基于域的可持续轻量级车载网络入侵检测系统

IF 3.8 3区 计算机科学 Q1 COMPUTER SCIENCE, HARDWARE & ARCHITECTURE
Edy Kristianto , Po-Ching Lin , Ren-Hung Hwang
{"title":"基于域的可持续轻量级车载网络入侵检测系统","authors":"Edy Kristianto ,&nbsp;Po-Ching Lin ,&nbsp;Ren-Hung Hwang","doi":"10.1016/j.suscom.2023.100936","DOIUrl":null,"url":null,"abstract":"<div><p>Intelligent transportation systems<span><span> are designed to enhance and optimize the traffic flow, safety of urban mobility, and improve energy efficiency. While advanced vehicles are equipped with new features, such as communication technologies for the exchange of safety messages, the communication interfaces of the vehicles increase the attack surfaces for attackers to exploit, even into the in-vehicle network (IVN). The automotive Ethernet and intrusion detection systems (IDSs) are promising solutions to the security problem inside the IVN. The automotive Ethernet has higher bandwidth capacity at an economical cost and flexibility for expansion than the current solution. The IDSs can protect the IVN from attackers compromising the vehicle. They can be implemented based on </span>machine learning to learn from the normal IVN traffic behavior. However, numerous IDSs that utilize machine learning face hardware limitations when training within the in-vehicle network. Thus, the models have to be trained outside the IVN and then imported into it. Moreover, the IVN messages are unlabeled whether they are normal or under attack. We propose a lightweight unsupervised IDS that enables training in the IVN with limited computation resources. Our IDS models have an impressive parameter reduction of up to 94% compared to existing models. This leads to a remarkable reduction in memory usage of up to 86%, training time slashed by up to 69%, and a remarkable drop in energy consumption by up to 68%. Despite the size reduction, the proposed models remain only slightly less accurate than current solutions by up to 2%.</span></p></div>","PeriodicalId":48686,"journal":{"name":"Sustainable Computing-Informatics & Systems","volume":"41 ","pages":"Article 100936"},"PeriodicalIF":3.8000,"publicationDate":"2023-11-25","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"Sustainable and lightweight domain-based intrusion detection system for in-vehicle network\",\"authors\":\"Edy Kristianto ,&nbsp;Po-Ching Lin ,&nbsp;Ren-Hung Hwang\",\"doi\":\"10.1016/j.suscom.2023.100936\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><p>Intelligent transportation systems<span><span> are designed to enhance and optimize the traffic flow, safety of urban mobility, and improve energy efficiency. While advanced vehicles are equipped with new features, such as communication technologies for the exchange of safety messages, the communication interfaces of the vehicles increase the attack surfaces for attackers to exploit, even into the in-vehicle network (IVN). The automotive Ethernet and intrusion detection systems (IDSs) are promising solutions to the security problem inside the IVN. The automotive Ethernet has higher bandwidth capacity at an economical cost and flexibility for expansion than the current solution. The IDSs can protect the IVN from attackers compromising the vehicle. They can be implemented based on </span>machine learning to learn from the normal IVN traffic behavior. However, numerous IDSs that utilize machine learning face hardware limitations when training within the in-vehicle network. Thus, the models have to be trained outside the IVN and then imported into it. Moreover, the IVN messages are unlabeled whether they are normal or under attack. We propose a lightweight unsupervised IDS that enables training in the IVN with limited computation resources. Our IDS models have an impressive parameter reduction of up to 94% compared to existing models. This leads to a remarkable reduction in memory usage of up to 86%, training time slashed by up to 69%, and a remarkable drop in energy consumption by up to 68%. Despite the size reduction, the proposed models remain only slightly less accurate than current solutions by up to 2%.</span></p></div>\",\"PeriodicalId\":48686,\"journal\":{\"name\":\"Sustainable Computing-Informatics & Systems\",\"volume\":\"41 \",\"pages\":\"Article 100936\"},\"PeriodicalIF\":3.8000,\"publicationDate\":\"2023-11-25\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Sustainable Computing-Informatics & Systems\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://www.sciencedirect.com/science/article/pii/S2210537923000914\",\"RegionNum\":3,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"COMPUTER SCIENCE, HARDWARE & ARCHITECTURE\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Sustainable Computing-Informatics & Systems","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S2210537923000914","RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, HARDWARE & ARCHITECTURE","Score":null,"Total":0}
引用次数: 0

摘要

智能交通系统旨在增强和优化交通流量、城市交通安全以及提高能源效率。虽然先进车辆配备了新功能,例如用于交换安全信息的通信技术,但车辆的通信接口增加了攻击者可利用的攻击面,甚至可以进入车载网络(IVN)。汽车以太网和入侵检测系统(ids)是解决IVN内部安全问题的有前途的解决方案。与目前的解决方案相比,汽车以太网具有更高的带宽容量,成本更低,扩展更灵活。ids可以保护IVN免受攻击者对车辆的危害。它们可以基于机器学习来实现,从正常的IVN流量行为中学习。然而,许多利用机器学习的ids在车载网络中进行训练时面临硬件限制。因此,模型必须在IVN之外进行训练,然后再导入其中。此外,无论IVN消息是正常的还是受到攻击的,它们都是未标记的。我们提出了一种轻量级的无监督IDS,可以在有限的计算资源下在IVN中进行训练。与现有模型相比,我们的IDS模型具有令人印象深刻的参数减少高达94%。这导致内存使用量显著减少高达86%,训练时间减少高达69%,能源消耗显著下降高达68%。尽管缩小了尺寸,但所提出的模型的精度仍然只比目前的解决方案低2%。
本文章由计算机程序翻译,如有差异,请以英文原文为准。
Sustainable and lightweight domain-based intrusion detection system for in-vehicle network

Intelligent transportation systems are designed to enhance and optimize the traffic flow, safety of urban mobility, and improve energy efficiency. While advanced vehicles are equipped with new features, such as communication technologies for the exchange of safety messages, the communication interfaces of the vehicles increase the attack surfaces for attackers to exploit, even into the in-vehicle network (IVN). The automotive Ethernet and intrusion detection systems (IDSs) are promising solutions to the security problem inside the IVN. The automotive Ethernet has higher bandwidth capacity at an economical cost and flexibility for expansion than the current solution. The IDSs can protect the IVN from attackers compromising the vehicle. They can be implemented based on machine learning to learn from the normal IVN traffic behavior. However, numerous IDSs that utilize machine learning face hardware limitations when training within the in-vehicle network. Thus, the models have to be trained outside the IVN and then imported into it. Moreover, the IVN messages are unlabeled whether they are normal or under attack. We propose a lightweight unsupervised IDS that enables training in the IVN with limited computation resources. Our IDS models have an impressive parameter reduction of up to 94% compared to existing models. This leads to a remarkable reduction in memory usage of up to 86%, training time slashed by up to 69%, and a remarkable drop in energy consumption by up to 68%. Despite the size reduction, the proposed models remain only slightly less accurate than current solutions by up to 2%.

求助全文
通过发布文献求助,成功后即可免费获取论文全文。 去求助
来源期刊
Sustainable Computing-Informatics & Systems
Sustainable Computing-Informatics & Systems COMPUTER SCIENCE, HARDWARE & ARCHITECTUREC-COMPUTER SCIENCE, INFORMATION SYSTEMS
CiteScore
10.70
自引率
4.40%
发文量
142
期刊介绍: Sustainable computing is a rapidly expanding research area spanning the fields of computer science and engineering, electrical engineering as well as other engineering disciplines. The aim of Sustainable Computing: Informatics and Systems (SUSCOM) is to publish the myriad research findings related to energy-aware and thermal-aware management of computing resource. Equally important is a spectrum of related research issues such as applications of computing that can have ecological and societal impacts. SUSCOM publishes original and timely research papers and survey articles in current areas of power, energy, temperature, and environment related research areas of current importance to readers. SUSCOM has an editorial board comprising prominent researchers from around the world and selects competitively evaluated peer-reviewed papers.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
copy
已复制链接
快去分享给好友吧!
我知道了
右上角分享
点击右上角分享
0
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术官方微信