Toward Secure ISAC Beamforming: How Many Dedicated Sensing Beams Are Required?

In this paper, sensing-assisted secure communication in a multi-user multi-eavesdropper integrated sensing and communication (ISAC) system is investigated. Confidential communication signals and dedicated sensing signals are jointly transmitted by a base station (BS) to simultaneously serve users and sense aerial eavesdroppers (AEs). A sum rate maximization problem is formulated under AEs’ Signal-to-Interference-plus-Noise Ratio (SINR) and sensing Signal-to-Clutter-plus-Noise Ratio (SCNR) constraints. A fractional-programming-based alternating optimization algorithm is developed to solve this problem for fully digital arrays, where successive convex approximation (SCA) and semidefinite relaxation (SDR) are leveraged to handle non-convex constraints. Furthermore, the minimum number of dedicated sensing beams is analyzed via a worst-case rank bound, upon which the proposed beamforming design is further extended to the hybrid analog-digital (HAD) array architecture, where the unit-modulus constraint is addressed by manifold optimization. Simulation results demonstrate that only a small number of sensing beams are sufficient for both sensing and jamming AEs, and the proposed designs consistently outperform strong baselines while also revealing the communication–sensing trade-off.