Severity-oriented multiclass drone flight logs anomaly detection

Silalahi, Swardiantara, Ahmad, Tohari, Studiawan, Hudan, Anthi, Eirini and Williams, Lowri 2024. Severity-oriented multiclass drone flight logs anomaly detection. IEEE Access 12 , 64252 - 64266. 10.1109/ACCESS.2024.3396926

PDF - Published Version Available under License Creative Commons Attribution Non-commercial No Derivatives. Download (2MB)

Abstract

The availability of log data recorded by computer-based systems such as operating system and network logs, makes it possible for the stakeholder to look after the system for monitoring, evaluation, and improvement purposes. If an incident happens to the system, the log is the first and most important artefact to recover so that investigations may be performed to gather an understanding of why such incidents may have occurred. Log-based anomaly detection is one of the common approaches to uncovering incident scenarios and finding the root cause of such incidents. In the context of drone flight, incidents reported in logs include errors during take-off, flight range issues, and cancellations of actions. Existing studies employ sequence anomaly detection to check whether an event during a drone flight is anomalous. It needs several preceding events and includes deciding if the following event is legitimate or malicious. However, one single log record can have no relationship to other log events and be malicious at the same time. Thus, several studies explored point anomaly detection, where one log record is the only feature needed. Dividing the anomalies into two categories can be overwhelming as the number of logs generated by a system is large. At the same time, it can be helpful to separate critical anomalies from the less severe ones. Therefore, this study proposes DroLoVe, a severity-oriented multiclass anomaly detection approach for drone flight log data. In accordance with the dataset characteristics, where the samples from different severity levels share common features, this paper employs a multitask-based label vector representation to train deep neural network models. After an extensive experiment on several baselines, the proposed scenario outperforms other models from existing studies with promising results. The proposed label’s representation improves the prediction confidence score on various encoder types with 8.6% and 1.8% from focal and cross-entropy scenarios on average, respectively.

Item Type:	Article
Date Type:	Published Online
Status:	Published
Schools:	Computer Science & Informatics
Publisher:	Institute of Electrical and Electronics Engineers
ISSN:	2169-3536
Date of First Compliant Deposit:	4 June 2024
Date of Acceptance:	6 May 2024
Last Modified:	04 Jun 2024 12:00
URI:	https://orca.cardiff.ac.uk/id/eprint/168794

Actions (repository staff only)

Edit Item