Intrusion Detection for SOME/IP: Challenges and Opportunities

Due to ever increasing complexity and the introduction of more and more connectivity, modern cars have an ever growing attack surface. To cope with this, intrusion detection should be used as an additional layer of defense complementing dedicated security measures. There is, however, very little published work on intrusion detection in cars, in particular for service-oriented communication. In this short paper, we first discuss selected challenges and opportunities for intrusion detection in SOME/IP, a standard protocol for service-oriented communication in cars. We then propose an architecture for a SOME/IP intrusion detection system, discuss its security properties and report preliminary experimental results.