Temporal and Multimodal Deep Learning for Cyberattack Detection in LEO Satellite Systems

• URL: http://arxiv.org/abs/2609.10746v1
• Date: Wed, 09 Sep 2026 18:42:38 GMT
• Title: Temporal and Multimodal Deep Learning for Cyberattack Detection in LEO Satellite Systems
• Abstract summary: Satellite systems generate heterogeneous information across radio-frequency (RF) links, onboard hardware, and orbital operations.<n>Existing approaches either rely on terrestrial intrusion datasets or evaluate individual observations independently.<n>We conduct a systematic study of deep-learning-based cyberattack detection using the recently introduced satellite-specific RF-SAT dataset.
• Score: 0.0
• License: http://creativecommons.org/licenses/by/4.0/
• Abstract: The growing reliance on Low-Earth Orbit (LEO) satellite communication systems has increased the need for intelligent methods capable of detecting cyberattacks across complex and dynamic space environments. Unlike conventional network intrusion detection, satellite systems generate heterogeneous information across radio-frequency (RF) links, onboard hardware, and orbital operations. However, many existing approaches either rely on terrestrial intrusion datasets or evaluate individual observations independently, limiting their ability to capture temporal attack behavior specific to LEO satellites. In this work, we conduct a systematic study of deep-learning-based cyberattack detection using the recently introduced satellite-specific UNSW-IoTSAT dataset. We investigate structured learning architectures that preserve hardware, orbital, and RF information, including a Subsystem-Fusion MLP and a hierarchical multimodal Transformer that models both cross-subsystem interactions and temporal evolution. We further evaluate leakage-resistant row-level and temporal settings, along with cross-satellite generalization, to characterize how model architecture and evaluation protocol influence satellite cyberattack detection. Experimental results demonstrate the value of structured multimodal modeling and rigorous evaluation, with the hierarchical Transformer achieving up to 91.66% accuracy and 85.63% macro F1 under the leakage-resistant evaluation protocol.

Related papers

• Multi-Agent Collaborative Intrusion Detection for Low-Altitude Economy IoT: An LLM-Enhanced Agentic AI Framework [60.72591149679355]
  The rapid expansion of low-altitude economy Internet of Things (LAE-IoT) networks has created unprecedented security challenges.<n>Traditional intrusion detection systems fail to tackle the unique characteristics of aerial IoT environments.<n>We introduce a large language model (LLM)-enabled agentic AI framework for enhancing intrusion detection in LAE-IoT networks.
  arXiv  Detail & Related papers  (2026-01-25T12:47:25Z)
• Multi-Agent-Driven Cognitive Secure Communications in Satellite-Terrestrial Networks [58.70163955407538]
  Malicious eavesdroppers pose a serious threat to private information via satellite-terrestrial networks (STNs)<n>We propose a cognitive secure communication framework driven by multiple agents that coordinates spectrum scheduling and protection through real-time sensing.<n>We exploit generative adversarial networks to produce adversarial matrices, and employ learning-aided power control to set real and adversarial signal powers for protection layer.
  arXiv  Detail & Related papers  (2026-01-06T10:30:41Z)
• Joint AoI and Handover Optimization in Space-Air-Ground Integrated Network [48.485907216785904]
  Low Earth orbit (LEO) satellite constellations offer promising solutions with global coverage and reduced latency.<n>Yet struggle with intermittent coverage and intermittent communication windows due to orbital dynamics.<n>Our three-layer design employs hybrid free-space optical (FSO) links for high-capacity satellite-to-ground communication and reliable radio frequency (RF) links for HAP-to-ground transmission.
  arXiv  Detail & Related papers  (2025-09-16T06:16:56Z)
• Low-altitude UAV Friendly-Jamming for Satellite-Maritime Communications via Generative AI-enabled Deep Reinforcement Learning [72.23178920029957]
  This paper presents a satellite-maritime communication system assisted by low-altitude unmanned aerial vehicle (UAV) friendly-jamming.<n>We formulate a secure satellite-maritime communication multi-objective optimization problem (SSMCMOP)<n>In order to solve the dynamic and long-term optimization problem, we reformulate it into a Markov decision process.<n>We then propose a transformer-enhanced soft actor-critic (TransSAC) algorithm, which is a generative artificial intelligence-enabled deep reinforcement learning approach.
  arXiv  Detail & Related papers  (2025-01-26T10:13:51Z)
• Learning Satellite Pattern-of-Life Identification: A Diffusion-based Approach [10.811177660290726]
  Current approaches to monitor satellite behaviors rely on expert knowledge and rule-based systems that scale poorly.<n>We propose a novel generative approach for satellite pattern-of-life (PoL) identification that significantly eliminates the dependence on expert knowledge.<n>A case study using actual satellite data confirms the approach's transformative potential for operational behavior pattern identification, enhanced tracking, and space situational awareness.
  arXiv  Detail & Related papers  (2024-12-14T12:39:19Z)
• Satellite Federated Edge Learning: Architecture Design and Convergence Analysis [47.057886812985984]
  This paper introduces a novel FEEL algorithm, named FEDMEGA, tailored to mega-constellation networks. By integrating inter-satellite links (ISL) for intra-orbit model aggregation, the proposed algorithm significantly reduces the usage of low data rate and intermittent GSL. Our proposed method includes a ring all-reduce based intra-orbit aggregation mechanism, coupled with a network flow-based transmission scheme for global model aggregation.
  arXiv  Detail & Related papers  (2024-04-02T11:59:58Z)
• Deep learning approach for interruption attacks detection in LEO satellite networks [0.0]
  This work aims to provide an interruption detection strategy for Low Earth Orbit (textsfLEO) satellite networks using deep learning algorithms. We test different deep learning algorithms including Multi Layer Perceptron (MLP), Convolutional Neural Network (CNN), Recurrent Neural Network (RNN), Gated Recurrent Units (GRU)
  arXiv  Detail & Related papers  (2022-12-10T21:21:14Z)
• Olive Branch Learning: A Topology-Aware Federated Learning Framework for Space-Air-Ground Integrated Network [19.059950250921926]
  Training AI models centrally with the assistance of SAGIN faces the challenges of highly constrained network topology, inefficient data transmission, and privacy issues. We first propose a novel topology-aware federated learning framework for the SAGIN, namely Olive Branch Learning (OBL) We extend our OBL framework and CNASA algorithm to adapt to more complex multi-orbit satellite networks.
  arXiv  Detail & Related papers  (2022-12-02T14:51:42Z)
• Artificial Intelligence Techniques for Next-Generation Mega Satellite Networks [37.87439415970645]
  This article introduces the application of AI techniques for integrated terrestrial satellite networks, particularly massive satellite network communications. It details the unique features of massive satellite networks, and the overarching challenges concomitant with their integration into the current communication infrastructure. This entails applying AI for forecasting the highly dynamic radio channel, spectrum sensing and classification, signal detection and demodulation, inter-satellite and satellite access network optimization, and network security.
  arXiv  Detail & Related papers  (2022-06-02T13:56:32Z)
• Model-based Deep Learning Receiver Design for Rate-Splitting Multiple Access [65.21117658030235]
  This work proposes a novel design for a practical RSMA receiver based on model-based deep learning (MBDL) methods. The MBDL receiver is evaluated in terms of uncoded Symbol Error Rate (SER), throughput performance through Link-Level Simulations (LLS) and average training overhead. Results reveal that the MBDL outperforms by a significant margin the SIC receiver with imperfect CSIR.
  arXiv  Detail & Related papers  (2022-05-02T12:23:55Z)
• Intermittent Jamming against Telemetry and Telecommand of Satellite Systems and A Learning-driven Detection Strategy [1.4620086904601468]
  A security deficiency in the physical layer is addressed with a conceptual framework, considering the cyber-physical nature of the satellite systems. A learning-driven detection scheme is proposed, and the lightweight convolutional neural network (CNN) is designed. The results show that deficiency attacks against the satellite systems can be detected by employing the proposed scheme.
  arXiv  Detail & Related papers  (2021-07-10T17:04:22Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.