WINDS: A Wavelet-Based Intrusion Detection System for Controller Area Network (CAN)
نویسندگان
چکیده
Vehicles are equipped with Electronic Control Units (ECUs) to increase their overall system functionality and connectivity. However, the rising connectivity exposes a defenseless internal Controller Area Network (CAN) cyberattacks. An Intrusion Detection System (IDS) is supervisory module, proposed for identifying CAN network malicious messages, without modifying legacy ECUs causing high traffic overhead. The traditional IDS approaches rely on time frequency thresholding, leading false alarm rates, whereas state-of-the-art solutions may suffer from vehicle dependency. This paper presents wavelet-based approach locating behavior change in by analyzing network’s transmission pattern. Wavelet-based (WINDS) tested various attack scenarios, using real two independent research centers, while being expanded toward more comprehensive scenarios synthetic attacks. technique evaluated compared against baseline method. Experimental results show that WINDS offers vehicle-independent solution applicable vehicles through unique generating low alarms.
منابع مشابه
A Clustering based Intrusion Detection System for Storage Area Network
A storage area network (SAN) is a high-speed and widely used special-purpose network that interconnects different kinds of storage devices with associated data servers on behalf of a larger network of users. SAN security is a specialized field dealing with issues related to the storage industry, it follows the same established principles found in all modern IT security. Therefore, it requires a...
متن کاملA System to Recognize Intruders in Controller Area Network (CAN)
The existing automotive Controller Area Network (CAN) is vulnerable. The absence of sender verification in its communication means that an attacker acting as a node on its network will be treated like a legitimate node that has always been present, allowing attackers to transmit and receive messages freely. This paper proposes a system that will allow nodes using CAN to identify legitimate mess...
متن کاملController Area Network Based Accident Avoidance System
Based on requirements of modern vehicle, invehicle Controller Area Network (CAN) architecture has been implemented. In order to reduce point to point wiring harness in vehicle automation, CAN is suggested as a means for data communication within the vehicle environment. The benefits of CAN bus based network over traditional point to point schemes will offer increased flexibility and expandabili...
متن کاملAn Agent-Based Intrusion Detection System for Local Area Networks
Since it is impossible to predict and identify all the vulnerabilities of a network beforehand, and penetration into a system by malicious intruders cannot always be prevented, intrusion detection systems (IDSs) are essential entities to ensure the security of a networked system. To be effective in carrying out their functions, the IDSs need to be accurate, adaptive, and extensible. Given these...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
ژورنال
عنوان ژورنال: IEEE Access
سال: 2021
ISSN: ['2169-3536']
DOI: https://doi.org/10.1109/access.2021.3073057