arrow
Return

Using internal context to detect automotive controller area network attacks

delete2021-05-01
delete9
delete
OA
AI
A
Andrew Tomlinson *
J
Jeremy Bryans
S
Siraj Ahmed Shaikh
DOI:10.1016/j.compeleceng.2021.107048delete
deleteOriginal
deleteShare
deleteSave
View PDF
Abstract

Abstract

En 中文
The rise in data use within cars has led to concerns about their cybersecurity. The Controller Area Network (CAN) enables communication between components core to the car's safety and performance, and has been demonstrated to be particularly vulnerable to hacking and malicious cyber-intrusion. CAN intrusion detection systems have been envisaged. Signatures of known attacks might be used for detection, but this method holds many limitations. Although some attacks might change packet broadcast rates or add unknown packets onto the network, attacks that have little or no effect on these, yet can alter the packet data, have also been devised. We therefore test three novelty detection methods (Local Outlier Factor, Compound Classifier and One-Class Support Vector Machine) that might identify an attack based solely on anomalies in CAN packet field data-values. The methods compare values across a cluster of CAN packets broadcast from different control units, so potentially could identify an attacked control unit even when its subsequent fabricated payload data-values remain plausible. We test the methods on data from two different makes of car across a range of manipulation magnitudes, reflecting the unpredictability of attacks. Different training regimes are tested, enabling us to assess validity across journeys. We also consider the processes needed to determine the CAN fields that might be included in the intrusion detection cluster, and present algorithms for automating those processes.
Keywords:
Intrusion detection
Controller area network
Automotive cybersecurity
Machine learning
AI Summary

AI Summary

Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.

Journal

C
Computers and Electrical Engineering
IF:
4.9
Papers:
6.7K
Citations:
1.3W

Organization

C
Coventry University
Scholars:
3.5K
Papers: 4.1K
Citations: 5.2K
Cited Papers

Cited Papers

Intrusion Detection Systems for Intra-Vehicle Networks: A Review
err2019-01-01
err109
errOAAI
errAl-Jarrah, Omar Y.; Maple, Carsten; Dianati, Mehrdad; Oxtoby, David; Mouzakitis, Alex
errShare
errSave
Gamma-Aminobutyric Acid-Transaminase Deficiency: A Newly Recognized Inborn Error of Neurotransmitter Metabolism
err2008-03-19
err0
PREAI
errJ. Jaeken; P. Casaer; P. de Cock; L. Corbeel; R. Eeckels; E. Eggermont; P. Schechter; J. Brucher
errShare
errSave