论文标题
基于本体的空中交通管制系统的异常检测
Ontology-Based Anomaly Detection for Air Traffic Control Systems
论文作者
论文摘要
航空业越来越多地采用了自动依赖性监视广播(ADS-B)协议,作为飞机将其位置转化为空中交通管制(ATC)监视系统的一种方法。与传统的基于雷达的技术相比,ADS-B提供了更高的精度,但是,它的设计没有任何加密或身份验证机制,并且已被证明容易受到欺骗攻击的影响。有能力的攻击者可以传输伪造的ADS-B消息,目的是导致虚假信息显示在ATC显示器上并威胁到空中流量的安全性。更新ADS-B协议将是一个漫长的过程,因此,系统需要检测异常的ADS-B通信。本文介绍了基于本体论的ADS-B异常检测系统ATC-Sense。 ATC本体用于在模拟的受控领空中对实体进行建模,并通过验证该实体符合与飞机飞行轨道,雷达读数和飞行报告相关的航空限制来检测伪造的ADS-B消息。我们在模拟的ATC环境中使用几种ADS-B攻击方案评估了基于约束的检测方法的计算性能。我们演示了如何在实时环境中使用本体来进行异常检测,并呼吁将来的工作调查改善这种方法的计算性能的方法。
The Automatic Dependent Surveillance-Broadcast (ADS-B) protocol is increasingly being adopted by the aviation industry as a method for aircraft to relay their position to Air Traffic Control (ATC) monitoring systems. ADS-B provides greater precision compared to traditional radar-based technologies, however, it was designed without any encryption or authentication mechanisms and has been shown to be susceptible to spoofing attacks. A capable attacker can transmit falsified ADS-B messages with the intent of causing false information to be shown on ATC displays and threaten the safety of air traffic. Updating the ADS-B protocol will be a lengthy process, therefore, there is a need for systems to detect anomalous ADS-B communications. This paper presents ATC-Sense, an ADS-B anomaly detection system based on ontologies. An ATC ontology is used to model entities in a simulated controlled airspace and is used to detect falsified ADS-B messages by verifying that the entities conform to aviation constraints related to aircraft flight tracks, radar readings, and flight reports. We evaluate the computational performance of the proposed constraints-based detection approach with several ADS-B attack scenarios in a simulated ATC environment. We demonstrate how ontologies can be used for anomaly detection in a real-time environment and call for future work to investigate ways to improve the computational performance of such an approach.