Abstract:The network of services, including delivery, farming, and environmental monitoring, has experienced exponential expansion in the past decade with Unmanned Aerial Vehicles (UAVs). Yet, UAVs are not robust enough against cyberattacks, especially on the Controller Area Network (CAN) bus. The CAN bus is a general-purpose vehicle-bus standard to enable microcontrollers and in-vehicle computers to interact, primarily connecting different Electronic Control Units (ECUs). In this study, we focus on solving some of the most critical security weaknesses in UAVs by developing a novel graph-based intrusion detection system (IDS) leveraging the Uncomplicated Application-level Vehicular Communication and Networking (UAVCAN) protocol. First, we decode CAN messages based on UAVCAN protocol specification; second, we present a comprehensive method of transforming tabular UAVCAN messages into graph structures. Lastly, we apply various graph-based machine learning models for detecting cyber-attacks on the CAN bus, including graph convolutional neural networks (GCNNs), graph attention networks (GATs), Graph Sample and Aggregate Networks (GraphSAGE), and graph structure-based transformers. Our findings show that inductive models such as GATs, GraphSAGE, and graph-based transformers can achieve competitive and even better accuracy than transductive models like GCNNs in detecting various types of intrusions, with minimum information on protocol specification, thus providing a generic robust solution for CAN bus security for the UAVs. We also compared our results with baseline single-layer Long Short-Term Memory (LSTM) and found that all our graph-based models perform better without using any decoded features based on the UAVCAN protocol, highlighting higher detection performance with protocol-independent capability.

Federated Graph Neural Network for Fast Anomaly Detection in Controller Area Networks

Robust anomaly-based intrusion detection system for in-vehicle network by graph neural network framework

Data anomaly detection for structural health monitoring using a combination network of GANomaly and CNN

A Novel Feature Extraction Framework Using Graph Node Attention Network for In-Vehicle Networks Intrusion Detection

Deep Learning-Based Anomaly Detection for Connected Autonomous Vehicles Using Spatiotemporal Information

Application-Layer Anomaly Detection Leveraging Time-Series Physical Semantics in CAN-FD Vehicle Networks

Detecting Masquerade Attacks in Controller Area Networks Using Graph Machine Learning

CAN Bus Intrusion Detection Based on Auxiliary Classifier GAN and Out-of-distribution Detection

Multi-Attack Intrusion Detection for In-Vehicle CAN-FD Messages

GCNIDS: Graph Convolutional Network-Based Intrusion Detection System for CAN Bus

A Graph Neural Network Model for Elevator Anomaly Detection Based on CAN Bus Data

CAN-FT: A Fuzz Testing Method for Automotive Controller Area Network Bus

CANet: An Unsupervised Intrusion Detection System for High Dimensional CAN Bus Data

Graph-Powered Defense: Controller Area Network Intrusion Detection for Unmanned Aerial Vehicles

Domain Adversarial Neural Network-Based Intrusion Detection System for In-Vehicle Network Variant Attacks

MKF-ADS: Multi-Knowledge Fusion Based Self-supervised Anomaly Detection System for Control Area Network

Effective In-vehicle Intrusion Detection via Multi-view Statistical Graph Learning on CAN Messages

A Survey of Anomaly Detection in In-Vehicle Networks

Graph Neural Networks for Anomaly Detection in Industrial Internet of Things

Network Anomaly Detection Using Federated Learning

A Graph Embedded In Graph Framework With Dual-sequence Input For Efficient Anomaly Detection of Complex Equipment Under Insufficient Samples