Discovering Antagonists in Networks of Systems: Robot Deployment
Ingeborg Wenger, Peter Eberhard, Henrik Ebel
TL;DR
This paper addresses detecting antagonists in robot swarm surveillance by learning a context-conditioned action likelihood $p_a(a|s)$ from normal deployment data using a spline-based normalizing flow. It introduces a robust context embedding via a bidirectional LSTM and a refined action representation, and compares three detectors, with the mean-log-prob criterion delivering high sensitivity (>$80\%$) at a controlled false positive rate ($FPR\leq 5\%$). The method, tested on simulated scenarios and hardware with the HERA robots, outperforms the previous WengerEbelEberhard24 approach in both predictive performance and detection robustness, and is capable of operating without labeled anomaly data. The work demonstrates practical impact by enabling on-line identification and countermeasures against antagonists in swarm deployments, with code and data publicly available.
Abstract
A contextual anomaly detection method is proposed and applied to the physical motions of a robot swarm executing a coverage task. Using simulations of a swarm's normal behavior, a normalizing flow is trained to predict the likelihood of a robot motion within the current context of its environment. During application, the predicted likelihood of the observed motions is used by a detection criterion that categorizes a robot agent as normal or antagonistic. The proposed method is evaluated on five different strategies of antagonistic behavior. Importantly, only readily available simulated data of normal robot behavior is used for training such that the nature of the anomalies need not be known beforehand. The best detection criterion correctly categorizes at least 80% of each antagonistic type while maintaining a false positive rate of less than 5% for normal robot agents. Additionally, the method is validated in hardware experiments, yielding results similar to the simulated scenarios. Compared to the state-of-the-art approach, both the predictive performance of the normalizing flow and the robustness of the detection criterion are increased.
