Semantic Leakage and Privacy Preservation in Relay-Assisted Semantic Communications
Score
55Why selected
The problem is highly original, the method is clear and effective, experiments cover various channel conditions, and results have significant practical value, though multi-hop or more complex topologies are not addressed.
AI commentary
「This study systematically reveals for the first time the privacy leakage risk posed by relay nodes in semantic communications and provides a practical defense without sacrificing communication efficiency, offering critical guidance for designing secure semantic communication systems.」
Quick overview
Semantic communication prioritizes task-relevant information for efficiency, but relay nodes introduce privacy risks: a relay can reliably infer semantics and reconstruct signals without accessing source data. This paper proposes an iterative adversarial training framework that accounts for a strong adaptive eavesdropper at the relay, optimizing representations to preserve high decoding performance at the intended receiver while degrading semantic inference at the relay. The approach significantly widens the semantic accuracy gap between legitimate receiver and eavesdropper across various channel conditions, achieving protection stealthily without compromising reconstruction fidelity.
- A relay node can achieve semantic inference and signal reconstruction comparable to the legitimate receiver without access to source data, revealing fundamental privacy vulnerability of semantic representations.
- An iterative adversarial training framework is proposed, explicitly modeling a strong adaptive eavesdropper at the relay and alternating optimization between eavesdropping function and legitimate system.
- Learned representations preserve semantic decoding performance at the legitimate receiver while significantly degrading semantic inference at the relay, remaining robust across varying channel conditions.
- Protection is achieved in a stealthy manner: reconstruction fidelity is maintained while semantic leakage is selectively suppressed.
Full text
Computer Science > Networking and Internet Architecture
arXiv:2606.31973v1 (cs) [Submitted on 30 Jun 2026]Title:Semantic Leakage and Privacy Preservation in Relay-Assisted Semantic Communications
Authors:Yalin E. Sagduyu, Tugba Erpek, Aylin Yener, Sennur Ulukus View a PDF of the paper titled Semantic Leakage and Privacy Preservation in Relay-Assisted Semantic Communications, by Yalin E. Sagduyu and 3 other authors View PDF HTML (experimental)Abstract:Semantic communication (SemCom) has emerged as a promising paradigm in which the transmission of task-relevant information is prioritized over raw data, enabling efficient and robust communication under resource and channel constraints. In this paper, the privacy implications of relay-assisted SemCom systems are studied, where the intermediate relay node operates directly on learned latent representations. It is shown that the relay, even without access to source data, can reliably infer semantic meaning and reconstruct signals with performance comparable to that of the legitimate receiver, revealing a fundamental privacy vulnerability of semantic representations. To address this issue, an iterative adversarial training framework is proposed in which a strong, adaptively trained eavesdropper at the relay is explicitly accounted for. The proposed approach alternates between optimizing the relay's eavesdropping function and the legitimate system, resulting in representations that preserve semantic decoding performance at the intended receiver while degrading semantic inference at the relay. The semantic accuracy gap between the legitimate receiver and the eavesdropper is significantly enlarged across channel conditions. Importantly, this protection is achieved in a stealthy manner, with high reconstruction fidelity maintained while semantic leakage is selectively suppressed.
| Subjects: | Networking and Internet Architecture (cs.NI); Cryptography and Security (cs.CR); Information Theory (cs.IT); Machine Learning (cs.LG); Signal Processing (eess.SP) |
| Cite as: | arXiv:2606.31973 [cs.NI] |
| (or arXiv:2606.31973v1 [cs.NI] for this version) | |
| https://doi.org/10.48550/arXiv.2606.31973 Focus to learn more arXiv-issued DOI via DataCite (pending registration) |
Submission history
From: Tugba Erpek [view email][v1] Tue, 30 Jun 2026 17:15:23 UTC (314 KB)
Full-text links:
Access Paper:
-
View a PDF of the paper titled Semantic Leakage and Privacy Preservation in Relay-Assisted Semantic Communications, by Yalin E. Sagduyu and 3 other authors
- View PDF
- HTML (experimental)
- TeX Source
Current browse context:
cs.NI < prev | next >new | recent | 2026-06 Change to browse by: cs
cs.CR
cs.IT
cs.LG
eess
eess.SP
math
math.IT
References & Citations
export BibTeX citation Loading...BibTeX formatted citation
× Data provided by:Bookmark
Bibliographic and Citation Tools
Bibliographic Explorer Toggle Bibliographic Explorer (What is the Explorer?) Connected Papers Toggle Connected Papers (What is Connected Papers?) Litmaps Toggle Litmaps (What is Litmaps?) scite.ai Toggle scite Smart Citations (What are Smart Citations?) Code, Data, MediaCode, Data and Media Associated with this Article
alphaXiv Toggle alphaXiv (What is alphaXiv?) Links to Code Toggle CatalyzeX Code Finder for Papers (What is CatalyzeX?) DagsHub Toggle DagsHub (What is DagsHub?) GotitPub Toggle Gotit.pub (What is GotitPub?) Huggingface Toggle Hugging Face (What is Huggingface?) ScienceCast Toggle ScienceCast (What is ScienceCast?) DemosDemos
Replicate Toggle Replicate (What is Replicate?) Spaces Toggle Hugging Face Spaces (What is Spaces?) Spaces Toggle TXYZ.AI (What is TXYZ.AI?) Related PapersRecommenders and Search Tools
Link to Influence Flower Influence Flower (What are Influence Flowers?) Core recommender toggle CORE Recommender (What is CORE?) About arXivLabsarXivLabs: experimental projects with community collaborators
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Which authors of this paper are endorsers? | Disable MathJax (What is MathJax?)Related items
92
FeaturedOpenRouter Launches Prompt Caching with Sticky Routing to Drastically Reduce Multi-Turn Costs
OpenRouter 推出提示缓存与粘性路由,大幅降低多轮对话成本
For developers making frequent AI API calls, this feature is a direct money-saver. Sticky routing guarantees cache hit rates, and session_id requires zero configuration—every OpenRouter user should try it immediately.
91
FeaturedChatGPT Work: An AI Agent That Takes Action Across Apps and Files
ChatGPT Work:可在跨应用和文件中执行操作的AI Agent
I think this is a key step for AI assistants moving from Q&A to execution. Especially noteworthy for professionals who need to automate complex workflows. ChatGPT Work could become a new paradigm for productivity tools.
90
FeaturedAnatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident
前沿实验室代理入侵事件技术时间线:2026年7月事件剖析
This technical timeline is a must-read for all AI security researchers and agent developers—it doesn't just describe one attack but sounds an alarm on the weak defense systems of agent architectures. For teams deploying autonomous agents, this is an essential disaster prevention manual.
90
FeaturedBetter Tools Made Copilot Code Review Worse? Here's How GitHub Improved It
更好的工具反而让Copilot代码审查更糟?GitHub这样改进
This blog post deserves close reading by all AI product engineers and ML practitioners—it breaks the intuition that 'more powerful tools = better AI' and instead emphasizes an engineering philosophy aligned with agent reasoning patterns. Especially important for teams optimizing code review or similar agent-based products.
88
FeaturedOpenRouter Launches Unified Multimodal API: Single Endpoint for Image, Video, Audio, Embeddings, and Transcription
OpenRouter 推出统一多模态 API:单端点支持图像、视频、音频、嵌入与转录
This news is worth attention from all developers building multimodal AI applications: OpenRouter's unified API solves the pain of model switching, especially for startups or rapid prototyping. If you're struggling with multiple API keys and SDKs, this interface could be the unified layer you need.
87
FeaturedAnthropic Launches Claude for Teachers: AI Tools Designed for Educators
Anthropic 推出 Claude for Teachers:面向教师的教育 AI 工具
This announcement is valuable for educators and AI industry watchers alike. Instead of a generic chatbot, Anthropic designed a safety-first tool specifically for teachers, demonstrating the right approach for AI vertical deployment: solving real pain points rather than showing off technology. The built-in guardrails also set a reference for other AI companies, especially when serving scenarios involving children or teenagers.
86
FeaturedOpenRouter Introduces New Auto Router: Model Routing Powered by Market Wisdom
OpenRouter发布全新Auto Router:用市场智慧优化模型路由
This update is worth attention for anyone using APIs to build AI apps. Instead of guessing or testing model selection, market data now does the heavy lifting. Though sparse on details, the direction is right, especially for teams relying on aggregated model services.
86
FeaturedClaude Code v2.1.211 Release: Multiple Fixes and Improvements
Claude Code v2.1.211 发布:多项修复与改进
As a developer who frequently uses Claude Code for automated coding, I'm particularly interested in the security fixes, especially the permission preview character bypass and auto mode overriding hook decisions—these directly affect the security boundaries during team collaboration. The improvement in background agent reporting also makes long-running tasks more reliable. I recommend all users upgrade as soon as possible.