Abstract:The controller area network (CAN) protocol is a critical communication mechanism in vehicular systems. However, the widespread adoption of this protocol has introduced vulnerabilities to in-vehicle communication channels, making them susceptible to various security threats, including denial-of-service, fuzzy, and impersonation attacks. There is thus an urgent need to develop effective security measures to counter these threats. Unfortunately, existing approaches to attack detection suffer from shortcomings such as suboptimal accuracy and high false-positive rates. Herein, we propose a novel methodology to address these limitations, DivaCAN. DivaCAN leverages an ensemble of classifiers, including deep neural networks, the multi-layer perceptron, the light gradient-boosting machine, extra trees, random forest, and Bagging, along with k -nearest neighbors, for intrusion-attack recognition on the CAN bus. The DivaCAN model was thoroughly evaluated, and its exceptional performance, which surpasses that of the latest methodologies, was demonstrated. It was found to achieve a precision of 94.93%, a recall of 94.98%, and an F1 score of 94.97%. One notable aspect of this research is the emphasis on achieving a low false-positive rate, which is often overlooked by other methodologies. Additionally, the DivaCAN model was found to exhibit an acceptable execution time of 406 s, highlighting the importance of considering both accuracy and efficiency when evaluating the performance of classification models. This study thus significantly enhances the security of in-vehicle communication on the CAN protocol. DivaCAN is a robust and accurate intrusion-detection system that addresses the pressing need for effective security measures in vehicular systems.

CANintelliIDS: Detecting In-Vehicle Intrusion Attacks on a Controller Area Network Using CNN and Attention-Based GRU

CANintelliIDS: Detecting In-Vehicle Intrusion Attacks on a Controller Area Network Using CNN and Attention-Based GRU

GCNIDS: Graph Convolutional Network-Based Intrusion Detection System for CAN Bus

Intrusion Detection System for CAN Bus In-Vehicle Network based on Machine Learning Algorithms

ConvIDS: A Convolutional LSTM Based Intrusion Detection Model for In-Vehicle CAN Bus

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

Domain Adversarial Neural Network-Based Intrusion Detection System for In-Vehicle Network Variant Attacks

In-vehicle network intrusion detection using deep convolutional neural network

A GRU-Based Lightweight System for CAN Intrusion Detection in Real Time

DivaCAN: Detecting in-vehicle intrusion attacks on a controller area network using ensemble learning

Deep Transfer Learning Based Intrusion Detection System for Electric Vehicular Networks

Attention-CNN-LSTM based intrusion detection system (ACL-IDS) for in-vehicle networks

TCE-IDS: Time Interval Conditional Entropy- Based Intrusion Detection System for Automotive Controller Area Networks

Practical IDS on In-vehicle Network Against Diversified Attack Models

Graph-Based Intrusion Detection System for Controller Area Networks

Attacker Identification and Intrusion Detection for In-Vehicle Networks.

A Novel Architecture for an Intrusion Detection System Utilizing Cross-Check Filters for In-Vehicle Networks

Deep Learning-based Intrusion Detection System for Internet of Vehicles

Attacks to Automatous Vehicles: A Deep Learning Algorithm for Cybersecurity

CANet: An Unsupervised Intrusion Detection System for High Dimensional CAN Bus Data