{'fraction_non_alphanumeric': 0.03328798448490462, 'fraction_numerical': 0.009754826757750312, 'mean_word_length': 4.750332889480692, 'pattern_counts': {'":': 0, '<': 2, '<?xml version=': 0, '>': 5, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 7, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
Detection of Transmitted Power Violation Based on Geolocation Spectrum Database in Satellite-Terrestrial Integrated Networks

This paper investigates the detection of the transmitted power violation (TPV) in the satellite-terrestrial integrated network, where the terrestrial base station may break the spectrum policies so that severe damages are made to the satellite systems. Due to the lack of prior information on specific abnormal behaviors, this problem is complex and challenging. To tackle it, we first turn to the geolocation spectrum database based detecting framework, where not only the tasks of each segment but also the spectrum policies are specified. Then, the ternary hypothesis test and the generalized Neyman–Pearson (GMNP) test criterion are applied to maximize the detection probability under the false-alarm constraint. What is more, the Abnormal after Normal (AaN) detector is developed to simplify the analysis. Finally, simulations are conducted to demonstrate that the proposed detector can realize the detection of TPV in most cases at the expense of less than 10% detection probability.


Background and Motivation
With the rapid development of satellite communication, the satellite-terrestrial integrated network has become a new way to enhance the spectrum efficiency [1][2][3][4][5][6][7][8]. However, in the satellite-terrestrial integrated network, the terrestrial networks from different sources have different requirements and diversified states, which is very easy to breed abnormal spectrum using behavior. The order of spectrum usage is seriously disrupted. Therefore, to maintain the order of the spectrum, it is necessary to monitor the abnormal spectrum behavior in the satellite-terrestrial integrated network.
Spectrum policies are designed to achieve full-spectrum use with acceptable interference by the geolocation spectrum database [9][10][11][12]. However, spectrum usage can be optimally realized only by strict implementation of spectrum policies. Considering malicious attacks, selfish motivations, equipment failures, and many other factors, the spectrum order may be attacked by spectrum misuse [13], such as illegal access, abnormal power transmission, etc. TPV is a typical abnormal spectrum behavior, which has many inducing factors, resulting in the terrestrial base station transmitting power deviating from the established transmitting power. From the perspective of selfish drive or equipment failures, the illegal behaviors of TPV can be divided into the following two categories.
One is aggressive power transmission; to achieve a higher data rate and improve their own benefits or the equipment is out of order, the selfish or faulty terrestrial base station may violate the limits of transmitted power and work at a higher transmitted power level. However, the satellite earth station and other terrestrial base stations may be subject to more interference, and consequently, the overall performance of the network shows a downward trend. The other is passive power transmission; this occurs when terrestrial stations operate with lower power than allocated. According to Shannon's capacity formula [14], the result of this behavior is a decrease in the transmission rate. As a result, it takes longer to transmit the specified content, and the extended transmission time allows the ground station to obtain an exaggerated duty cycle. Therefore, it can apply to the geolocation spectrum database for more spectrum access opportunities [15]. At the same time, it prevents other terrestrial base stations from obtaining the spectrum access opportunities which they deserve. When it comes to the detection of the TPV, the existing studies mainly focus on the detection in the scenario of terrestrial spectrum sharing rather than terrestrial-satellite spectrum sharing, however, considering the appearance of satellite signal, which may bring extra difficulty to the detection. What is worse, in the scenario of terrestrial-satellite spectrum sharing, aiming at protecting the spectrum order, the existing work mainly focuses on the available transmitted power level rather than the detection of TPV. Motivated by the above observation, it is of great importance to detect the TPV in the scenario of terrestrial-satellite spectrum sharing to prevent this relatively covert behavior from jeopardizing the whole network.
In general, in the satellite-terrestrial integrated network, the terrestrial network can apply for spectrum resources from the satellite system with the help of the geolocation spectrum database to realize satellite-terrestrial spectrum sharing. However, when the transmission power of the terrestrial base station is abnormal, it may affect the normal work of other terrestrial base stations or satellite earth stations, or hinder the normal application of other ground base stations to access, and eventually reduce the spectrum efficiency of the whole network.

Related Work
Spectrum policies are under the premise that the geo-spectrum database authorizes the users who have a requirement to utilize the spectrum. What is more, no business can be conducted on these premises lest incurring heavy penalties. However, there always will be some users who may break these rules to improve their own benefits and further cause severe damages to the authorized user. Existing studies about the detection of the TPV mainly concentrate on the joint detection and estimation of spectrum misuse [16][17][18][19]. In ref. [16], generalized multi-hypothesis Neyman-Pearson (GMNP) criterion is utilized to detect the illegal access in the terrestrial networks where violating the spectrum access schedule is defined as opportunistic illegal access. In ref. [17], a hybrid binary hypothesis test is adopted to detect the abnormal power emission of the secondary user and further ensure the communication of other secondary users rather than the primary user. In ref. [18], aiming at determining the legitimacy of the working secondary users, a new cooperative spectrum sensing scheme is proposed to solve this problem in the presence of a primary user emulation attack (PUEA). In ref. [19], outage probability which can reflect the impact of secondary transmissions on the primary receiver is used to evaluate the performance of the spectrum sensing techniques. Note that in those studies, the spectrum sharing scenario mainly focuses on terrestrial networks rather than satellite-terrestrial integrated networks.
While in the scenario of satellite-terrestrial integrated networks, the authors propose the cognitive satellite-terrestrial radios for satellite-terrestrial integrated systems [20] for the first time. In ref. [8], aiming at protecting the communication of the satellite, the concept of the protected area is proposed by means of accumulating the interference of terrestrial base stations, and furthermore, the protection radius is deduced. According to the interference power level, the models of interference in the satellite-terrestrial integrated networks have been formulated in ref. [21]. The available transmitted power levels are figured out by analyzing the interference between geostationary (GEO) satellite systems and non-geostationary (NGEO) satellite systems, where the GEO satellite is regarded as the primary user and NGEO satellite is regarded as the secondary user, respectively [7]. Note that, however, some studies analyze the available transmitted power levels but few on detection of the TPV in the satellite-terrestrial integrated networks.
To the best of the authors' knowledge, there are no existing studies considering the detection of TPV in the satellite-terrestrial integrated networks. In the scenario of satellite-terrestrial spectrum sharing, the existence of satellite signals, which interferes with the detection of TPV, bringing great difficulties to the distinction of abnormal signals from normal signals. However, to protect the communication of the whole network, it is of great importance to propose and study the behavior of TPV.

Contributions
In this paper, we investigate the geolocation spectrum database-based detection of TPV in a satellite-terrestrial integrated network, where every sensing node allocated in this network collects and processes the sensing data. In particular, the main contributions of this paper can be summarized as follows: • Formulate a generalized model for spectrum sharing in the satellite-terrestrial integrated networks, where the terrestrial base station can apply to the geolocation spectrum database for the available spectrum of the satellite.

•
Propose a detection framework based on geolocation spectrum database, which specifies the tasks and roles of the satellite-terrestrial integrated network, surveillance network, and geolocation spectrum database no matter when the terrestrial base station operates at the single power level or multiple power level.

•
Analyze the optimization problem under both single and multiple transmitted power level scenarios, and further the AaN detector is derived.

•
Provide comprehensive simulations under various parameter configurations, which represent that the superiority and effectiveness of the proposed detecting framework.
The remainder of this paper is organized as follows. The system model of TPV is formulated in Section 2. Section 3 derives the test statistics under both single and multiple transmitted power levels. Simulation is given in Section 4, followed by the conclusion in Section 5.

Database-Based Detection Framework
In this paper, terrestrial base stations are considered to apply for the downlink spectrum opportunities from satellite networks through the geolocation spectrum database, as shown in Figure 1.
Firstly, the terrestrial base station forwards the spectrum usage requirements to the geolocation spectrum database, and then the geolocation spectrum database allocates the corresponding spectrum resources and formulates the corresponding spectrum utilization rules. At the same time, the geolocation spectrum database shares the spectrum utilization information of the spectrum users which includes the allocated channel, the optional transmitted power levels, and the working state of satellite with surveillance network. Next, the spectrum surveillance network distributes the monitoring task to the sensing nodes by combining the monitoring target and the relative positions of the sensing nodes. Each sensing node monitors the allocated channel, determines whether the target user violates the spectrum using rules according to the observation of a certain time slot, and reports the judgment result to the fusion center. Finally, according to the reported data of the sensing nodes, the fusion center feedbacks the detection result of the TPV after the integration and the analysis of the data to the management center.  Figure 1. The generalized detection model for the transmitted power violation (TPV) in the downlink scenario of satellite-terrestrial spectrum sharing, which consisted of satellite-terrestrial integrated network, geolocation spectrum database, and surveillance network.

Hybrid Hypothesis Testing Model
For normal spectrum usage, when the satellite (PU-T) is working, the channel is occupied by the satellite signal (N 0 ) or the terrestrial base station (SU-T) with the permitted L level transmitted power (N l ), and the spectrum sharing state is expressed as follows: where y k (m) is the sampling of the m-th signal received by the k-th sensing node, m = 1, 2, . . . , M, M denotes the number of samples, h 0,k is the gain from the satellite to the k-th sensing node, and h 1,k is the channel gain from the terrestrial base station to the k-th sensing node, P (l) t represents the l-th transmitted power level of L power levels, w k (m) ∼ N 0, σ 2 w denotes the Gaussian white noise, s k (m) is the sampling of transmitted signals (normalized to unit power), i.e., s k (m) ∼ N (0, 1). P 0,k denotes the signal received power of the primary user at the k-th sensing node, satisfying [22] where P 0 represents the transmitted power of the primary user (satellite), and h 0,k (θ 0,k ) represents the antenna gain of the satellite at the direction of θ 0,k , with d 0,k as the distance between the transmitter of the primary user and the k-th sensing node, with propagation factor A g as gaseous absorption and A c as cloud or fog attenuation [23][24][25]. A g can be further given by and A w are the specific attenuations due to water vapor and dry air, respectively, and the imaginary part of the frequency-dependent complex refractivity N ( f ) is referred to [26]. What's more, the specific attenuation within a cloud or fog A c [27] can be represented as as the specific attenuation coefficient η = (2 + ε ) /ε , ε and ε denote are the imaginary part and real part of the dielectric permittivity ε of water C represents liquid water density in the cloud or fog.
As shown in Figure 2, θ 0,k is the off-axis angle of the GEO satellite in the direction of the k-th sensing node and can be further calculated by θ 0,k = arctan( d 0,k h ). Moreover, the GEO satellite antenna gain h 0,k (θ 0,k ) refers to the standard in ITU-R.S.672-4 [28] can be described as: where h s,max is the maximum gain of the GEO satellite antenna, θ s,b is the one half the 3 dB beamwidth, L n is the desired side-lobe level relative to peak gain. θ 1 is the value of θ 0,k , when Equation (4) is valid. For L n = −20, the values of b and c are 2.58 and 6.32, respectively. Quite different from the conventional terrestrial heterogeneous networks, h 0,k (θ 0,k ) represents the characteristics of satellite communication, while the antenna of the transmitter in terrestrial heterogeneous networks is the omni-directional antenna, that is, the gain is always constant.
It is important to note that there is only one option for normal transmitted power, namely L = 1, in most of the literature. However, users may work as multiple discrete transmit power levels, i.e., L ≥ 2 , in practice. Therefore, the diversity of the normal state of the spectrum will make the detection of TPV more difficult. What is worse, in the actual usage of the spectrum, there are a variety of uncertain factors, such as equipment failure, selfish drive, malicious attack, etc., which make the transmission power abnormal. As a result, there are abnormal use states in addition to normal use states of the above spectrum usage.
where P a denotes the abnormal transmitted power, P t =0 represents only PU is working (H 0 ). The deviation of P a and the permitted power level which can be measured denotes the degree of abnormality of the transmitted power.
It is necessary to distinguish the abnormal use state from the normal use state to realize the orderly spectrum use in the satellite and terrestrial integrated network. The detection problem can be modeled as the following mixed binary hypothesis test problem: where null hypothesis O 0 contains all the normal spectrum states N 0 , N 1 , ..., N L . The alternative hypothesis O 1 is equal to A, where P a distributes over a certain range. However, P n contains a lot of cases. Both O 0 and O 1 are composite consequently. At present, most detection algorithms focus on the test problem under the simple null hypothesis, while few studies involve multiple discrete components. The uncertain normal state and unknown abnormal power increase the difficulty of detection, especially in the above problems. Therefore, the current method cannot be directly applied to the problem in Equation (6). Based on the above observations, it is necessary to design an effective detector for the mixed binary hypothesis testing problem. What needs to be pointed out, in particular, is that there are two possible errors, false alarm, and omission, in the process of detecting the TPV. Specifically, as for false alarm, misjudging the existence of violations may cause the target users to suffer undeserved punishment, and the omission of violations will encourage the offending users, which will seriously weaken the efficiency of spectrum usage. Therefore, it is necessary to reduce the occurrence probability of two kinds of errors, that is, to reduce the probability of missed detection and false alarm. However, there is a trade-off between missed detection probability and false alarm probability. Next, according to the compromise problem, the detection criteria under different performance requirements are analyzed, and the corresponding detection methods are derived.

Detection Criteria under Heterogeneous False Alarm Constraint
Before expanding to the multi-power level scenario, this subsection considers the detection of abnormal transmission power behavior at the power level L = 1. Therefore, the question can be reformulated as: Considering the difference in sensitivity of different normal states to abnormal behaviors in some scenarios, it is necessary to differentiate performance constraints. Therefore, the optimization objective adopted in this section can be expressed as: where, α 0 and α 1 are false alarm constraint constants, Pr O i |O j represents the probability of being judged as α i when α j is true. To facilitate the subsequent expression, the above problems can be equivalent to the Ternary Hypothesis test problem as follows: where σ 2 0 =σ 2 ω +P 0 h 2 0,k , and σ 2 t . Therefore, the optimization objective in Equation (8) can be reformulated as: where Pr H 2 |H j , j ∈ 0, 1, 2 represents the probability of being judged to be H 2 if the actual state is H 1 .

Single-Node Detection under Heterogeneous False-Alarm Constraint
Noted that this is an optimal problem with multiple constraints, so the Lagrange multiplier method is adopted to establish the objective function as follows: where y = [y k (1), y k (2), ..., y k (M)], and C is the judgment domain that determines the existence of violation behaviors, satisfying Pr (H 2 |H i ) ∆ = y∈C p (y; H i ) dy. Therefore, to maximize Pr (H 2 |H 2 ), as for any y ∈ C, p (y; where σ 2 2 is the variance of observed data in the case of TPV (H 2 ). The test statistic is T = N−1 ∑ n=0 y 2 n . Therefore, the sensing node adopts the energy detection method. Next, R is used to represent the judgment domain about T where the violation behavior exists, which is equivalent to the judgment domain about y.
However, due to various factors, there is no prior information on abnormal behavior, and the key parameters, σ 2 2 , are unknown consequently. Therefore, for the detection problem of a lack of prior information, the generalized likelihood ratio test is a solution.
First of all, the maximum likelihood estimation of the unknown parameter σ 2 2 is obtained through ∑ n=0 y 2 n /N, which can be substituted into Equation (12) to obtain: where λ i = ρ i e Nσ 2 i N 2 , due to the presence of abnormal power, σ 2 2 > σ 2 0 . Therefore, in R, T > Nσ 2 0 . Hence, the judgment domain can be expressed as: where λ i is determined by the false alarm constraint in the target function. As a result, the result of the judgment on the abnormal behavior can be expressed as d = 1 T ∈ R 0 T / ∈ R , where d = 1 indicates the existence of abnormal transmission power.
When H i is true, the test statistics obey the Chi-Square distribution: T = N−1 ∑ n=0 y 2 n ∼ χ 2 N σ 2 i . Therefore, the detection probability can be derived from the following equation: By introducing equation This region may partly belong to the decision domain, but it's closely related to the SNR under normal conditions, i.e., where η 0 , η 1 , η 2 are the three solutions of the introduced function ∑ i∈[0,1] g i (T) = 1, T > Nσ 2 0 . At this point, the two false alarm probabilities Pr( H 2 |H 0 ) and Pr (H 2 |H 1 ) reach the upper limit, respectively, which satisfies Pr( H 2 |H 0 ) =α 0 , Pr (H 2 |H 1 ) =α 1 .

Multi-Node Detection under Heterogeneous False-Alarm Constraint
To further improve detection performance, this subsection considers the collaborative detection of multiple nodes. Specifically, after N nodes make their decisions, the decision results will be reported to the fusion center, which will conduct data fusion and further give a global decision. At this time, aiming at weakening the influence of the PU-T on the sensing data, the node selection mechanism based on SINR is chosen because SINR can well reflect the influence of PU-T on the sensing data. Specifically, the SINR at the k-th sensing node can be represented as: where α is the path fading factor, d 1 is the reference distance, p 1 is the estimated power at the reference distance, d 1,k is the distance from the secondary user to the k-th node and W k is the noise power at the k-th node. Therefore, the set of the sensing nodes which participate in the global decision can be obtained by: where the threshold χ is a changeable constant and the value of χ can be adjusted slightly according to the detection performance. Further, the 'L out of K' is adopted as a decision rule, i.e., with d k ∈ {0, 1} represents the decision result of the k-th sensing node, and L is the global decision threshold. Consistent with single-node detection, multi-node detection adopts the similar detection criteria, namely maximizing detection probability under the constraint of global false alarm probability: where β 0 and β 1 are global false alarm probability constraints, 0 < β 0 ≤ α 0 , 0 < β 1 ≤ α 1 . When the distance between nodes is much less than the distance between nodes and users, the detection performance of each node is close. Therefore, assuming that the performance of each node is the same, the false alarm constraint can be expressed as: From the above equation, when the global decision threshold increases, the two false alarm probabilities increase, and the global detection probability also increases. Therefore, to maximize the detection probability, the optimal global decision threshold should be set to the minimum value satisfying two constraints. Therefore, Equation (19) can be solved respectively, which can be further simplified as L ≥ L 0 , L ≥ L 1 , where L 0 and L 1 is the minimum solution of the equation when i = 0, 1, respectively. Finally, the larger one will be chosen as the global decision threshold.

Detection of TPV at Multiple Power Levels
Different from the heterogeneous false alarm constraint in Equation (8) in the previous subsection, the Neyman-Pearson criterion is used in this section, that is, maximizing detection probability under the constraint of false alarm probability. Specifically, the criterion can be expressed as follows: where Pr (O 1 |H l ) Pr (H l |O 0 ), α represents the false-alarm constraint.

Generalized Maximum Likelihood Detection
For the above problems, the likelihood ratio detection is derived as follows: where p (P a |O 1 ) is the probability density function of abnormal power, Pr P (l) t |O 0 denotes the conditional distribution of normal channel state, and the value of decision threshold λ B is determined by the false alarm constraint in Equation (20). The temporary symbol P r is introduced to represent any transmitted power, and the conditional probability of the sample under the transmitted power is expressed as follows: Replace P r with P a and P (l) t , and substitute them into Equation (21) respectively, the test statistics can be obtained as T = M ∑ m=1 y 2 (m). This means that the energy detector is optimal for detecting emission power anomalies when the information is fully known. However, the probability density function of abnormal power p (P a |O 1 ) is often unknown, so the detector mentioned above cannot be realized. Hence, a more practical detection method needs to be designed.
To solve the problem of detecting abnormal transmission power under unknown distribution, the generalized likelihood ratio (GLR) detector is derived by maximum likelihood estimation of unknown parameters in this section. Firstly, we can take the derivative of p (y|P a ) with respect to P a , and the maximum likelihood estimation of P a can be obtained: And then we can get By introducing C T, P , the GLR detector can be expressed as It should be noted that the detector can achieve the optimization objective in Equation (20) approximately optimally, however, it is difficult to carry out theoretical analysis due to the existence of the sum of several higher-order components.

The AaN Detector
To simplify the GLR detector, a detector that is easy to analyze theoretically is designed. This subsubsection proposes a two-step detector, the AaN detector, whose core idea is to first select the most likely normal state, and then determine whether there is abnormal behavior.
Specifically, in the first step, the maximum a posterior (MAP) criterion is adopted to select the most likely one from multiple normal power levels, which can be expressed as: In the second step, the likelihood ratio between the normal state and the abnormal state is derived. The power in the abnormal state is estimated by Equation (23), and the power in the normal state is the power level selected by Equation (26). Specifically, the likelihood ratio is expressed as follows: We also have: As C T, P where p (l) m . In particular, in the AaN detector, this subsubsection simplifies the expression of detector through two-step decomposition, thus making detection performance analysis possible. Furthermore, based on this, the threshold can be set more reasonably.

Threshold Setting
By introducing f l (T) = C T, P Further, as shown in Figure 3, due to the existence of multiple normal power levels, the decision domain is divided into N + 1 small intervals as follows: and R i ∪ R j = ∅, n, i, j ∈ {0, 1, . . . , N}, i = j. Further, there are three special statements about the decision domain as follows: • η (n) 0 > Mσ 2 0 , when the terrestrial user is working, its actual transmitted power P r > 0. The variance of the observed quantity y k (m) must be greater than σ 2 0 , so the estimated variance of the observed data should be greater than Mσ 2 0 ; • η  Figure 3. The decision field of AaN detector (P a = 1 W), which is divided into N + 1 small intervals due to the existence of multiple normal power levels.
As T|P t . Therefore, the detection probability can be obtained from the following equation: where σ 2 a =σ 2 0 +h 2 1,k P (l) a . The false alarm probability can be obtained by Equation (32): Next, to understand the inner mechanism of the detector more clearly and deeply, an approximate estimation of the AaN detector is made based on the following points: • The distance between each power level is always reasonably set so that each power level can be distinguished. Finally, between the two adjacent peak points, namely, in the interval D l = M h 2 1,k P (l) , the detector can be approximated as The decision field is given by Theorem 1: The intersection of decision field and interval D l cannot be an empty set, which is expressed as: where T (l) t + σ 2 n , hence, the two thresholds can be expressed as: where, x 0 is the smaller solution to xe 1−x p (l+1) 0 = λ M , and x 1 is the larger solution to xe 1−x p (l) 0 = λ M .

Simulation Results
As for the simulations, the model of the GEO satellite refers to refer to Astra system and O3b (Other 3 billion) system. Specifically, the Equivalent isotropically radiated power (EIRP) of the satellite is set to be 62.7 dBW. The transmitted power of the satellite is set to be 37.15 W. The center frequency is 18.48 GHz. The path fading factor α = 3 in this subsection, which is usually between 2 and 4. The received noise power spectral density is -174 dBm/Hz, as shown in Table 1.

Performance of TPV Detection with Power Level L = 1
In this subsection, the detection probabilities of secondary users at different distances and power deviations are given. As shown in Figure 4, the detection performance is gradually improved as the distance between the SU and the PU-R becomes larger and larger. This is because of the greater the distance, the less the sensing data affected by the PU-T. At the same time, the detection performance is improved when the power deviation is gradually larger. This is because the larger the deviation, the larger the difference between the observed variance in the normal state of the model and the observed variance in the abnormal state, therefore, the detection performance will be improved. Noted that when the power deviation is large or small enough, the detection performance of different distances is very similar, and the fundamental reason is the variance difference between the observed data. To reduce the influence of the primary user on the sensing data, the node selection scheme based on the selection mechanism of the SINR is proposed. As shown in Figure 5, the global detection performance is improved compared with Figure 4, indicating the effectiveness of the proposed scheme. What's more, it also shows that the power deviation, namely the variance difference, is the most important factor which affects the detection performance. However, according to the simulation results, we find that the probability increases by 4.5% when R = 1500 m, 4.8% when R = 1000 m and 7.4% when R = 500 m, comparing to the Figure 4. Noted that the increased detection probability decreases when the distance between PU-T and SU-T increases, this is because the smaller the distance, the greater the impact on the sensing data, which also indicates the superiority of the node selection scheme. R=1000m R=500m Figure 5. Performance of TPV detection with multiple nodes, which demonstrates that the "L out of K" can improve the performance by 5.6%. Figure 6 depicts the changing relationship between global detection probability and the global decision threshold under different false alarm constraints. Similar to the conclusion obtained by Figures 4 and 5, the detection probability is positively correlated with the power difference. With the weakening of false alarm constraint, the global decision threshold increases as well as the global detection probability, which well reflects the compromise between false alarm probability and detection probability. However, due to the limited number of sensing nodes, the discrete value of the global detection threshold has no obvious change in some intervals.

Performance of TPV Detection with Multiple
Power Levels. Figure 7 shows the detection probability under different abnormal power levels P a , in which, the level of transmitting power level is 4, and the false alarm constraint is 0.2. As shown in Figure 7, when the benchmark transmitting power increases, the performance of the detector is improved because it is easy to distinguish the normal power under different states. At the same time, it can be noted that when P a falls between two adjacent normal power levels, the greater the deviation of P a from the nearest normal power level, the more likely it is to be distinguished from the normal state. Therefore, the detection performance is improved. However, the exception occurs when P a P s ∈ [5,7], the GLR detector shows an opposite trend. This is because according to theorem 1, the intersection of decision domain and interval D l is empty or very small. In addition, when the deviation of abnormal transmission power is certain, the detection performance deteriorates as the normal power level L increases from 1 to 3. When the transmitting power increases, the variance of the sensing data increases, making the minimum value F (l) 0 in Equation (34) increase. Therefore, as shown in Theorem 1, the intersection between this region and the decision domain shrinks and the performance deteriorates. Moreover, by comparing the performance of the two detectors at different emission power levels, it can be found that the GLR detector shows a better performance than the AaN detector in most cases except for P a P s ∈ [5,7]. This is because the AaN detector only considers the most likely probability level to do the likelihood ratio, which makes the test function F(T) sharper and further makes the overall performance worse and improves on some intervals. So we can come to the conclusion that the GLR detector can be replaced to some extent by the proposed detector, which can not only achieve better detection performance but also save operation cost.  Figure 8 shows the receiver operating characteristic (ROC) curve of the two detectors. It can be noted that with the enhancement of false alarm constraint, the detection probability also increases. Moreover, in most cases, the GLR detector shows a better detection performance than the AaN detector. However, as mentioned in Figure 6, when P a P s ∈ [5,7], the two detectors perform in the opposite way. This is also because the intersection of the decision field and interval D l is small or even empty.

Conclusions
In this paper, we investigate the detection problem of TPV in satellite-terrestrial integrated networks via the geolocation spectrum database based detection framework, in which spectrum usage application, allocation information, spectrum monitoring requirements, and monitoring results are exchanged. Considering the uncertainty of the normal working state, the binary hybrid hypothesis testing model is established to identify abnormal transmitting power behavior. Based on this model, the single-node detection and multi-node cooperative detection methods under heterogeneous false alarm constraints are firstly derived. Then, the detection problem of TPV under multi-power levels is considered. To simplify the theoretical analysis in the scenario of TPV under multi-power levels, the AaN detector was developed. Finally, the simulation results demonstrate that the proposed detection method can not only improve the performance by nearly 5.6% in the scenario of single transmitted power level, but when it comes to multiple ones, it can approximately realize the detection of TPV in most cases at the expense of less than 10% detection probability.

Conflicts of Interest:
The authors declare no conflict of interest. The funders had no role in the design of the study; in the collection, analyses, or interpretation of data; in the writing of the manuscript, or in the decision to publish the results.

Abbreviations
The following abbreviations are used in this manuscript: TPV transmitted power violation GMNP generalized multi-hypothesis Neyman-Pearson PUEA primary user emulation attack PU-T primary user's transmitter SU-T secondary user's transmitter GLR generalized likelihood ratio AaN Abnormal after Normal