Idioma:

An Efficient Intrusion Prevention System for CAN: Hindering Cyber-Attacks With a Low-Cost Platform

Freitas De Araujo-Filho, Paulo ; Pinheiro, Antonio J. ; Kaddoum, Georges ; Campelo, Divanilson R. ; Soares, Fabio L.

IEEE access, 2021, Vol.9, p.166855-166869 [Periódico revisado por pares]

Piscataway: IEEE

Texto completo disponível

Citações Citado por

Enviar para

Título:
An Efficient Intrusion Prevention System for CAN: Hindering Cyber-Attacks With a Low-Cost Platform
Autor: Freitas De Araujo-Filho, Paulo ; Pinheiro, Antonio J. ; Kaddoum, Georges ; Campelo, Divanilson R. ; Soares, Fabio L.
Assuntos: Algorithms ; Automobile industry ; Automobiles ; Automotive electronics ; Bluetooth ; Cellular radio ; Computer security ; Control equipment ; Controller area network ; controller area network (CAN) ; Electronic control ; Hardware ; Intrusion detection ; Intrusion detection system (IDS) ; Intrusion detection systems ; intrusion prevention system (IPS) ; IP networks ; Machine learning ; Machine learning algorithms ; Security ; Spoofing ; Timing
É parte de: IEEE access, 2021, Vol.9, p.166855-166869
Descrição: The controller area network (CAN), which is still today the most used in-vehicle network, does not provide any security or authentication mechanism by design. Since current vehicles, which have numerous connectivity technologies, such as Bluetooth, Wi-Fi, and cellular radio, can be easily accessed from the exterior world, they can be easy targets of cyber-attacks. It is therefore urgently necessary to enhance vehicle security by detecting and stopping cyber-attacks. In this paper, we propose a novel unsupervised intrusion prevention system (IPS) for automotive CANs that detects and hinders attacks without modifying the architecture of the electronic control units (ECUs) or requiring information that is restricted to car manufacturers. We compare two machine learning algorithms' ability to detect fuzzing and spoofing attacks, and evaluate which of them is most accurate with the fewest number of data bytes. The fewer data bytes required, the sooner detection can start and the sooner attacking frames can be detected. Experiment results show that our proposed detection mechanism achieves accuracy higher than 99%, F1-scores higher than 97%, and detection times shorter than <inline-formula> <tex-math notation="LaTeX">80 ~\mu s </tex-math></inline-formula> for the types of attacks considered. Moreover, when compared to four state-of-the-art intrusion detection systems, it is the only solution that is capable of discarding attacking frames before damage occurs while being deployed on inexpensive Raspberry Pi. Such an inexpensive deployment is particularly desirable, as cost is one of the automotive industry's primary concerns.
Editor: Piscataway: IEEE
Idioma: Inglês

Voltar para lista de resultados

Anterior Resultado 10 Avançar Ir para próxima página

Realização: Logos de Redes Sociais:

An Efficient Intrusion Prevention System for CAN: Hindering Cyber-Attacks With a Low-Cost Platform

Freitas De Araujo-Filho, Paulo ; Pinheiro, Antonio J. ; Kaddoum, Georges ; Campelo, Divanilson R. ; Soares, Fabio L.

Piscataway: IEEE

Buscando em bases de dados remotas. Favor aguardar.