Abstract:ADS-B (Automatic Dependent Surveillance-Broadcast) is a key technology in the new generation air traffic surveillance system. However, it is vulnerable to various cyber attacks because it broadcasts data in plaintext format and lacks authentication mechanism. Previous research has rarely considered the application scenarios of ATM (Air Traffic Management) in commercial air transport, and there are the problems of low anomaly detection rate and the non-lightweight model. This paper focuses on ADS-B anomaly detection under the background of ATM. We propose the TTSAD (TCN-Transformer-SVDD Model for Anomaly Detection) model, which aims to address the problems of existing ADS-B anomaly detection methods including inadequate considerations of long-term dependencies and distribution characteristic, the non-lightweight model and the poor adaptive threshold. First, ADS-B time series is input into TCN (Temporal Convolutional Network) prediction module which predicts data in an accurate and quick way using causal convolution and dilated convolution. Then, the predicted ADS-B time series is input into Transformer reconstruction module which reconstructs data accurately and quickly based on Self-Attention and Multi-Head Attention mechanism. Finally, the difference values between the reconstructed values and the real values are input into SVDD (Support Vector Data Description) threshold determination module for an optimal threshold. Experimental results show that the TTSAD model can detect ADS-B anomaly data generated from attacks such as altitude slow offset and DOS (Denial of Service). The TTSAD model is superior to other machine learning methods in terms of recall rate, detection rate, accuracy rate, missing detection rate and false alarm rate. Furthermore, compared with other deep learning methods including LSTM, GRU and LSTM-AE, the TTSAD model has a shorter training time and a lightweight characteristic. This approach guarantees the information security of ADS-B, thereby improving the operational security of ATM.

ADS-Bpois: Poisoning Attacks Against Deep Learning-Based Air Traffic ADS-B Unsupervised Anomaly Detection Models

Data Poisoning Attacks in Internet-of-Vehicle Networks: Taxonomy, State-of-The-Art, and Future Directions.

Adversarial Attacks against Deep-Learning-Based Automatic Dependent Surveillance-Broadcast Unsupervised Anomaly Detection Models in the Context of Air Traffic Management

TTSAD:TCN-Transformer-SVDD Model for Anomaly Detection in Air Traffic ADS-B Data

GAN-LSTM-Based ADS-B Attack Detection in the Context of Air Traffic Control

Detecting ADS-B Spoofing Attacks Using Deep Neural Networks

ADS-B anomaly data detection model based on VAE-SVDD

Using LSTM encoder-decoder algorithm for detecting anomalous ADS-B messages

Analyzing Sequences of Airspace States to Detect Anomalous Traffic Conditions

Aircraft trajectory prediction and aviation safety in ADS-B failure conditions based on neural network

Adversarial Deep Learning for Over-the-Air Spectrum Poisoning Attacks

Label-free Poisoning Attack Against Deep Unsupervised Domain Adaptation

Assessing Vulnerabilities of Adversarial Learning Algorithm through Poisoning Attacks

Using Anomaly Detection to Detect Poisoning Attacks in Federated Learning Applications

Identifying alternately poisoning attacks in federated learning online using trajectory anomaly detection method

Accumulative Poisoning Attacks on Real-time Data

Poisoning Attack on Deep Generative Models in Autonomous Driving

VizADS-B: Analyzing Sequences of ADS-B Images Using Explainable Convolutional LSTM Encoder-Decoder to Detect Cyber Attacks

SoK of Machine Learning and Deep Learning Based Anomaly Detection Methods for Automatic Dependent Surveillance- Broadcast

Invisible Poisoning: Highly Stealthy Targeted Poisoning Attack

Adversarial attacks based on time-series features for traffic detection