Physical Layer Anomaly Detection via Adaptive Gaussian Mixture Model
Organizations: ETIS UMR 8051, CY Cergy Paris Université, ENSEA, CNRS, Cergy, France · Barkhausen Institut, Dresden, Germany
Abstract
Physical-layer spoofing attacks pose a critical threat to wireless localization systems by manipulating channel state information (CSI). Detecting such attacks becomes particularly challenging when the attacker and the legitimate node are spatially proximate, as their CSI characteristics become increasingly similar. To address this challenge in indoor scenarios, we propose an adaptive Gaussian mixture model (GMM)-based detection framework that learns legitimate CSI patterns and detects spatial inconsistency through statistical anomaly detection. Using a massive multiple-input multiple-output (MIMO) experimental dataset with 64 uniform linear array (ULA) antenna and 5 mm spatial resolution, we evaluated our detector against CSI spoofing attacks with spatial displacements ranging from 50 mm to 450 mm. The adaptive GMM achieves 95-98% detection rate for displacements above 150 mm while maintaining 1% false alarm rate. We benchmark our approach against conventional GMM, local outlier factor (LOF), one-class support vector machine (SVM) and k-nearest neighbors (k-NN) classifiers, demonstrating overall superior detection performance of our proposed classifier.
Figures & tables
| Metric | Uncalibrated | Calibrated | ||
|---|---|---|---|---|
| Mean | Std | Mean | Std | |
| AoA ( ∘ ) | 22.74 | 14.95 | 1.27 | 0.84 |
| RSS (dBm) | 62.66 | 0.73 | 1.77 | 0.73 |
Unsupervised Anomaly Detection
Unsupervised anomaly detection finds unusual patterns without labeled examples of faults, attacks, defects, or other rare events.
See all 211 papers