航空学报 > 2026, Vol. 47 Issue (1): 332048-332048   doi: 10.7527/S1000-6893.2025.32048

基于BiTCN的无人机指挥控制链路DoS攻击检测方法

赵长啸1,2,3(), 方玉麟1, 汪克念2   

  1. 1. 中国民航大学 安全科学与工程学院,天津 300300
    2. 民航航空器适航审定技术重点实验室,天津 300300
    3. 天津市航空装备安全性与适航技术创新中心,天津 300300
  • 收稿日期:2025-03-31 修回日期:2025-06-03 接受日期:2025-07-07 出版日期:2025-07-29 发布日期:2025-07-18
  • 通讯作者: 赵长啸
  • 基金资助:
    国家自然科学基金(52402523); 国家自然科学基金(U2133203); 天津市高等学校研究生教育改革研究计划项目(TJYG135); 天津市航空装备安全性与适航技术创新中心开放基金(JCZX-2024-KF-01)

BiTCN-based DoS attack detection method for UAV command and control link

Changxiao ZHAO1,2,3(), Yulin FANG1, Kenian WANG2   

  1. 1. School of Safety Science and Engineering,Civil Aviation University of China,Tianjin 300300,China
    2. Key Laboratory of Civil Aircraft Airworthiness Technology,CAAC,Tianjin 300300,China
    3. Tianjin Aviation Equipment Safety and Airworthiness Technology Innovation Centre,Tianjin 300300,China
  • Received:2025-03-31 Revised:2025-06-03 Accepted:2025-07-07 Online:2025-07-29 Published:2025-07-18
  • Contact: Changxiao ZHAO

摘要:

无人机指挥控制(C2)链路的开放性使其易遭受非授信攻击,导致无人机失控、坠毁乃至恶意攻击第三方的风险,针对C2链路中拒绝服务(DoS)攻击风险,考虑实际检测数据集缺失条件,提出了一种基于具有多源特征融合能力的双向时间卷积网络(BiTCN)的攻击检测方法,基于网络数据与物理数据的信息特征融合构建检测数据集,通过时间戳对齐与前向填充,解决网络与物理数据的异步问题;实验基于完整数据集和数据缺失率为5%、15%、30%、40%、50%的数据集展开,利用BiTCN模型通过双向机制捕捉数据的前后文信息,完成特征提取和分类,实现对DoS攻击的检测。将所提方法在真实无人机攻击数据集上进行验证,结果表明:与纯网络数据和纯物理数据检测模型相比,该方法准确率(97.8%)、召回率(95.9%)、F1分数(97.8%)和AUC(0.997)均优于单一维度数据检测模型;与传统FNN、1D-CNN、LSTM、GRU检测模型相比,即使在40%的数据缺失情况下,所提方法仍能保持较高检测精度。

关键词: 无人机C2链路, DoS攻击检测, 双向时间卷积网络, 网络数据与物理数据融合, 攻击检测方法

Abstract:

The openness of UAV Command and Control (C2) Link makes it vulnerable to non-granted attacks, leading to the risk of UAV loss of control, crash and even malicious attacks on third parties. Focusing the risk of Denial of Service (DoS) attacks in C2 link and considering the lack of actual detection dataset conditions, this paper proposes an attack detection method based on the Bidirectional Temporal Convolutional Network (BiTCN), capable of multi-source feature fusion capability. This method constructs a detection dataset by integrating information features from both information features of network data and physical data. Timestamp alignment and forward padding are employed to solve the asynchronous problem of network and physical data streams. The experiment was conducted using a complete dataset and datasets with data missing rates of 5%, 15%, 30%, 40%, 50%. The BiTCN model was utilized to capture contextual information through a bidirectional mechanism, enabling feature extraction and classification to detect DoS attacks. The proposed method was validated on a real drone attack dataset, and the results showed that: Compared with detection models based solely on network data or physical data, the proposed method achieved higher accuracy (97.8%), recall (95.9%), F1 score (97.8%), and AUC (0.997) than single-dimensional data detection models. Compared with traditional FNN, 1D-CNN, LSTM, and GRU detection models, the proposed method maintains high detection accuracy even under 40% data missing conditions.

Key words: UAV C2 links, DoS attack detection, bidirectional temporal convolutional networks, fusion of cyber and physical data, attack detection method

中图分类号: