Adaptive Cybersecurity Monitoring for Resilient Vehicular Architectures

Abstract

The use of new technologies in vehicles, such as automation and connectivity, results in the addition of more software components, which in turn increases the potential vulnerabilities and attack surfaces for the vehicle. To address this, cybersecurity monitoring of vehicle fleets is required to detect and respond to potential cyber threats and vulnerabilities. The aim of this research is to explore a technological approach to fleet monitoring using established IT standards and techniques. The approach involves collecting, filtering, and forwarding cybersecurity information from multiple sources within the vehicle by instrumenting the ROS 2-based architecture and integrating these data sources with the log management tool syslog-ng. The logging configuration can be adapted at runtime using a ROS 2 interface that we developed. The approach is demonstrated with our fleet simulation setup “Fleet in the Loop” and a sophisticated data collection in a Knowledge Graph. The approach at hand can be used to seamlessly integrate ROS 2 in common IT monitoring tools and efficiently increase the resilience of vehicles by integrating adaptive security monitoring.