基于机器学习的控制器局域网入侵检测系统

Omar Minawi, Jason Whelan, Abdulaziz Almehmadi, K. El-Khatib
{"title":"基于机器学习的控制器局域网入侵检测系统","authors":"Omar Minawi, Jason Whelan, Abdulaziz Almehmadi, K. El-Khatib","doi":"10.1145/3416014.3424581","DOIUrl":null,"url":null,"abstract":"The automotive industry continues to innovate at an exponential rate to provide a safer and more efficient experience for consumers. Autonomous vehicles and Vehicle-to-Everything technologies are at the forefront of defining the future of transportation. Enabling vehicles to connect to various services has exposed critical in-vehicle networks such as the Controller Area Network (CAN) to potential exploitation by adversaries. In its standard form, the CAN bus suffers from multiple vulnerabilities such as limited bandwidth and lack of authentication. Attacks can be initiated through physical and wireless mediums, exploiting diagnostic interfaces, Bluetooth and infotainment systems to compromise the confidentiality, integrity and availability of data communication within vehicles. In this paper, a holistic, comprehensive, Machine Learning-Based intrusion detection system for the CAN bus is proposed to secure the critical in-vehicle network. The proposed system is modular, scalable and can be adapted to the ever-changing threat landscape of cyber vehicle attacks. On an unseen testing dataset, our system achieved 100% accuracy in protecting against denial of service and multiple impersonation injection attacks, as well as 95.67% accuracy of fuzzy injection attacks.","PeriodicalId":213859,"journal":{"name":"Proceedings of the 10th ACM Symposium on Design and Analysis of Intelligent Vehicular Networks and Applications","volume":"68 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2020-11-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"13","resultStr":"{\"title\":\"Machine Learning-Based Intrusion Detection System for Controller Area Networks\",\"authors\":\"Omar Minawi, Jason Whelan, Abdulaziz Almehmadi, K. El-Khatib\",\"doi\":\"10.1145/3416014.3424581\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The automotive industry continues to innovate at an exponential rate to provide a safer and more efficient experience for consumers. Autonomous vehicles and Vehicle-to-Everything technologies are at the forefront of defining the future of transportation. Enabling vehicles to connect to various services has exposed critical in-vehicle networks such as the Controller Area Network (CAN) to potential exploitation by adversaries. In its standard form, the CAN bus suffers from multiple vulnerabilities such as limited bandwidth and lack of authentication. Attacks can be initiated through physical and wireless mediums, exploiting diagnostic interfaces, Bluetooth and infotainment systems to compromise the confidentiality, integrity and availability of data communication within vehicles. In this paper, a holistic, comprehensive, Machine Learning-Based intrusion detection system for the CAN bus is proposed to secure the critical in-vehicle network. The proposed system is modular, scalable and can be adapted to the ever-changing threat landscape of cyber vehicle attacks. On an unseen testing dataset, our system achieved 100% accuracy in protecting against denial of service and multiple impersonation injection attacks, as well as 95.67% accuracy of fuzzy injection attacks.\",\"PeriodicalId\":213859,\"journal\":{\"name\":\"Proceedings of the 10th ACM Symposium on Design and Analysis of Intelligent Vehicular Networks and Applications\",\"volume\":\"68 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2020-11-16\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"13\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Proceedings of the 10th ACM Symposium on Design and Analysis of Intelligent Vehicular Networks and Applications\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1145/3416014.3424581\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the 10th ACM Symposium on Design and Analysis of Intelligent Vehicular Networks and Applications","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/3416014.3424581","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 13

摘要

汽车行业继续以指数级的速度创新,为消费者提供更安全、更高效的体验。自动驾驶汽车和车联网技术处于定义未来交通运输的最前沿。使车辆能够连接到各种服务,暴露了关键的车载网络,如控制器局域网(CAN),使其可能被对手利用。在其标准形式中,CAN总线存在多种漏洞,例如带宽有限和缺乏身份验证。攻击可以通过物理和无线媒介发起,利用诊断接口、蓝牙和信息娱乐系统来破坏车内数据通信的机密性、完整性和可用性。本文提出了一种全面、全面、基于机器学习的CAN总线入侵检测系统,以保证关键车载网络的安全。该系统是模块化的,可扩展的,可以适应不断变化的网络车辆攻击威胁。在不可见的测试数据集上,我们的系统在防御拒绝服务和多次模拟注入攻击方面达到了100%的准确率,在防御模糊注入攻击方面达到了95.67%的准确率。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Machine Learning-Based Intrusion Detection System for Controller Area Networks
The automotive industry continues to innovate at an exponential rate to provide a safer and more efficient experience for consumers. Autonomous vehicles and Vehicle-to-Everything technologies are at the forefront of defining the future of transportation. Enabling vehicles to connect to various services has exposed critical in-vehicle networks such as the Controller Area Network (CAN) to potential exploitation by adversaries. In its standard form, the CAN bus suffers from multiple vulnerabilities such as limited bandwidth and lack of authentication. Attacks can be initiated through physical and wireless mediums, exploiting diagnostic interfaces, Bluetooth and infotainment systems to compromise the confidentiality, integrity and availability of data communication within vehicles. In this paper, a holistic, comprehensive, Machine Learning-Based intrusion detection system for the CAN bus is proposed to secure the critical in-vehicle network. The proposed system is modular, scalable and can be adapted to the ever-changing threat landscape of cyber vehicle attacks. On an unseen testing dataset, our system achieved 100% accuracy in protecting against denial of service and multiple impersonation injection attacks, as well as 95.67% accuracy of fuzzy injection attacks.
求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
自引率
0.00%
发文量
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信