A Hybrid Jamming Detection Algorithm for Wireless Communications: Simultaneous Classification of Known Attacks and Detection of Unknown Attacks

Abstract

In this letter, we propose a novel machine learning based jamming detection algorithm that can classify known attacks used for training and detect unknown attacks not used for training. The proposed algorithm has a hybrid structure of simple classification and anomaly detection models, which are decision tree (DT) and isolation forest (IF), respectively. After a test data passes through a DT that only classifies the data as normal or one of the known attacks, it enters an IF algorithm that determines if the DT's decision is indeed correct. Furthermore, an ensemble method is applied to reduce the deviation. The proposed algorithm is evaluated on real datasets from wireless modems operating in the C-band under static and mobile environments with a total of four types of jamming attacks. For the simultaneous classification and detection task, the proposed algorithm is shown to achieve superior performance over a baseline algorithm for all the cases of jamming distances, the number of known jamming attacks, and mobility scenarios.