Abstract:ADS-B (Automatic Dependent Surveillance-Broadcast) is a key technology in the new generation air traffic surveillance system. However, it is vulnerable to various cyber attacks because it broadcasts data in plaintext format and lacks authentication mechanism. Previous research has rarely considered the application scenarios of ATM (Air Traffic Management) in commercial air transport, and there are the problems of low anomaly detection rate and the non-lightweight model. This paper focuses on ADS-B anomaly detection under the background of ATM. We propose the TTSAD (TCN-Transformer-SVDD Model for Anomaly Detection) model, which aims to address the problems of existing ADS-B anomaly detection methods including inadequate considerations of long-term dependencies and distribution characteristic, the non-lightweight model and the poor adaptive threshold. First, ADS-B time series is input into TCN (Temporal Convolutional Network) prediction module which predicts data in an accurate and quick way using causal convolution and dilated convolution. Then, the predicted ADS-B time series is input into Transformer reconstruction module which reconstructs data accurately and quickly based on Self-Attention and Multi-Head Attention mechanism. Finally, the difference values between the reconstructed values and the real values are input into SVDD (Support Vector Data Description) threshold determination module for an optimal threshold. Experimental results show that the TTSAD model can detect ADS-B anomaly data generated from attacks such as altitude slow offset and DOS (Denial of Service). The TTSAD model is superior to other machine learning methods in terms of recall rate, detection rate, accuracy rate, missing detection rate and false alarm rate. Furthermore, compared with other deep learning methods including LSTM, GRU and LSTM-AE, the TTSAD model has a shorter training time and a lightweight characteristic. This approach guarantees the information security of ADS-B, thereby improving the operational security of ATM.

ADSAD: An unsupervised attention-based discrete sequence anomaly detection framework for network security analysis

Detecting Anomalies In Encrypted Traffic Via Deep Dictionary Learning

An Unsupervised Framework for Anomaly Detection in a Water Treatment System

A Novel Semi-supervised Anomaly Detection Method for Network Intrusion Detection

Attention-based Encoder-Decoder Recurrent Neural Networks for HTTP Payload Anomaly Detection

Deep anomaly detection in packet payload

Research on Anomaly Network Detection Based on Self-Attention Mechanism

Abnormal Traffic Detection: Traffic Feature Extraction and DAE-GAN With Efficient Data Augmentation

Deep anomaly detection with self-supervised learning and adversarial training

ADA: Adaptive Deep Log Anomaly Detector

Dynamic Threshold-based Two-layer Online Unsupervised Anomaly Detector

Deep Anomaly Detection Via Active Anomaly Search.

Log Sequence Anomaly Detection Based on Local Information Extraction and Globally Sparse Transformer Model

Video Anomaly Detection Based on Attention Mechanism

SA2E-AD: A Stacked Attention Autoencoder for Anomaly Detection in Multivariate Time Series

EADN: An Efficient Deep Learning Model for Anomaly Detection in Videos

EAD: effortless anomalies detection, a deep learning based approach for detecting outliers in English textual data

TTSAD:TCN-Transformer-SVDD Model for Anomaly Detection in Air Traffic ADS-B Data

Multi-Scale One-Class Recurrent Neural Networks for Discrete Event Sequence Anomaly Detection

A task of anomaly detection for a smart satellite Internet of things system

Anomaly Detection in Video Sequences: A Benchmark and Computational Model