ClockIDS: A Real-Time Vehicle Intrusion Detection System Based on Clock Skew

Zhao, Yilin; Xun, Yijie; Li, Jiajia

doi:10.1109/jiot.2022.3151377

Cited by 27 publications

(14 citation statements)

References 34 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Over the course of a 24-h experiment, approximately 1.2 million legitimate messages and 20,000 intrusion messages were sent. The experimental results of the proposed method and its comparison with the methods described in [11,12] are presented in Table 1.…”

Section: Intrusion Detectionmentioning

confidence: 99%

“…In order to ensure long‐term effectiveness of detection, it is necessary to dynamically update the statistical parameters of the transmission periods for each identifer (ID) message. A typical method is to utilize the most recent M valid message reception times for each ID and calculate the mean and variance of the actual intervals [11]. In practical usage, there is a risk of rapid parameter updates leading to ineffective detection with the limited values of M .…”

Section: Intrusion Detectionmentioning

confidence: 99%

“…The vast majority of messages on the vehicular CAN bus are transmitted by ECUs at fixed intervals [4,6,11,14]. However, it is important to note that the transmission intervals for messages with different IDs can vary, and it is possible for a single ECU to transmit multiple messages with different IDs.…”

Section: Intrusion Detectionmentioning

confidence: 99%

“…In order to ensure longterm effectiveness of detection, it is necessary to dynamically update the statistical parameters of the transmission periods for each identifer (ID) message. A typical method is to utilize the most recent M valid message reception times for each ID and calculate the mean and variance of the actual intervals [11]. In practical usage, there is a risk of rapid parameter updates leading to ineffective detection with the limited values of M. On the other hand, if the value of M is too large, it can lead to slow parameter updates, which can result in the detection algorithm not being able to adapt to changes in the transmission intervals, potentially reducing its effectiveness.…”

Section: Intrusion Detectionmentioning

confidence: 99%

“…The existing research on security protection for vehicular CAN bus mainly includes security defence schemes based on cryptographic primitives [7][8][9] and intrusion detection methods [6,[10][11][12][13][14]. The former schemes are limited by the bandwidth of CAN bus, strong real-time requirements, and node computing performance, and need to compromise on security by transmitting authentication tags through lightweight authentication frameworks or covert channels.…”

mentioning

confidence: 99%

See 4 more Smart Citations

Intrusion detection and defence for CAN bus through frequency anomaly analysis and arbitration mechanism

Dong,

Song,

Shao

2024

Electronics Letters

View full text Add to dashboard Cite

As automobile intelligence continues to develop, the electronic control units connected to the Controller Area Network (CAN) bus within vehicles face an increasing number of threats from potential attacks originating from the internet. To address this issue, an intrusion detection and defence method is proposed that is capable of detecting illegal messages through the use of frequency anomaly detection, and subsequently disrupting them through utilization of the CAN bus arbitration mechanism. This proposed method offers a simple implementation compared to traditional approaches, while being able to identify suspicious units and neutralize threats in real‐time. Experimental results demonstrate the effectiveness of this approach.

show abstract

Section: Intrusion Detectionmentioning

confidence: 99%

Section: Intrusion Detectionmentioning

confidence: 99%