Cluster DetectionMethod of Endogenous Security Abnormal Attack Behavior in Air Traffic Control Network

In order to enhance the accuracy of Air Traffic Control(ATC)cybersecurity attack detection,in this paper,a new clustering detection method is designed for air traffic control network security attacks.The feature set for ATC cybersecurity attacks is constructed by setting the feature states,adding recursive features,and determining the feature criticality.The expected information gain and entropy of the feature data are computed to determine the information gain of the feature data and reduce the interference of similar feature data.An autoencoder is introduced into the AI(artificial intelligence)algorithm to encode and decode the characteristics of ATC network security attack behavior to reduce the dimensionality of the ATC network security attack behavior data.Based on the above processing,an unsupervised learning algorithm for clustering detection of ATC network security attacks is designed.First,determine the distance between the clustering clusters of ATC network security attack behavior characteristics,calculate the clustering threshold,and construct the initial clustering center.Then,the new average value of all feature objects in each cluster is recalculated as the new cluster center.Second,it traverses all objects in a cluster of ATC network security attack behavior feature data.Finally,the cluster detection of ATC network security attack behavior is completed by the computation of objective functions.The experiment took three groups of experimental attack behavior data sets as the test object,and took the detection rate,false detection rate and recall rate as the test indicators,and selected three similar methods for comparative test.The experimental results show that the detection rate of this method is about 98%,the false positive rate is below 1%,and the recall rate is above 97%.Research shows that this method can improve the detection performance of security attacks in air traffic control network.

Fluctuations in airport arrival and departure traffic:A network analysis

Air traffic is a typical complex system, in which movements of traffic components （pilots, controllers, equipment, and environment）, especially airport arrival and departure traffic, form complicated spatial and temporal dynamics. The fluctuations of airport arrival and departure traffic are studied from the point of view of networks as the special correlation between different airports. Our collected flow volume data on the time-dependent activity of US airport arrival and departure traffic indicate that the coupling between the average flux and the fluctuation of an individual airport obeys a certain scaling law with a wide variety of scaling exponents between 1/2 and 1. These scaling phenomena can explain the interaction between the airport internal dynamics （e.g. queuing at airports, a ground delay program and following flying traffic） and a change in the external （network-wide） traffic demand （e.g. an increase in traffic during peak hours every day）, allowing us to further understand the mechanisms governing the collective behaviour of the transportation system. We separate internal dynamics from external fluctuations using a scaling law which is helpful for us to systematically determine the origin of fluctuations in airport arrival and departure traffic, uncovering the collective dynamics. Hot spot features are observed in airport traffic data as the dynamical inhomogeneity in the fluxes of individual airports. The intrinsic characteristics of airport arrival and departure traffic under severe weather is discussed as well.

Research on Data Tampering Prevention Method for ATC Network Based on Zero Trust

The traditional air traffic control information sharing data has weak security characteristics of personal privacy data and poor effect,which is easy to leads to the problem that the data is usurped.Starting from the application of the ATC(automatic train control)network,this paper focuses on the zero trust and zero trust access strategy and the tamper-proof method of information-sharing network data.Through the improvement of ATC’s zero trust physical layer authentication and network data distributed feature differentiation calculation,this paper reconstructs the personal privacy scope authentication structure and designs a tamper-proof method of ATC’s information sharing on the Internet.From the single management authority to the unified management of data units,the systematic algorithm improvement of shared network data tamper prevention method is realized,and RDTP(Reliable Data Transfer Protocol)is selected in the network data of information sharing resources to realize the effectiveness of tamper prevention of air traffic control data during transmission.The results show that this method can reasonably avoid the tampering of information sharing on the Internet,maintain the security factors of air traffic control information sharing on the Internet,and the Central Processing Unit(CPU)utilization rate is only 4.64%,which effectively increases the performance of air traffic control data comprehensive security protection system.

Enhancing air traffic operational efficiency by reducing network scale

The growing demand for air travel has led to the saturation of air traffic networks.Conventional methods of adding routes to alleviate congestion and reduce delays may not achieve the desired effect and even degrade system performance.In this paper,we explore the application of Braess’s Paradox in the reduction of air traffic networks.This counterintuitive phenomenon shows that adding new connections to a network can actually increase the overall network pressure.This study uses Hidden Markov methods and the Viterbi algorithm to match air traffic flow with routes,a machine learning approach and a mathematical method to construct cost functions for flight time and traffic volume,and finally uses genetic algorithm and the A*algorithm to detect Braess’s Paradox edges.We uses ADS-B data from the busy month of July 2019 for a case study of the air traffic network over the UK airspace.The results show that Braess’s Paradox is also applicable to multi-flight level air route networks.Removing such network edges can improve system performance.In one day’s case,the total flight time of the day’s traffic volume decreased from 11509.24 minutes to 10459.97 minutes.This equates to an average savings of 4.99 minutes of flight time per flight,which is significant in controlling delay performance.