A poisoning attack method for electromagnetic signal modulation type identification based on a pure label

A poisoning attack method for electromagnetic signal modulation type identification based on a pure label comprises the following steps: firstly, building an electromagnetic signal classification model, and enabling an electromagnetic signal data set to predict and identify a modulation type with high precision; adopting a pure label poisoning attack method, generating a poisoning sample by searching a sample similar to the feature space of the target sample; finally, using a forward and backward splitting iteration method for optimization, and after an optimal poisoning sample is generated, using transfer learning for retraining the classification network; finally, enabling the classification model to generate misclassification, so that a poisoning attack effect is achieved. According to the poisoning attack method for electromagnetic signal modulation type identification based on a pure label, the poisoning attack can be carried out under the condition that training data does not need to be known and only a