Abstract:ADS-B (Automatic Dependent Surveillance-Broadcast) is a key technology in the new generation air traffic surveillance system. However, it is vulnerable to various cyber attacks because it broadcasts data in plaintext format and lacks authentication mechanism. Previous research has rarely considered the application scenarios of ATM (Air Traffic Management) in commercial air transport, and there are the problems of low anomaly detection rate and the non-lightweight model. This paper focuses on ADS-B anomaly detection under the background of ATM. We propose the TTSAD (TCN-Transformer-SVDD Model for Anomaly Detection) model, which aims to address the problems of existing ADS-B anomaly detection methods including inadequate considerations of long-term dependencies and distribution characteristic, the non-lightweight model and the poor adaptive threshold. First, ADS-B time series is input into TCN (Temporal Convolutional Network) prediction module which predicts data in an accurate and quick way using causal convolution and dilated convolution. Then, the predicted ADS-B time series is input into Transformer reconstruction module which reconstructs data accurately and quickly based on Self-Attention and Multi-Head Attention mechanism. Finally, the difference values between the reconstructed values and the real values are input into SVDD (Support Vector Data Description) threshold determination module for an optimal threshold. Experimental results show that the TTSAD model can detect ADS-B anomaly data generated from attacks such as altitude slow offset and DOS (Denial of Service). The TTSAD model is superior to other machine learning methods in terms of recall rate, detection rate, accuracy rate, missing detection rate and false alarm rate. Furthermore, compared with other deep learning methods including LSTM, GRU and LSTM-AE, the TTSAD model has a shorter training time and a lightweight characteristic. This approach guarantees the information security of ADS-B, thereby improving the operational security of ATM.

TTANAD: Test-Time Augmentation for Network Anomaly Detection

Boosting Anomaly Detection Using Unsupervised Diverse Test-Time Augmentation

Anomaly Detection with Test Time Augmentation and Consistency Evaluation

TA-NET: Empowering Highly Efficient Traffic Anomaly Detection Through Multi-Head Local Self-Attention and Adaptive Hierarchical Feature Reconstruction

TAAD: Time-varying adversarial anomaly detection in dynamic graphs

A Framework for the Systematic Assessment of Anomaly Detectors in Time-Sensitive Automotive Networks

TTSAD: TCN-Transformer-SVDD Model for Anomaly Detection in Air Traffic ADS-B Data

TTSAD:TCN-Transformer-SVDD Model for Anomaly Detection in Air Traffic ADS-B Data

TSA on AutoPilot: Self-tuning Self-supervised Time Series Anomaly Detection

An Online Adaptive Network Anomaly Detection Model

Data Augmentation for Traffic Classification

A Combination of Temporal Sequence Learning and Data Description for Anomaly-based NIDS

TANTRA: Timing-Based Adversarial Network Traffic Reshaping Attack

Deep Learning-Based Anomaly Detection in Network Traffic for Cyber Threat Identification

Anomaly detection using spatial and temporal information in multivariate time series

Online Adaptive Anomaly Detection for Augmented Network Flows

A Novel Multi-Modal Incremental Tensor Decomposition for Anomaly Detection in Large-Scale Networks

Adversarial Attacks Against Deep Learning-Based Network Intrusion Detection Systems and Defense Mechanisms

DTAAD: Dual Tcn-Attention Networks for Anomaly Detection in Multivariate Time Series Data

Real-time Anomaly Detection of Network Intrusions

Dual-Stream Anomaly Detection Network for Real-World Traffic Scenarios