Abstract:While communication-based train control (CBTC) systems play a crucial role in the efficient and reliable operation of urban rail transits, its high penetration level of communication networks opens doors to Man-in-the-Middle (MitM) attacks. Current researches regarding MitM attacks do not consider the characteristics of CBTC systems. Particularly, the limited computing capability of the on-board computers prevents the direct implementation of most existing intrusion detection and defense algorithms against the MitM attack. In order to tackle this dilemma, in this article, we first introduce edge intelligence (EI) into CBTC systems to enhance the computing capability of the system. A cross-layer defense scheme, which includes the detection and defense stages, are proposed next. For the cross-layer detection stage, we propose a Long Short-Term Memory (LSTM) and Support Vector Machine (SVM) based detection method to combine the detection probability calculated from the train control parameter sequence and operation log files. For the cross-layer defense stage, we construct a Bayesian game based defense model to derive the optimal defense policy against MitM attacks. To further improve the accuracy of the defense scheme as well as optimize the communication resource allocation scheme, we propose an optimal communication resource allocation scheme based on the Asynchronous Advantage Actor-Critic (A3C) algorithm at last. Extensive simulation results show that the proposed scheme achieves excellent performance in defending against MitM attacks.

Hybrid Intrusion Detection with Decision Tree and Critical State Analysis for CBTC

Hybrid Intrusion Detection System for Complicated Network

A Novel Intrusion Detection Model Using a Fusion of Network and Device States for Communication-Based Train Control Systems

An Effective Intrusion Detection System Based on Network Traffic and Packets for CBTC

Multi-agent based hybrid Intrusion detection system

An Intrusion Detection Method Based on Machine Learning and State Observer for Train-Ground Communication Systems

Intrusion Detection Methods in Communication-Based Train Control Systems Based on Relative Entropy and Trust Evaluation

An Intrusion Detection Method of Data Tampering Attack in Communication-Based Train Control System.

A Novel Machine Learning Based Intrusion Detection Method for 5G Empowered CBTC Systems

A Hybrid Intrusion Detection Method Using Improved Stacking Ensemble Algorithm and False Positive Elimination Strategy for CBTC

A Safety-Security Assessment Approach for Communication-Based Train Control (CBTC) Systems Based on the Extended Fault Tree

HIDS-DT: an Effective Hybrid Intrusion Detection System Based on Decision Tree

A Resilience-Based Security Assessment Approach for CBTC Systems

An Intrusion Detection System Based on the Double-Decision-Tree Method for In-Vehicle Network

A Comprehensive Resilient Control Strategy for CBTC Systems Through Train-to-Train Communications under Malicious Attacks

A transfer learning-based intrusion detection system for zero-day attack in communication-based train control system

An Attack Tree-Based Approach for Vulnerability Assessment of Communication-Based Train Control Systems

A Cross-Layer Defense Scheme for Edge Intelligence-Enabled CBTC Systems Against MitM Attacks

Security Analysis for CBTC Systems under Attack–Defense Confrontation

Hybrid Intrusion Detection Mechanisms for Integrated Electronic Systems.

Attacks and Counter Defense Mechanisms for CBTC Systems: System Modeling and Availability Analysis.