Abstract:Vehicles today comprise intelligent systems like connected autonomous driving and advanced driving assistance systems (ADAS) to enhance the driving experience, which is enabled through increased connectivity to infrastructure and fusion of information from different sensing modes. However, the rising connectivity coupled with the legacy network architecture within vehicles can be exploited for launching active and passive attacks on critical vehicle systems and directly affecting the safety of passengers. Machine learning-based intrusion detection models have been shown to successfully detect multiple targeted attack vectors in recent literature, whose deployments are enabled through quantised neural networks targeting low-power platforms. Multiple models are often required to simultaneously detect multiple attack vectors, increasing the area, (resource) cost, and energy consumption. In this paper, we present a case for utilising custom-quantised MLP's (CQMLP) as a multi-class classification model, capable of detecting multiple attacks from the benign flow of controller area network (CAN) messages. The specific quantisation and neural architecture are determined through a joint design space exploration, resulting in our choice of the 2-bit precision and the n-layer MLP. Our 2-bit version is trained using Brevitas and optimised as a dataflow hardware model through the FINN toolflow from AMD/Xilinx, targeting an XCZU7EV device. We show that the 2-bit CQMLP model, when integrated as the IDS, can detect malicious attack messages (DoS, fuzzing, and spoofing attack) with a very high accuracy of 99.9%, on par with the state-of-the-art methods in the literature. Furthermore, the dataflow model can perform line rate detection at a latency of 0.11 ms from message reception while consuming 0.23 mJ/inference, making it ideally suited for integration with an ECU in critical CAN networks.

Exploring Highly Quantised Neural Networks for Intrusion Detection in Automotive CAN

Quantised Neural Network Accelerators for Low-Power IDS in Automotive Networks

A Lightweight Multi-Attack CAN Intrusion Detection System on Hybrid FPGAs

A Lightweight FPGA-based IDS-ECU Architecture for Automotive CAN

Real-Time Zero-Day Intrusion Detection System for Automotive Controller Area Network on FPGAs

A Novel Hybrid Quantum-Classical Framework for an In-Vehicle Controller Area Network Intrusion Detection

A Novel Architecture for an Intrusion Detection System Utilizing Cross-Check Filters for In-Vehicle Networks

Deep Learning-based Embedded Intrusion Detection System for Automotive CAN

CANintelliIDS: Detecting In-Vehicle Intrusion Attacks on a Controller Area Network Using CNN and Attention-Based GRU

Practical IDS on In-vehicle Network Against Diversified Attack Models

CANShield: Deep Learning-Based Intrusion Detection Framework for Controller Area Networks at the Signal-Level

Quantization-aware Neural Architectural Search for Intrusion Detection

Exploiting the Shape of CAN Data for In-Vehicle Intrusion Detection

Domain Adversarial Neural Network-Based Intrusion Detection System for In-Vehicle Network Variant Attacks

Towards a CAN IDS based on a neural-network data field predictor

CAN-LOC: Spoofing Detection and Physical Intrusion Localization on an In-Vehicle CAN Bus Based on Deep Features of Voltage Signals

Intrusion Detection System for CAN Bus In-Vehicle Network based on Machine Learning Algorithms

Detecting Masquerade Attacks in Controller Area Networks Using Graph Machine Learning

A Delay Based Plug-in-Monitor for Intrusion Detection in Controller Area Network.

Leveraging Artificial Neural Networks and LightGBM for Enhanced Intrusion Detection in Automotive Systems