Advanced Analytics for Connected Cars Cyber Security

11/06/2017
by   Matan Levi, et al.
0

The vehicular connectivity revolution is fueling the automotive industry's most significant transformation seen in decades. However, as modern vehicles become more connected, they also become much more vulnerable to cyber-attacks. In this paper, a fully working machine learning approach is proposed to protect connected vehicles (fleets and individuals) against such attacks. We present a system that monitors different vehicle's interfaces (Network, CAN and OS), extracts relevant information based on configurable rules and sends it to a trained generative model to detect deviations from normal behavior. Using configurable data collector, we provide a higher level of data abstraction as the model is trained based on events instead of raw data, which has a noise-filtering effect and eliminates the need to retrain the model whenever a protocol changes. We present a new approach for detecting anomalies, tailored to the temporal nature of our domain. Adapting the hybrid approach of Gutflaish et al. (2017) to the fully temporal setting, we first train a Hidden Markov Model to learn normal vehicle behavior, and then a regression model to calibrate the likelihood threshold for anomaly. Using this architecture, our method detects sophisticated and realistic anomalies, which are missed by other existing methods monitoring the CAN bus only. We also demonstrate the superiority of adaptive thresholds over static ones. Furthermore, our approach scales efficiently from monitoring individual cars to serving large fleets. We demonstrate the competitive advantage of our model via encouraging empirical results.

READ FULL TEXT

page 1

page 2

page 3

page 4

research
07/12/2021

LATTE: LSTM Self-Attention based Anomaly Detection in Embedded Automotive Platforms

Modern vehicles can be thought of as complex distributed embedded system...
research
12/25/2015

Using Data Analytics to Detect Anomalous States in Vehicles

Vehicles are becoming more and more connected, this opens up a larger at...
research
12/21/2021

Network Anomaly Detection in Cars: A Case for Time-Sensitive Stream Filtering and Policing

Connected cars are vulnerable to cyber attacks. Security challenges aris...
research
12/15/2021

EXT-TAURUM P2T: an Extended Secure CAN-FD Architecture for Road Vehicles

The automobile industry is no longer relying on pure mechanical systems;...
research
02/14/2022

A Data-Centric Approach to Generate Invariants for a Smart Grid Using Machine Learning

Cyber-Physical Systems (CPS) have gained popularity due to the increased...
research
09/18/2019

CASAD: CAN-Aware Stealthy-Attack Detection for In-Vehicle Networks

Nowadays, vehicles have complex in-vehicle networks (IVNs) with millions...

Please sign up or login with your details

Forgot password? Click here to reset