Abstract:The Internet of Vehicles(IoV) employs vehicle-to-everything (V2X) technology to establish intricate interconnections among the Internet, the IoT network, and the Vehicle Networks (IVNs), forming a complex vehicle communication network. However, the vehicle communication network is very vulnerable to attacks. The implementation of an intrusion detection system (IDS) emerges as an essential requisite to ensure the security of in-vehicle/inter-vehicle communication in IoV. Within this context, the imbalanced nature of network traffic data and the diversity of network attacks stand as pivotal factors in IDS performance. On the one hand, network traffic data often heavily suffer from data imbalance, which impairs the detection performance. To address this issue, this paper employs a hybrid approach combining the Synthetic Minority Over-sampling Technique (SMOTE) and RandomUnderSampler to achieve a balanced class distribution. On the other hand, the diversity of network attacks constitutes another significant factor contributing to poor intrusion detection model performance. Most current machine learning-based IDSs mainly perform binary classification, while poorly dealing with multiclass classification. This paper proposes an adaptive tree-based ensemble network as the intrusion detection engine for the IDS in IoV. This engine employs a deep-layer structure, wherein diverse ML models are stacked as layers and are interconnected in a cascading manner, which enables accurate and efficient multiclass classification, facilitating the precise identification of diverse network attacks. Moreover, a machine learning-based approach is used for feature selection to reduce feature dimensionality, substantially alleviating the computational overhead. Finally, we evaluate the proposed IDS performance on various cyber-attacks from the in-vehicle and external networks in IoV by using the network intrusion detection dataset CICIDS2017 and the vehicle security dataset Car-Hacking. The experimental results demonstrate remarkable performance, with an F1-score of 0.965 on the CICIDS2017 dataset and an F1-score of 0.9999 on the Car-Hacking dataset. These scores demonstrate that our IDS can achieve efficient and precise multiclass classification. This research provides a valuable reference for ensuring the cybersecurity of IoV.

Network Intrusion Logit Detection Model with IO Port Cross-Classification

Industrial network intrusion detection in open-set scenarios

A Hierarchical Intrusion Detection System for Industrial Control Networks based on EtherNet/IP

A Two Stage Intrusion Detection System for Industrial Control Networks Based on Ethernet/IP

An efficient network intrusion detection model for IoT security using K-NN classifier and feature selection

Enhancing network security with information-guided-enhanced Runge Kutta feature selection for intrusion detection

An Analysis of the KDD99 and UNSW-NB15 Datasets for the Intrusion Detection System

Research on Intrusion Detection Method Based on PGoogLeNet-IDS Model

A Hybrid Modified Deep Learning Architecture for Intrusion Detection System with Optimal Feature Selection

An Industrial Network Intrusion Detection Algorithm Based on Multifeature Data Clustering Optimization Model

Feature Analysis for Machine Learning-based IoT Intrusion Detection

Multi-Classification and Tree-Based Ensemble Network for the Intrusion Detection System in the Internet of Vehicles

Machine learning approaches to network intrusion detection for contemporary internet traffic

Intrusion Detection Method of Industrial Control System Based on RIPCA-OCSVM

Intrusion detection framework using auto‐metric graph neural network optimized with hybrid woodpecker mating and capuchin search optimization algorithm in IoT network

Network Data Classification Mechanism for Intrusion Detection System

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

A survey and analysis of intrusion detection models based on CSE-CIC-IDS2018 Big Data

DL-IDS: Extracting Features Using CNN-LSTM Hybrid Network for Intrusion Detection System

Research on Network Intrusion Detection Based on Incremental Extreme Learning Machine and Adaptive Principal Component Analysis