malicious policies are disguised within benign intent flows. It evaluates four injection strategies: stealth-mode, random distribution, increasing frequency, and decreasing frequency. A dual-path detection framework combines a CNN using TF-IDF features for supervised detection with an AutoEncoder trained only on benign data for one-class detection, reaching 0.97 accuracy and 0.98 F1-score, roughly 9% and 36% gains over the state-of-the-art baseline.
- Threat model covers stealth, random, and frequency-varying intent injection strategies
- CNN with TF-IDF handles supervised detection; AutoEncoder covers one-class detection
- 0.97 accuracy and 0.98 F1 exceed state-of-the-art baseline
Full article155 words · extracted from arxiv.org · click to collapse
AI-native 6G networks have brought Intent-Based Networking (IBN) to the forefront, enabling high-level goals to be translated into network configurations. However, this abstraction opens new attack surfaces, primarily adversarial intent injection, where malicious policies are disguised within benign intent flows. The detection of attack instances might become significantly more difficult if the adversaries adopt a stealthy mode of malicious intent injection. With all these in mind, we first define a fine-grained threat model that facilitates the threat of malicious intent injection in an AI-native network. Alongside, we investigate four malicious intent injection strategies$-$ stealth-mode, random distribution, increasing frequency, and decreasing frequency- and propose a dual-path detection framework: (i) a CNN using TF-IDF features for supervised malicious intent detection, and (ii) an AutoEncoder trained exclusively on benign data for one-class malicious intent detection. Our evaluation demonstrates strong detection performance, with accuracy improving to 0.97 (~9\% gain) and F1-score to 0.98 (~36\% gain) over the state-of-the-art baseline.
Text extracted automatically; images, tables and formatting may be missing. Original: https://arxiv.org/abs/2609.12144