Transformer-based Sentiment Analysis for Anomaly Detection on Drone Forensic Timeline

Silalahi, Swardiantara; Ahmad, Tohari; Studiawan, Hudan

doi:10.1109/isdfs58141.2023.10131749

Cited by 3 publications

(2 citation statements)

References 22 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Log-based anomaly detection has been applied widely to various systems, such as operating systems [9], [10], parallel file systems [26], drones [11], [18], [20], internet of things [28], and industrial control systems [29]. Among these studies, a sequence-based approach is the common modelling technique used, where the detection is observed on a collection of log events.…”

Section: A Anomaly Detection On Logs Datamentioning

confidence: 99%

“…However, detecting abnormalities in log data can be performed using a point-based approach, where one single log record is the only feature needed. Therefore, several studies explored utilising a point-based approach to detect anomalous events on logs data, such as in operating systems [9], [10], drone devices [11], and distribution systems [9], [10]. In the drone context, a log message contains a description of occurring events which are triggered by various components such as sensors, peripherals, and firmware.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Severity-Oriented Multiclass Drone Flight Logs Anomaly Detection

Silalahi,

Ahmad,

Studiawan

et al. 2024

IEEE Access

Self Cite

View full text Add to dashboard Cite

The availability of log data recorded by computer-based systems such as operating system and network logs, makes it possible for the stakeholder to look after the system for monitoring, evaluation, and improvement purposes. If an incident happens to the system, the log is the first and most important artefact to recover so that investigations may be performed to gather an understanding of why such incidents may have occurred. Log-based anomaly detection is one of the common approaches to uncovering incident scenarios and finding the root cause of such incidents. In the context of drone flight, incidents reported in logs include errors during take-off, flight range issues, and cancellations of actions. Existing studies employ sequence anomaly detection to check whether an event during a drone flight is anomalous. It needs several preceding events and includes deciding if the following event is legitimate or malicious. However, one single log record can have no relationship to other log events and be malicious at the same time. Thus, several studies explored point anomaly detection, where one log record is the only feature needed. Dividing the anomalies into two categories can be overwhelming as the number of logs generated by a system is large. At the same time, it can be helpful to separate critical anomalies from the less severe ones. Therefore, this study proposes DroLoVe, a severity-oriented multiclass anomaly detection approach for drone flight log data. In accordance with the dataset characteristics, where the samples from different severity levels share common features, this paper employs a multitask-based label vector representation to train deep neural network models. After an extensive experiment on several baselines, the proposed scenario outperforms other models from existing studies with promising results. The proposed label's representation improves the prediction confidence score on various encoder types with 8.6% and 1.8% from focal and cross-entropy scenarios on average, respectively.

show abstract