Analytical and Experimental Performance Evaluations of CAN-FD Bus

Andrade, Ricardo; Hodel, Kleber Nogueira; Justo, J. F.; Laganá, Armando Antônio Maria; Santos, Max Mauro Dias; Gu, Zonghua

doi:10.1109/access.2018.2826522

Cited by 36 publications

(8 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…• It incurs lower runtime overhead, since the payload does not need to be decoded, which is important for resource-constrained in-vehicle systems; • It is independent of the message format/payload length, hence, is applicable to both the classic CAN and the more recent higher-bandwidth CAN bus stands without change, e.g., CAN-FD with payload size of 64 Bytes [16] and CAN-XL with up to 2,048 Bytes [37]. The larger payload size, especially for CAN-XL, may render many current payload-based methods ineffective, since the large payload field may overwhelm the CAN ID field in the input feature space, so it may be necessary to reduce the feature dimension by feature engineering.…”

Section: Discussion On Feature Selection: Can Id or Payloadmentioning

confidence: 99%

“…This approach is constrained by the limited computing power of ECUs and the small payload size of CAN messages (8 Bytes). Proposed solutions include: adding hardware coprocessors to offload computation-intensive cryptographic algorithms from the ECU [31]; selectively adding coprocessors to a partial set of ECUs to meet timing constraints while minimizing cost [21]; truncating the MAC to reduce its length and performing successful authentication of several consecutively received messages [21,47]; dynamically adjusting the MAC size to maximize it while meeting timing constraints [54]; security-aware obfuscated priority assignment for CAN with Flexible Data-rate (CAN-FD) [16,53], and others. Despite these research advances, MA on the CAN bus is not yet widely adopted in the automotive industry due to its high cost or high complexity.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

CAN Bus Intrusion Detection Based on Auxiliary Classifier GAN and Out-of-distribution Detection

Zhao

Chen

et al. 2022

ACM Trans. Embed. Comput. Syst.

View full text Add to dashboard Cite

The Controller Area Network (CAN) is a ubiquitous bus protocol present in the Electrical/Electronic (E/E) systems of almost all vehicles. It is vulnerable to a range of attacks once the attacker gains access to the bus through the vehicle’s attack surface. We address the problem of Intrusion Detection on the CAN bus, and present a series of methods based on two classifiers trained with Auxiliary Classifier Generative Adversarial Network (ACGAN) to detect and assign fine-grained labels to Known Attacks, and also detect the Unknown Attack class in a dataset containing a mixture of (Normal + Known Attacks + Unknown Attack) messages. The most effective method is a cascaded two-stage classification architecture, with the multi-class Auxiliary Classifier in the first stage for classification of Normal and Known Attacks, passing Out-of-Distribution (OOD) samples to the binary Real-Fake Classifier in the second stage for detection of the Unknown Attack class. Performance evaluation demonstrate that our method achieves both high classification accuracy and low runtime overhead, making it suitable for deployment in the resource-constrained in-vehicle environment.

show abstract

Section: Discussion On Feature Selection: Can Id or Payloadmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

CAN Bus Intrusion Detection Based on Auxiliary Classifier GAN and Out-of-distribution Detection

Zhao

Chen

et al. 2022

ACM Trans. Embed. Comput. Syst.

View full text Add to dashboard Cite

show abstract

“…Such systems made their debut in the 1960s, having inherited several characteristics along the way, many of which survive up to this day. In its simplest form, SCADA systems, as illustrated in Figure 1, may include the following components: Such components are linked together by means of protocols and technologies, such as CAN Bus [17], RS-485 [16], Industrial Ethernet [18], COTS Ethernet or TCP/IP. Communications between the Master station and the PLC/RTUs is supported by using SCADA-specific protocols, like Modbus over TCP/IP [19], IEC 60870-5-104 (IEC 104) [20] or the This work is licensed under a Creative Commons Attribution 4.0 License.…”

Section: B Scada Systemsmentioning

confidence: 99%

ELEGANT: Security of Critical Infrastructures With Digital Twins

et al. 2021

View full text Add to dashboard Cite

The past years have witnessed an increasing interest and concern regarding the development of security monitoring and management mechanisms for Critical Infrastructures, due to their vital role in ensuring the availability of many essential services. This task is not easy due to the specific characteristics of such systems, and the natural resistance of Critical Infrastructures operators against actions implying downtime. Digital Twins, as accurate virtual models of physical objects or processes, can provide a faithful environment for security analysis or evaluation of potential mitigation strategies to be deployed in face of specific situations. Nonetheless, their on-premises deployment can be expensive, implying a significant CAPEX whose return will depend on the ability to plan and deploy a suitable support infrastructure, as well as implementing efficient and scalable data collection and processing mechanisms capable of taking advantage of the acquired resources. This paper presents an off-premises approach to design and deploy Digital Twins to secure critical infrastructures, developed in the scope of the ELEGANT project. Such Digital Twins are built using real-time, high fidelity replicas of Programming Logic Controllers, coupled with scalable and efficient data collection processes, supporting the development and validation of Machine Learning models to mitigate security threats like Denial of Service attacks. The validation approach of ELEGANT, which leveraged from the capabilities of the Fed4Fire federated testbeds evaluated the feasibility of using cloudified Digital Twins, thus converting a significant part of the projected CAPEX for the in-premises model into on-demand, pay-as-you-go OPEX, eventually paving the way for the establishment of a DTaaS (Digital Twin as a Service) paradigm. The achieved results demonstrate that the data pipelines providing support for the ELEGANT Digital Twins have low impact in terms of resource usage in Denial of Service and Distributed Denial of Service attack scenarios, when higher volumes of data are generated.

show abstract

“…We consider that this cost is limited in our context, since the analysis of real-life critical systems shows A:11 [Pagetti et al 2014], it does not exceed 3 flits of 32 bits. The payload size of controller area network (CAN) which is a widely-used bus protocol in automotive distributed embedded systems, does not exceed 8 bytes [Andrade et al 2018]. Finally, in the ARINC429 protocol which is an open standard and one of the most adopted protocol in the aeronautical industry, the payload size does not exceed 24 bits [Santos and d'Amore 2018].…”

Section: N+1 Virtual Channelsmentioning

confidence: 99%

Design and Multi-Abstraction-Level Evaluation of a NoC Router for Mixed-Criticality Real-Time Systems

Dridi

Rubini

Lallali

et al. 2019

J. Emerg. Technol. Comput. Syst.

View full text Add to dashboard Cite

A Mixed Criticality System (MCS) combines real-time software tasks with different criticality levels. In a MCS, the criticality level specifies the level of assurance against system failure. For high-critical flows of messages, it is imperative to meet deadlines; otherwise, the whole system might fail, leading to catastrophic results, like loss of life or serious damage to the environment. In contrast, low-critical flows may tolerate some delays. Furthermore, in MCS, flow performances such as the Worst Case Communication Time (WCCT) may vary depending on the criticality level of the applications. Then execution platforms must provide different operating modes for applications with different levels of criticality. To conclude, in Network-On-Chip (NoC), sharing resources between communication flows can lead to unpredictable latencies and subsequently turns the implementation of MCS in many-core architectures challenging. In this article, we propose and evaluate a new NoC router to support MCS based on an accurate WCCT analysis for high-critical flows. The proposed router, called Double Arbiter and Switching router (DAS), jointly uses Wormhole and Store And Forward communication techniques for low- and high-critical flows, respectively. It ensures that high-critical flows meet their deadlines while maximizing the bandwidth remaining for the low-critical flows. We also propose a new method for high-critical communication time analysis, applied to Store And Forward switching mode with virtual channels. For low-critical flows communication time analysis, we adapt an existing wormhole communication time analysis with share policy to our context. The second contribution of this article is a multi-abstraction-level evaluation of DAS. We evaluate the communication time of flows, the system mode change, the cost, and four properties of DAS. Simulations with a cycle-accurate SystemC NoC simulator show that, with a 15% network use rate, the communication delay of high-critical flows is reduced by 80% while communication delay of low-critical flow is increased by 18% compared to solutions based on routers with multiple virtual channels. For 10% of network interferences, using system mode change, DAS reduces the high-critical communication delays about 66%. We synthesize our router with a 28nm SOI technology and show that the size overhead is limited of 2.5% compared to the solution based on virtual channel router. Finally, we applied model checking verification techniques to automatically prove several DAS properties required by critical systems designers.

show abstract

Analytical and Experimental Performance Evaluations of CAN-FD Bus

Cited by 36 publications

References 8 publications

CAN Bus Intrusion Detection Based on Auxiliary Classifier GAN and Out-of-distribution Detection

CAN Bus Intrusion Detection Based on Auxiliary Classifier GAN and Out-of-distribution Detection

ELEGANT: Security of Critical Infrastructures With Digital Twins

Design and Multi-Abstraction-Level Evaluation of a NoC Router for Mixed-Criticality Real-Time Systems

Contact Info

Product

Resources

About