Technical Summary: Multi-Domain Security for 6G ISAC in Transportation

Problem Statement

The emergence of 6G wireless systems introduces Integrated Sensing and Communication (ISAC), a framework that fuses data exchange and environmental perception using shared spectrum and hardware. While ISAC enhances spectral efficiency and situational awareness for autonomous driving and intelligent traffic management, this tight integration fundamentally alters the security landscape. Unlike traditional systems where sensing and communication operate independently, ISAC creates tight cross-layer coupling. This coupling means a security compromise in one domain (e.g., physical-layer spoofing) can propagate rapidly to others (e.g., cyber-physical control loops), leading to system-wide failures.

Current research often addresses security in isolation—focusing either on physical-layer privacy or layer-by-layer cryptographic protocols—without accounting for the unique, coupled threat surfaces introduced by ISAC. Specifically, adversaries can exploit unencrypted over-the-air features (range, Doppler, angle) for unauthorized sensing, manipulate echoes to create "ghost" objects, and bypass encryption entirely by extracting geometric information from waveforms. Furthermore, the reliance on standardized reference signals and structured transmissions in ISAC introduces vulnerabilities such as forced synchronization and advanced target mimicry, which are distinct from challenges in standalone sensing or communication systems.

Methodology

The paper proposes a multi-domain security vision for 6G transportation, categorizing risks and defenses across three interrelated domains:

1. Cyber-Physical Domain: Concerns the integrity of sensors, actuators, and the control loop.
2. Physical-Layer Domain: Concerns the generation, propagation, and reception of waveforms.
3. Protocol Domain: Concerns cryptographic protocols for authenticity, integrity, and confidentiality.

Rather than treating these domains separately, the authors advocate for a unified security framework that leverages existing ISAC measurements to perform lightweight cross-checks. The methodology involves:

• Systematic Risk Analysis: Identifying specific ISAC-induced vulnerabilities (e.g., infrastructure-based spoofing, sensing data leakage via unencrypted pilots, RIS manipulation) and contrasting them with standalone system risks.
• Cross-Domain Defense Design: Proposing four coordinated mechanisms that form a security cycle:
  1. Authentication Fusion: Combining Physical Layer Authentication (PLA) using channel fingerprints (e.g., Channel Impulse Response, Angle of Arrival) with higher-layer cryptographic authentication.
  2. Cross-Layer Key Generation: Deriving secret keys from physical observables (location-dependent randomness) and binding them with cryptographic material.
  3. Cross-Layer Anomaly Detection: Correlating physical-layer observables (e.g., Doppler, multipath evolution) with protocol metadata and control reports to detect inconsistencies.
  4. Dynamic Security Adaptation: Real-time reconfiguration of beams, RIS phases, and protocol parameters in response to detected anomalies.

Key Contributions

The paper makes two primary contributions:

1. Identification of ISAC-Specific Challenges: It systematically delineates security challenges and opportunities unique to ISAC in transportation, distinguishing them from standalone sensing or communication systems. It highlights how ISAC extends the attack surface to include uncooperative targets and the environment itself, while also offering new defensive capabilities like infrastructure-based cross-verification.
2. Proposal of an Integrated Security Framework: It introduces a multi-domain approach that unifies protection across the cyber-physical, physical-layer, and protocol domains. The framework utilizes "coupling-aware design" to enable cross-domain authentication, key generation, and anomaly detection, ensuring that defenses are coordinated rather than isolated.

Results and Case Studies

The paper supports its framework with theoretical analysis and case studies demonstrating the efficacy of the proposed mechanisms:

• Authentication Fusion: A case study evaluates a two-stage system where PLA acts as a lightweight pre-check before Higher-Layer Authentication (HLA). Results indicate that by filtering out illegitimate requests based on Angle of Arrival (AoA) thresholds, the system achieves an expected computational complexity reduction of approximately 50% compared to HLA-only baselines, while maintaining strict bounds on false alarm and miss-detection probabilities.
• Cross-Layer Key Generation: Simulations of key agreement probability (KAP) in a secure ISAC scenario show that legitimate links (Alice-Bob) can maintain high KAP even when an adversary (Eve) is in close proximity, provided sufficient spatial decorrelation exists. However, the study notes that at high velocities, Doppler-induced phase rotations can decorrelate uplink and downlink channels, causing KAP to drop, which necessitates adaptive rekeying strategies.
• Risk Mitigation Mapping: The paper maps specific risks (e.g., remote device impersonation, pilot signal attacks, RIS manipulation) to the proposed cross-domain mitigations, demonstrating how combining physical fingerprints with cryptographic checks can validate identity and detect spoofing that single-domain defenses might miss.

Significance and Claims

The paper claims that secure ISAC poses a fundamentally cross-domain problem, particularly in safety-critical settings where attacks can cascade through the perception-communication-control loop. The significance of this work lies in shifting the paradigm from isolated security measures to a coordinated multi-domain defense strategy.

The authors argue that the tight coupling in ISAC, while a source of vulnerability (faster error propagation), also enables earlier cross-validation. By reusing existing ISAC measurements for lightweight checks, the proposed framework can detect anomalies and trigger dynamic adaptations without requiring a complete redesign of underlying waveforms or protocols. The paper concludes that while full integration offers performance benefits for high-speed scenarios (e.g., highway platooning), partial integration may be necessary for fault containment in high-risk environments (e.g., logistics hubs), and future research must address challenges in distributed ISAC, AI-driven security, and the integration of Post-Quantum Cryptography (PQC) within tight latency budgets.