Secure Fusion with Labeled Multi-Bernoulli Filter for Multisensor Multitarget Tracking Against False Data Injection Attacks

TL;DR

This paper introduces a method to track multiple targets using multiple sensors while defending against false data injection attacks.

Contribution

A novel algorithm combining labeled multi-Bernoulli filtering and Kullback–Leibler divergence for detecting and defending against FDI attacks in multisensor multitarget tracking.

Findings

The proposed algorithm efficiently detects false data injection attacks using Kullback–Leibler divergence between labeled multi-Bernoulli densities.

The method provides reliable tracking performance even when sensor networks are compromised.

A Gaussian implementation of the algorithm is presented for linear Gaussian models.

Abstract

What are the main findings?

A multisensor multitarget tracking algorithm against the false data injection (FDI) attacks over networks.A detection method for FDI attacks based on Kullback–Leibler divergence (KLD) between labeled multi-Bernoulli densities.

A multisensor multitarget tracking algorithm against the false data injection (FDI) attacks over networks.

A detection method for FDI attacks based on Kullback–Leibler divergence (KLD) between labeled multi-Bernoulli densities.

What is the implication of the main finding?

The proposed algorithm can efficiently detect/defend the FDI attacks and provide reliable tracking performance.

The proposed algorithm can efficiently detect/defend the FDI attacks and provide reliable tracking performance.

This paper addresses multisensor multitarget tracking where the sensor network can potentially be compromised by false data injection (FDI) attacks. The existence of the targets is not known and time-varying. A tracking algorithm is proposed that can detect the possible FDI attacks over the networks. First, a local estimate is generated from the measurements of each sensor based on the labeled multi-Bernoulli (LMB) filter. Then, a detection method for FDI attacks is derived based on the Kullback–Leibler divergence (KLD) between LMB random finite set (RFS) densities. The statistical characteristics of the KLD are analyzed when the measurements are secure or compromised by FDI attacks, from which the value of the threshold is selected. Finally, the global estimate is obtained by minimizing the weighted sum of the information gains from all secure local estimates to itself. A set of suitable weight parameters is selected for the information fusion of LMB densities. An efficient Gaussian implementation of the proposed algorithm is also presented for the linear Gaussian state evolution and measurement model. Experimental results illustrate that the proposed algorithm can provide reliable tracking performance against the FDI attacks.

Figures

Full text

1. Introduction

Multitarget tracking is to jointly detect and track the number of targets and their individual trajectories of multiple mobile targets. The number of targets is time-varying, i.e., new targets can appear and existing targets can disappear. The sensor’s measurements suffer from missed detection, false alarms, and uncertain associations between targets and measurements. Multitarget tracking is a fundamental topic in many engineering fields, including traffic control [1], remote sensing [2], and computer vision [3,4].

Various methods have been developed to perform the multitarget tracking. A popular class is the random finite set (RFS)-based recursive Bayesian filtering methods, which are mainly composed of two types: unlabeled and labeled methods. The unlabeled RFS-based methods include the probability hypothesis density (PHD) filter [5], the cardinalized PHD (CPHD) filter [6], and the multi-Bernoulli (MB) filter [7]. Compared to the unlabeled methods, the labeled RFS-based methods not only track the target states but also incorporate the target labels into the target states. The labeled RFS-based methods include the generalized labeled multi-Bernoulli (GLMB) filter [8] and the labeled multi-Bernoulli (LMB) filter [9,10].

The availability of low-cost sensors has employed multiple sensors to cooperatively perform the tracking tasks. A local estimate is first computed with the measurements of each sensor. Then, the global estimate is generated by fusing all local estimates. The most commonly used fusion method is the generalized covariance intersection (GCI) fusion [11], also called as exponential mixture density [12]. The global estimate produced by GCI fusion is actually the one that minimized a weighted average of Kullback–Leibler divergence (KLD) from all local estimates to itself [13,14]. It can be interpreted as the one that leads to minimum cross-entropy from the information-theoretic viewpoint. Using the GCI fusion rule, many algorithms have been proposed for different multisensor multitarget tracking scenarios, e.g., the sensors have different fields of view [15,16], sensor fusion with event-triggered communication [17,18,19], and so on. For the event-triggered communication in [17,18,19], each sensor evaluates the KLD between the current local density and the last transmitted one and selectively sends the information that is worth transmitting, i.e., the KLD exceeds a threshold.

During these works, it is assumed that the sensor networks are secure and trusted all the time. Unfortunately, the sensor networks, such as the networked radar system [20] and the intelligent transportation networks [21], are vulnerable to unforeseen breaches in security. Due to the open communication between sensors, the data may not be transmitted with proper security protections. It is of great importance to accurately and quickly detect the adversarial attacks.

Among various types of adversarial attacks, false data injection (FDI) attacks [22,23] are a major concern. The FDI attacks are known as specific deception attacks or integrity attacks. With a successful FDI attack, an adversary can gain access to the communication and modify the transmitted data between sensors, which can manipulate the estimated values of the state variables and disrupt the system’s operation.

How to detect and defend against FDI attacks has attracted much research attention. For single-target tracking in [24], the KLDs between local posteriors are used to partition the sensors into secure and insecure sensors. In [25], the relative entropy was utilized as a stealthiness metric to detect whether the data transmitted through the wireless network are attacked. In [26], the authors investigate the security of distributed filtering under false data injection attacks, and a new protection strategy is proposed. In [27], the authors investigate a distributed secure estimation problem for a nonlinear stochastic system subject to a false data injection attack. In [28], the authors apply sequential attack strategies to wireless mesh networks and conduct a comparative analysis with synchronous strategies. In these studies, the existence of the system state is known and time-invariant, so the dimension of system state is known and time-invariant. This is different from the multitarget tracking problem, where the targets may appear or disappear, i.e., the existence of system state is not known and time-varying, so the dimension of the system state is not known and time-varying. It is necessary to design the FDI detection method that is suitable for the multitarget tracking.

In this paper, we address multisensor multitarget tracking following a Bayesian filtering perspective where the sensor network may be compromised by FDI attacks. The transmitted data between sensors may be modified by the adversary. We propose a multisensor, multitarget tracking algorithm that can detect the possible FDI attacks over the network and provide robust and accurate tracking performance. More specifically, a local estimate is first generated from the measurements of each sensor based on the LMB filter. Then, a detection method for FDI attacks is derived with an information-theoretic criterion, where the KLD between LMB densities is utilized as a metric to quantify the similarity/difference of two local estimates. If the KLD between a local estimate and the reference estimate exceeds a given threshold, the local estimate is decided to be compromised by FDI attacks. Finally, the global estimate is obtained by minimizing the weighted sum of information gains from all secure local estimates to itself. An efficient Gaussian implementation of the proposed algorithm is also presented for the linear Gaussian state evolution and measurement model.

The contributions of this paper can be summarized as follows: (1) a detection method for FDI attacks is derived based on the KLD between LMB densities, and the statistical characteristics of the KLD are analyzed when the measurements are secure or compromised by FDI attacks, from which the value of the threshold is selected; (2) a set of suitable weight parameters are selected for the information fusion of LMB densities.

The rest of this paper is organized as follows. Section 2 describes the system model and the FDI attacks for multisensor multitarget tracking. Section 3 presents the proposed multisensor multitarget tracking algorithm that can detect and defend against the FDI attacks. Extensive numerical experiments are provided in Section 4. The paper is concluded in Section 5.

2. Problem Formulation and Background

In this section, we describe the state evolution model, measurement model, and FDI attacks for the multisensor multitarget tracking problem. This section also briefly recalls the labeled RFS and LMB filters.

2.1. Target State and Evolution Model

Suppose that there are multiple targets in the surveillance area at the time $[eqn]$ . The state vector of each target is defined as $[eqn]$ , where $[eqn]$ denotes the position and $[eqn]$ denotes the velocity of the target. The state could be extended to incorporate more variables if it is required. Both the number of targets and the state of each target are not known and time-variant.

Each target at a time $[eqn]$ may continue to exist or disappear at the next time $[eqn]$ . We denote the surviving probability that the target with state $[eqn]$ will continue to exist at the next time as $[eqn]$ . If the target $[eqn]$ continues to exist, its state evolves according to the nearly constant velocity model [29] as

$$[eqn]$$

where the transition matrix $[eqn]$ is given by

$$[eqn]$$

with the n × n identity matrix $[eqn]$ , the time interval $[eqn]$ , and the Kronecker product $[eqn]$ . The term $[eqn]$ is the additive Gaussian process noise with zero mean and covariance.

$$[eqn]$$

with the process noise intensity $[eqn]$ . Accordingly, the single-target transition density is given by

$$[eqn]$$

Other motion models can also be used in the state space framework. The multiple targets move independently in the surveillance area.

In addition, a set of new targets are born in the surveillance area at each time step. The number of new targets is distributed according to a discrete probability distribution, and the state of each new target is distributed according to a spatial density over the surveillance area.

2.2. Sensor Network and Measurement Model

We consider a set of $[eqn]$ sensors $[eqn]$ , which are geographically dispersed in the surveillance area. Each sensor has sensing, communication, and processing capabilities.

For each target $[eqn]$ at time $[eqn]$ , the _n_th sensor detects the target with probability $[eqn]$ , so the probability of the missed detection is $[eqn]$ . If the target $[eqn]$ is detected by the _n_th sensor, the measurement is governed by the single-target measurement model.

$$[eqn]$$

where the measurement matrix is $[eqn]$ , and $[eqn]$ is the Gaussian measurement noise with zero mean and covariance $[eqn]$ . Other measurement models can also be used in the state space framework.

Moreover, the _n_th sensor may detect a set of false alarms in the surveillance area. It is usually assumed that the number of false alarms is distributed according to a discrete Poisson distribution, and each false alarm is generated according to a spatial density $[eqn]$ over the surveillance area.

At each time $[eqn]$ , the sensors $[eqn]$ transmit their measurements to the first sensor. The first sensor recursively estimates the multitarget states based on the measurements from all sensors up to time $[eqn]$ .

2.3. FDI Attacks

The sensors $[eqn]$ transmit their measurements to the first sensor through some wired or wireless transmission. Generally, the sensors, such as the networked radar system [20] and the intelligent transportation networks [21], are spatially deployed in a monitoring region. The data may not be transmitted with proper security protections because of the broadcast nature. The wired or wireless connections between the _n_th sensor and the first sensor can be maliciously compromised.

If one measurement $[eqn]$ from the _n_th sensor arrives at the first sensor, the received measurement may be compromised by FDI attacks. The attacker hijacks the data packets from the communication channel and injects data packets that are intentionally inaccurate [20]. The compromised measurement under the FDI attack is modified as [20].

$$[eqn]$$

where $[eqn]$ is the FDI data injected by the attacker. A successful FDI attack can cause the state estimation to generate erroneous values. Since the FDI attack does not undermine the integrity of the data, it is stealthy (e.g., fools the popular $[eqn]$ detector) and difficult to be detected. It is important to protect the security of the transmitted data and detect/defend the FDI attacks in the networks.

2.4. Labeled RFS and LMB Filter

In order to distinguish individual targets, a distinct label $[eqn]$ is augmented to each target $[eqn]$ [8], where $[eqn]$ denotes the single-target state space. The target with a label is denoted as $[eqn]$ . Let $[eqn]$ be the projection $[eqn]$ . The space of all labels for targets born at time $[eqn]$ is denoted by $[eqn]$ . In the RFS formulation, the state of multiple targets with labels at time $[eqn]$ can be modeled as a labeled RFS.

$$[eqn]$$

where each target $[eqn]$ takes values in the state space $[eqn]$ . Then, $[eqn]$ is the set of labels of the RFS $[eqn]$ . Each element in $[eqn]$ has distinct label, i.e., $[eqn]$ (the sets $[eqn]$ and $[eqn]$ have the same cardinality). Similarly, the measurement set from the _n_th sensor can also be described as a RFS

$$[eqn]$$

where each measurement $[eqn]$ takes values in a single-target measurement space $[eqn]$ .

An LMB density can be completely specified by the parameter set [9].

$$[eqn]$$

where $[eqn]$ is the existence probability of the target with label $[eqn]$ , and $[eqn]$ is its spatial density. The multitarget density of LMB RFS with the parameter set $[eqn]$ is given by [9].

$$[eqn]$$

where $[eqn]$ if $[eqn]$ and 0 otherwise, which is the distinct label indicator, and

$$[eqn]$$ $$[eqn]$$

in which $[eqn]$ is a set of labels.

The single-sensor LMB filter estimates the multitarget states using the measurements from one sensor. For notation simplicity, we temporarily remove the index $[eqn]$ of $[eqn]$ in (8), and use the notation $[eqn]$ to denote the measurements from any one sensor.

At times $[eqn]$ , we denote the LMB prior density by

$$[eqn]$$

The newly born targets at time $[eqn]$ is also modeled as an LMB density.

$$[eqn]$$

Under the Bayes framework, the LMB filter recursively estimates the multitarget states with the LMB densities, including two steps: prediction and update.

The predicted multi-target density is an LMB density with the parameters [9].

$$[eqn]$$

where $[eqn]$ , and

$$[eqn]$$ $$[eqn]$$ $$[eqn]$$

where $[eqn]$ is the surviving probability and $[eqn]$ is the transition probability of the labeled target $[eqn]$ , and the inner product notation is defined as $[eqn]$ .

With the measurement $[eqn]$ from any one sensor, the updated multitarget density is approximated as an LMB density with the parameters [9].

$$[eqn]$$ $$[eqn]$$

where

$$[eqn]$$ $$[eqn]$$ $$[eqn]$$ $$[eqn]$$

and $[eqn]$ is the space of mapping $[eqn]$ such that $[eqn]$ if and only if $[eqn]$ (whose elements represent track-to-measurement association hypotheses) $[eqn]$ denotes the set of all subsets of $[eqn]$ , $[eqn]$ if $[eqn]$ and 0 otherwise, $[eqn]$ is the detection probability, and $[eqn]$ is the single-target likelihood function of the measurement $[eqn]$ corresponding to the labeled target $[eqn]$ .

3. LMB-Based Multitarget Tracking Against FDI Attacks

We derive a detection method for FDI attacks based on the KLD between LMB densities. The secure local estimates are then fused into a global estimate.

3.1. Basic Construction

The sensors $[eqn]$ transmit their measurements to the first sensor, then the first sensor estimates the multitarget states based on the measurements of all sensors. The estimation process includes three steps: (1) the first sensor computes a local estimate based on each sensor’s measurements with the LMB filter; (2) the first sensor detects the local estimates that are comprised by FDI attacks; (3) the first sensor fuses all secure local estimates into a global estimate.

At time $[eqn]$ , we denote the LMB prior density at the first sensor as that in (13). With the prior density and the LMB born density in (14), the first sensor computes the local estimate from the _n_th sensor’s measurements, and we denote the parameter set as

$$[eqn]$$

The corresponding LMB density with the form in (10) is denoted as $[eqn]$ . Since all local estimates are computed from the same prior density and born density, the label set $[eqn]$ is the same for all local estimates, and the labels corresponding to the same target in different set $[eqn]$ are also the same, i.e., there is no label mismatching problem.

Since the wired or wireless connections between the _n_th sensor and the first sensor may be maliciously compromised by FDI attacks, the compromised measurements will deteriorate the local estimates. It is necessary to detect the attacked sensor as well as the corresponding local estimates before the fusion process. In particular, since the first sensor directly has its measurements, it is not necessary to be transmitted over the wired or wireless connections, so it is assumed that the measurements of the first sensor are secure all the time.

For notation simplicity, we remove the index $[eqn]$ in $[eqn]$ and $[eqn]$ because all operations are executed at time $[eqn]$ in the rest of this section.

3.2. KLD-Based Detection of FDI Attacks

Because the measurements from the first sensor cannot be compromised by FDI attacks all the time, the local LMB density $[eqn]$ will be secure all the time. We consider $[eqn]$ as the reference density and utilize some metric for the discrepancy between each density $[eqn]$ ( $[eqn]$ ) and the reference density $[eqn]$ to detect the possible FDI attacks. We introduce a binary variable $[eqn]$ for the _n_th sensor such that $[eqn]$ if the measurements from the _n_th sensor are compromised by FDI attacks, and $[eqn]$ otherwise.

There are many ways to quantify the discrepancy of two densities. The KLD is a competitive alternative in many probabilistic detection problems. The KLD of two probabilistic densities $[eqn]$ and $[eqn]$ is defined as

$$[eqn]$$

where $[eqn]$ , and $[eqn]$ if and only if $[eqn]$ . The KLD quantifies how close a density is to a reference density. The KLD admits an elegant interpretation from an information-theoretic viewpoint, i.e., it represents the information gain achieved when the density $[eqn]$ is revised into the density $[eqn]$ [30].

The concept of the KLD can be extended to the multitarget RFS density with the set integral. If $[eqn]$ and $[eqn]$ are two RFS densities, the discrepancy between $[eqn]$ and $[eqn]$ can be measured by the KLD.

$$[eqn]$$

where the integral $[eqn]$ is a set integral defined by

$$[eqn]$$

The KLD is not symmetric, i.e., $[eqn]$ in general. The J divergence [31] symmetrizes the KLD as

$$[eqn]$$

where $[eqn]$ is usually called forward KLD and $[eqn]$ is reverse KLD [32].

By considering the discrepancy metric in (29), the following detection method for FDI attacks is adopted as

$$[eqn]$$

where the scalar τ is a design parameter that is tuned so as to achieve a desired performance. We will discuss the choice of τ in Section 4.2.

Substituting the LMB density $[eqn]$ with the parameter set $[eqn]$ into the KLD (27) and using the definition of set integral, it can be proved that [33]

$$[eqn]$$

where

$$[eqn]$$ $$[eqn]$$

Because all local estimates are computed from the same prior density and born density, there is no label mismatching problem, i.e., the term with label $[eqn]$ in the local density $[eqn]$ describes the same target as the term with label $[eqn]$ in the local density $[eqn]$ . The KLD $[eqn]$ can be computed in a label-wise manner.

3.3. Information Fusion

We denote the index set of secure local estimates after the detection of FDI attacks as

$$[eqn]$$

The local estimates $[eqn]$ in $[eqn]$ are not considered to be compromised by FDI attacks. In order to combine all local estimates in $[eqn]$ into a global estimate, the first sensor carries out the information fusion step. The goal of the fusion step is to compute the global density that encapsulates all the information provided by the local densities $[eqn]$ in $[eqn]$ which can provide better estimation performance.

From a view of information theory, the fusion of the local densities $[eqn]$ in $[eqn]$ is to find the density that has minimum divergence gain from all densities $[eqn]$ in $[eqn]$ with respect to a suitable metric. The global density can be obtained by minimizing the weighted sum of the information gains from all local densities in $[eqn]$ to itself as [13].

$$[eqn]$$

where $[eqn]$ denotes the information gain from the density $[eqn]$ to the density $[eqn]$ , and the non-negative weights $[eqn]$ reflect the relative information confidence of $[eqn]$ in comparison with the rest terms, which satisfies $[eqn]$ . The KLD $[eqn]$ between $[eqn]$ and $[eqn]$ is one of the popularly adopted metrics for the information gain.

It can be shown that the fusion density computed by the rule (35) with the KLD is given by [34].

$$[eqn]$$

The rule in (36) is also called the GCI fusion rule. It provides a weighted geometric mean in the form of an exponential mixture of the local densities.

Because all local densities $[eqn]$ in $[eqn]$ are LMB densities with the parameters $[eqn]$ , one can check that the global density $[eqn]$ in (35) is also an LMB density with the parameters [33].

$$[eqn]$$ $$[eqn]$$

Since the same target is described with the same label in the different parameter sets $[eqn]$ , the fusion step can be performed in a label-wise manner.

3.4. Implementation Issues

Each term of the LMB density in (14) of the newly born targets is commonly modeled as a Gaussian density.

$$[eqn]$$

where the model parameters $[eqn]$ and $[eqn]$ indicate the highest local concentrations of spontaneous birth, which can represent, for example, the airports where the target is mostly likely to appear [35].

The computation of $[eqn]$ in (32) is direct. In order to develop a computationally feasible implementation of $[eqn]$ in (33), we approximate the spatial density $[eqn]$ as a Gaussian density.

$$[eqn]$$

This result can be obtained by the commonly used Gaussian mixture implementation of the LMB filter and suitable pruning/merging operations. Because each term $[eqn]$ in $[eqn]$ describes only one target with the existence probability $[eqn]$ and the spatial density $[eqn]$ , the Gaussian approximation has enough accuracy.

Substituting the Gaussian form of $[eqn]$ into (33), it will have

$$[eqn]$$

where $[eqn]$ denotes the dimension of the variable $[eqn]$ , and $[eqn]$ means the trace of the matrix $[eqn]$ .

Moreover, substituting the Gaussian form of $[eqn]$ into (38), it will have

$$[eqn]$$ $$[eqn]$$ $$[eqn]$$

and $[eqn]$ in (37) and (38) has the form

$$[eqn]$$

If the n sensor is not compromised by FDI attacks, the value of $[eqn]$ will be closely approximate to the value of $[eqn]$ , both of which are the existence probability of the same target with label $[eqn]$ . Similarly, the value of $[eqn]$ is also closely approximate to $[eqn]$ with the assumptions of the shared prior and the uniform Kalman gains. So the values of $[eqn]$ in (32) and $[eqn]$ in (41) are much smaller than the value of $[eqn]$ in (41). The main part of $[eqn]$ will be decided by the quadratic form $[eqn]$ . The distribution of the quadratic form can be approximated with a general $[eqn]$ distribution.

3.5. Choice of Weighting Parameters

Substituting (31) into the weighted sum of the information gains (35), it will be

$$[eqn]$$

where the same weight $[eqn]$ is used for all $[eqn]$ . We revise the information gains as

$$[eqn]$$

i.e., the different weight $[eqn]$ is used for different $[eqn]$ .

From the fused covariance $[eqn]$ in (43), the optimality in the mean square error sense is as follows [36]

$$[eqn]$$

For each $[eqn]$ , a suboptimal solution is then given by

$$[eqn]$$

The suboptimal solution is calculated for each track $[eqn]$ .

The proposed algorithm is summarized in Algorithm 1. The computational burden at the first sensor mainly includes two parts: (1) The first sensor computes the KLDs $[eqn]$ in (31) for each $[eqn]$ with $[eqn]$ in (32) and $[eqn]$ in (41); (2) The first sensor computes the fused parameters $[eqn]$ in (43) and $[eqn]$ in (44). Algorithm 1: Multisensor Multitarget Tracking Against FDI AttacksInput: The prior density $[eqn]$ .Output: The posterior density $[eqn]$ .1. The first sensor receives the measurements $[eqn]$ in (8) from the _n_th sensor ( $[eqn]$ ).2. The first sensor computes the predicted density $[eqn]$ in (15).3. For each measurement $[eqn]$ $[eqn]$ , the first sensor computes the local updated density $[eqn]$ in (25) with (19) and (20), where $[eqn]$ is approximated as a Gaussian density in (40).4. The first sensor detects the FDI attacks with (30), where $[eqn]$ is computed with (31)–(33) and (41).5. The first sensor computes the fused density $[eqn]$ with (37), (38), and (42)–(45).

4. Performance Evaluation

In this section, we present the performance evaluation of the proposed algorithm via simulation experiments.

4.1. Simulation Setup

The considered scenario is to track multiple targets that move inside the $[eqn]$ surveillance area. The target’s state is represented by a 4-D vector, with 2-D position and 2-D velocity components. The survival probability of the target with state $[eqn]$ is set to a constant $[eqn]$ . The target dynamics of the survival targets are described by the constant velocity model in (1), with the sampling interval $[eqn]$ in (2) and (3). The process noise intensity in (3) is set to $[eqn]$ . The LMB density in (14) and (39) of the newly born targets includes 4 terms, which is denoted as $[eqn]$ . Each term has the following form:

$$[eqn]$$ $$[eqn]$$ $$[eqn]$$ $$[eqn]$$

The birth probability of each term in (14) is $[eqn]$ , $[eqn]$ .

During the simulations, the total time steps are set to $[eqn]$ . It is assumed that no target exists at the initial time $[eqn]$ . Two new targets appear at time $[eqn]$ , $[eqn]$ , $[eqn]$ and $[eqn]$ respectively, and two existing targets disappear at time $[eqn]$ . The starting and ending times of the trajectories of eight targets are depicted in Figure 1.

The surveillance area is monitored by a sensor network with $[eqn]$ sensors that $[eqn]$ will be considered respectively. The detection probability of each sensor is set to a constant. $[eqn]$ . The variance of measurement noise in (5) is set to

$$[eqn]$$

where $[eqn]$ m and $[eqn]$ m will be considered later. The number of false alarms received by each sensor is distributed by a Poisson distribution with mean $[eqn]$ . The spatial density $[eqn]$ that describes each false alarm is a uniform distribution over the surveillance area.

We evaluate the tracking performance in terms of the optimal subpattern assignment (OSPA) metric [37]. Denote the actual multitarget state at time $[eqn]$ as $[eqn]$ and the estimated multitarget state as $[eqn]$ (we remove the time index $[eqn]$ for briefly), where $[eqn]$ and $[eqn]$ are the number of actual and estimated targets, respectively. The OSPA metric is defined as

$$[eqn]$$

if $[eqn]$ , and $[eqn]$ if m > n, where $[eqn]$ is the set of permutations on $[eqn]$ , $[eqn]$ is the distance between $[eqn]$ and $[eqn]$ cut off at $[eqn]$ , and $[eqn]$ . The OSPA metric can capture the cardinality errors and state errors meaningfully. The parameters for the OSPA metric are set to $[eqn]$ and the cutoff parameter $[eqn]$ in the simulations.

4.2. Choice of Parameter τ

We consider that the FDI data $[eqn]$ in (6) has the form

$$[eqn]$$

where $[eqn]$ is the measurement variance in (54), and different values of $[eqn]$ will be considered in the experiments.

To choose the parameter τ in (29), we first investigate the distributions of $[eqn]$ when the sensor is secure or it is compromised by FDI attacks. With the simulation results, Figure 2 (where $[eqn]$ ) presents the distributions of $[eqn]$ when the sensor is secure, i.e., $[eqn]$ , and when the sensor is compromised by FDI attacks with $[eqn]$ . Figure 3 presents the distributions of $[eqn]$ with $[eqn]$ and $[eqn]$ .

Let $[eqn]$ be the random variable that describes the distribution of $[eqn]$ when the sensor is secure, and $[eqn]$ be the random variable that describes the distribution of $[eqn]$ when the sensor is compromised by FDI attacks. We choose the parameter τ as

$$[eqn]$$

where $[eqn]$ is the probability that the secure sensor is misjudged as a compromised sensor, and $[eqn]$ is the probability that the compromised sensor is misjudged as a secure sensor. On the other hand, if we do not have the knowledge of $[eqn]$ , we choose the parameter τ as

$$[eqn]$$

where $[eqn]$ is a suitable probability.

4.3. Experimental Results

We investigate and compare the following algorithms:

1. The proposed algorithm (PA1) where the parameter τ is computed with (57).
2. The proposed algorithm (PA2) where the parameter τ is computed with (58).
3. The comparison algorithm (CA1) that has the exact knowledge of the secure sensors and fuses the secure local estimates into a global estimate.
4. The comparison algorithm (CA2) that fuses all local estimates into a global estimate.
5. The comparison algorithm (CA3) that estimates the state only with the measurements from the first sensor.

First, we consider a sensor network with $[eqn]$ sensors. The first sensor is secure during whole the time interval. The second and third sensors are compromised by FDI attacks from time $[eqn]$ to $[eqn]$ . The fourth and fifth sensors are comprised by FDI attacks from time $[eqn]$ to $[eqn]$ . We repeat independent Monte Carlo runs to evaluate and compare the performance of these algorithms. The measurement noise variance is set to $[eqn]$ . Three cases of the parameter $[eqn]$ are considered. Case 1: the parameter $[eqn]$ in (56) is a constant $[eqn]$ . The parameter τ in (57) is then computed as $[eqn]$ with (57) and the results in Figure 3. We present the average OSPA performance of the algorithms at each time step in Figure 4. Case 2: the parameter $[eqn]$ in (56) is a constant as $[eqn]$ . The parameter τ in (30) is computed with (57) and the results in Figure 3. We present the time-average OSPA performance of the algorithms at these values of $[eqn]$ in Figure 5. Case 3: $[eqn]$ is not a constant and a new value of $[eqn]$ is generated as $[eqn]$ where $[eqn]$ at the time $[eqn]$ . The parameter τ in (30) is computed with (58), where the probability $[eqn]$ is set to $[eqn]$ and the result τ is $[eqn]$ . We present the average OSPA performance of the algorithms at each time step in Figure 6. From Figure 4, Figure 5 and Figure 6, the proposed algorithm can detect/defend the FDI attacks and provide the estimation performance that is close to the CA1, which has the exact knowledge of the secure sensors.

Second, we consider a sensor network with $[eqn]$ sensors. The first sensor is secure during whole the time interval. The sensors $[eqn]$ are compromised by FDI attacks from time $[eqn]$ to $[eqn]$ . The sensors $[eqn]$ are compromised by FDI attacks from time $[eqn]$ to $[eqn]$ . The number of attacked sensors is $[eqn]$ at each time from $[eqn]$ to $[eqn]$ . The measurement noise variance is set to $[eqn]$ . Figure 7 presents the average OSPA performance of the algorithms when the parameter $[eqn]$ in (56) is a constant $[eqn]$ and the number of sensors is $[eqn]$ . Figure 8 presents the time-average OSPA performance of the algorithms when the parameter $[eqn]$ in (56) is a constant $[eqn]$ and the number of sensors is $[eqn]$ . Figure 9 presents the time-average OSPA performance of the algorithms when the parameter $[eqn]$ is generated as $[eqn]$ where $[eqn]$ at the time $[eqn]$ , and the number of sensors is $[eqn]$ . From Figure 7, Figure 8 and Figure 9, as the number $[eqn]$ of sensors increases, the proposed algorithm can provide better estimation performance, while the performance of CA2 becomes worse.

5. Conclusions

We proposed a multisensor multitarget tracking algorithm that can detect the possible FDI attacks over the sensor networks. With a successful FDI attack, an adversary can manipulate the estimated values of the state variables and disrupt the system’s operation. A local estimate is first generated from the measurements of each sensor based on the LMB filter. A detection method for FDI attacks is then derived based on the KLD between LMB densities. Finally, the global estimate is produced by GCI fusion from all secure local estimates. To select the value of the threshold parameter, the statistical characteristics of the KLD are also analyzed when the sensor is secure or compromised by FDI attacks. A set of suitable weight parameters is selected for the information fusion of all secure local estimates. An efficient Gaussian implementation is also presented for the linear state-space model. Extensive experimental results illustrate that the proposed algorithm can efficiently detect/defend the FDI attacks and provide reliable tracking performance.