Nan Sun , Wei Wang , Kexin Liu , Donghong Li , Jinhu Lü
{"title":"Hybrid framework for security evaluation in Internet of Vehicles","authors":"Nan Sun , Wei Wang , Kexin Liu , Donghong Li , Jinhu Lü","doi":"10.1016/j.cose.2025.104398","DOIUrl":null,"url":null,"abstract":"<div><div>Advancements in communication technology are driving the rapid evolution of the Internet of Vehicles (IoV) industry, paving the way for future connected vehicle ecosystems. Current vehicle cyber-security efforts primarily concentrate on vulnerabilities within the Controller Area Network (CAN) of existing automobiles. However, the anticipated proliferation of Internet of Vehicles (IoV) capabilities in the near future brings forth a new set of cyber-security challenges. Traditional IoV security analysis methods often focus on either data or dynamic models to assess malicious vehicle behavior, lacking a comprehensive, multidimensional security evaluation approach. In this paper, a novel IoV security analysis framework is proposed, integrating vehicle dynamics models with driving behavior and communication traffic data. The framework employs set-membership filtering algorithms and deep learning techniques to comprehensively assess vehicle status and detect a wide range of security threats, including ARP spoofing, flooding attacks, and speeding, while ensuring adaptability to diverse threat scenarios. Security scores are dynamically generated based on varying threat levels using an enhanced Dempster-Shafer theory, enabling robust threat evaluation. Although the proposed framework is designed for future IoV implementations, its effectiveness is validated through joint simulations conducted in CARLA and OMNeT++, demonstrating its potential to enhance both current and next-generation vehicle networks. Additionally, the proposed framework is designed to be modular, enabling seamless integration with existing connected vehicle security systems and ensuring its relevance for both current and future IoV networks.</div></div>","PeriodicalId":51004,"journal":{"name":"Computers & Security","volume":"153 ","pages":"Article 104398"},"PeriodicalIF":4.8000,"publicationDate":"2025-03-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Computers & Security","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S0167404825000872","RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
引用次数: 0
Abstract
Advancements in communication technology are driving the rapid evolution of the Internet of Vehicles (IoV) industry, paving the way for future connected vehicle ecosystems. Current vehicle cyber-security efforts primarily concentrate on vulnerabilities within the Controller Area Network (CAN) of existing automobiles. However, the anticipated proliferation of Internet of Vehicles (IoV) capabilities in the near future brings forth a new set of cyber-security challenges. Traditional IoV security analysis methods often focus on either data or dynamic models to assess malicious vehicle behavior, lacking a comprehensive, multidimensional security evaluation approach. In this paper, a novel IoV security analysis framework is proposed, integrating vehicle dynamics models with driving behavior and communication traffic data. The framework employs set-membership filtering algorithms and deep learning techniques to comprehensively assess vehicle status and detect a wide range of security threats, including ARP spoofing, flooding attacks, and speeding, while ensuring adaptability to diverse threat scenarios. Security scores are dynamically generated based on varying threat levels using an enhanced Dempster-Shafer theory, enabling robust threat evaluation. Although the proposed framework is designed for future IoV implementations, its effectiveness is validated through joint simulations conducted in CARLA and OMNeT++, demonstrating its potential to enhance both current and next-generation vehicle networks. Additionally, the proposed framework is designed to be modular, enabling seamless integration with existing connected vehicle security systems and ensuring its relevance for both current and future IoV networks.
期刊介绍:
Computers & Security is the most respected technical journal in the IT security field. With its high-profile editorial board and informative regular features and columns, the journal is essential reading for IT security professionals around the world.
Computers & Security provides you with a unique blend of leading edge research and sound practical management advice. It is aimed at the professional involved with computer security, audit, control and data integrity in all sectors - industry, commerce and academia. Recognized worldwide as THE primary source of reference for applied research and technical expertise it is your first step to fully secure systems.