The attack surface of a modern vehicle increases with its connectivity. A strategy to prevent attacks or at least to identify such attacks and to mitigate their effects is therefore imperative. The detection of indications for intrusive behavior in an in-vehicle network is an important aspect of a holistic security concept. The structure of the payload of in-vehicle messages with respect to the encoded sensor values is in general confidential. Therefore, most researchers consider the structure of the in-vehicle messages to be bit- or byte-fields. However, this may hide anomalies which are characterized by correlations between sensor values transferred by the in-vehicle messages. In this work, we evaluate the influence of accuracy of the model of the payload structure with respect to the actual sensor values on the results of different intrusion detection methods. In particular, we analyze if an improved alignment is helpful to detect anomalies introduced by stealthy intrusions. In order to cover conceptually different modeling and reasoning techniques, we adapted a deep learning approach as well as a characteristic functions based intrusion detection approach to utilize such message streams. An important aspect is that the explainability of the results is better compared to deep learning systems. We further developed a set of test vectors based on log files of a vehicle enriched by different intrusions. In particular, we included simulations of stealthy intrusions which mask certain sensor values within the respective messages. The effectiveness of the developed methods is demonstrated by various experiments.


    Access

    Download


    Export, share and cite



    Title :

    Continuous fields: Enhanced in-vehicle anomaly detection using machine learning models


    Contributors:
    Fenzl, Florian (author) / Rieke, Roland (author) / Chevalier, Y. (author) / Dominik, A. (author) / Kotenko, I. (author)

    Publication date :

    2020-01-01


    Remarks:

    Fraunhofer SIT



    Type of media :

    Article (Journal)


    Type of material :

    Electronic Resource


    Language :

    English



    Classification :

    DDC:    629



    Anomaly detection using machine learning

    SHAHBAZI AVARVAND FOROOZ | European Patent Office | 2023

    Free access

    ANOMALY DETECTION USING MACHINE LEARNING

    SHAHBAZI AVARVAND FOROOZ | European Patent Office | 2021

    Free access

    Machine Learning Models for Online Anomaly Detection in Flight Operations

    Coelho e Silva, Lucas / Murça, Mayara C. | AIAA | 2023


    Machine Learning Models for Online Anomaly Detection in Flight Operations

    Silva, Lucas Coelho E. / Murça, Mayara C. | TIBKAT | 2023