Abstract:Controller area network (CAN) is a widely used communication protocol for in-vehicle networks. With the up-gradation of traditional vehicle ad-hoc networks (VANETs) to the internet of vehicles (IoV), the connectivity is incremental between the vehicular network and the outside world, making cyber-security become a stringent problem. Although existing machine learning-based methods for automotive intrusion detection are powerful, there are still limitations in detection performance and resistance attack types during the unsupervised learning process that lacks massive amounts of labels. Therefore, this paper proposes an in-vehicle intrusion detection system that incorporates a combination of sparse regularization convolutional auto-encoder (SRCAE) and streams clustering to construct a deep evolving stream clustering model, namely DESC-IDS. Specifically, the method encodes continuous messages as 2-D data frames, which are fed into the SRCAE built by the temporal convolutional network (TCN) to obtain a low-dimensional non-linear spatial–temporal mapping of the high-dimensional data. Thereafter, the stream clustering model can describe a contour baseline of normal communication messages by the spatial–temporal features. Based on this baseline, DESC-IDS can detect any abnormal changes in vehicular communication. In particular, this paper exploits the SRCAE to reconstruct message matrices, which are considered as variants of known attacks due to reconstruction deviation. The extensive evaluation results illustrate that the proposed model provides enough performance and real-time competitiveness in anomaly detection, with 96.44% accuracy on the HCRL intrusion dataset and 98.80% accuracy on the ORNL intrusion dataset. For the mixed attack of fabrication and masquerade, the proposed model achieves stable F1-scores of 93.48% and 86.99%, respectively. Moreover, the performance in unknown attacks is righteous with 98.43% accuracy and 97.15% F1-scores.

A GRU-Based Lightweight System for CAN Intrusion Detection in Real Time

Intrusion Detection System for CAN Bus In-Vehicle Network based on Machine Learning Algorithms

Intrusion Detection in Intelligent Connected Vehicles Based on Weighted Self-Information

Deep Learning-based Intrusion Detection System for Internet of Vehicles

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

A Delay Based Plug-in-Monitor for Intrusion Detection in Controller Area Network.

CANintelliIDS: Detecting In-Vehicle Intrusion Attacks on a Controller Area Network Using CNN and Attention-Based GRU

Practical IDS on In-vehicle Network Against Diversified Attack Models

Intrusion Detection Method for In-Vehicle CAN Bus Based on Message and Time Transfer Matrix

Domain Adversarial Neural Network-Based Intrusion Detection System for In-Vehicle Network Variant Attacks

In-vehicle network intrusion detection using deep convolutional neural network

A Robust Multi-Stage Intrusion Detection System for In-Vehicle Network Security using Hierarchical Federated Learning

DESC-IDS: Towards an Efficient Real-Time Automotive Intrusion Detection System Based on Deep Evolving Stream Clustering.

A Lightweight Intrusion Detection System for Vehicular Networks Based on an Improved ViT Model

CAN-LOC: Spoofing Detection and Physical Intrusion Localization on an In-Vehicle CAN Bus Based on Deep Features of Voltage Signals

GCNIDS: Graph Convolutional Network-Based Intrusion Detection System for CAN Bus

A Hybrid Intrusion Detection System for for In-Vehicle CAN Bus.

Attacks to Automatous Vehicles: A Deep Learning Algorithm for Cybersecurity

Leveraging Artificial Neural Networks and LightGBM for Enhanced Intrusion Detection in Automotive Systems