Automatic Dependent Surveillance-Broadcast (ADS-B) has such features as open protocols and no authentication measures,which makes it vulnerable to message modification attacks.Firstly,the correlation between attacker intention and attack path selection is analyzed.Then,the TriLSTM-SVDD model with feature processing is proposed for spoofing data detection,so as to defend against message modification attacks implemented through 1090ES,onboard network or other attack paths.The experimental results show that the prediction error of TriLSTM model is significantly smaller than that of LSTM model,and the TriLSTM-SVDD model can identify latitude value deviations of 0.01°,longitude value deviations of 0.02° and height value deviations of 50 m with 98.9% accuracy.