Comparative Performance Evaluation of Intrusion Detection Based on Machine Learning in In-Vehicle Controller Area Network Bus

Communication between the nodes in a vehicle is performed using many protocols. The most common of these is known as the Controller Area Network (CAN). The functionality of the CAN protocol is based on sending messages from one node to all others throughout a bus. Messages are sent without either so...

Descripción completa

Guardado en:
Detalles Bibliográficos
Autores principales: Tarek Moulahi, Salah Zidi, Abdulatif Alabdulatif, Mohammed Atiquzzaman
Formato: article
Lenguaje:EN
Publicado: IEEE 2021
Materias:
Acceso en línea:https://doaj.org/article/fd5986216d094ba4b18f70f7e423563b
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
id oai:doaj.org-article:fd5986216d094ba4b18f70f7e423563b
record_format dspace
spelling oai:doaj.org-article:fd5986216d094ba4b18f70f7e423563b2021-11-23T00:01:25ZComparative Performance Evaluation of Intrusion Detection Based on Machine Learning in In-Vehicle Controller Area Network Bus2169-353610.1109/ACCESS.2021.3095962https://doaj.org/article/fd5986216d094ba4b18f70f7e423563b2021-01-01T00:00:00Zhttps://ieeexplore.ieee.org/document/9478782/https://doaj.org/toc/2169-3536Communication between the nodes in a vehicle is performed using many protocols. The most common of these is known as the Controller Area Network (CAN). The functionality of the CAN protocol is based on sending messages from one node to all others throughout a bus. Messages are sent without either source or destination addresses. Consequently, it is simple for an attacker to inject malicious messages. This may lead to some nodes malfunctioning or total system failure, which can affect the safety of the driver as well as the vehicle. Detecting intrusions is a challenging problem in the context of using CAN bus for in-vehicle communication. Most existing work focuses on the physical aspects without taking into consideration the data itself. Machine Learning (ML) tools, especially classification techniques, have been widely used to address similar problems. In this paper, we use and compare several ML techniques to deal with the problem of detecting intrusions in in-vehicle communication. An experimental study is performed using a real dataset extracted from a KIA Soul car. Compared to previous work, which focuses on detecting intrusions based on the physical aspect, this paper aims to concentrate on the application of data analysis and statistical learning techniques. Furthermore, the paper provides a comparative study of the most common ML techniques. The results show that the techniques under consideration in this paper outperform other techniques that have been used previously.Tarek MoulahiSalah ZidiAbdulatif AlabdulatifMohammed AtiquzzamanIEEEarticleCAN busdata classificationintrusion detectionin-vehicle communicationmachine learningElectrical engineering. Electronics. Nuclear engineeringTK1-9971ENIEEE Access, Vol 9, Pp 99595-99605 (2021)
institution DOAJ
collection DOAJ
language EN
topic CAN bus
data classification
intrusion detection
in-vehicle communication
machine learning
Electrical engineering. Electronics. Nuclear engineering
TK1-9971
spellingShingle CAN bus
data classification
intrusion detection
in-vehicle communication
machine learning
Electrical engineering. Electronics. Nuclear engineering
TK1-9971
Tarek Moulahi
Salah Zidi
Abdulatif Alabdulatif
Mohammed Atiquzzaman
Comparative Performance Evaluation of Intrusion Detection Based on Machine Learning in In-Vehicle Controller Area Network Bus
description Communication between the nodes in a vehicle is performed using many protocols. The most common of these is known as the Controller Area Network (CAN). The functionality of the CAN protocol is based on sending messages from one node to all others throughout a bus. Messages are sent without either source or destination addresses. Consequently, it is simple for an attacker to inject malicious messages. This may lead to some nodes malfunctioning or total system failure, which can affect the safety of the driver as well as the vehicle. Detecting intrusions is a challenging problem in the context of using CAN bus for in-vehicle communication. Most existing work focuses on the physical aspects without taking into consideration the data itself. Machine Learning (ML) tools, especially classification techniques, have been widely used to address similar problems. In this paper, we use and compare several ML techniques to deal with the problem of detecting intrusions in in-vehicle communication. An experimental study is performed using a real dataset extracted from a KIA Soul car. Compared to previous work, which focuses on detecting intrusions based on the physical aspect, this paper aims to concentrate on the application of data analysis and statistical learning techniques. Furthermore, the paper provides a comparative study of the most common ML techniques. The results show that the techniques under consideration in this paper outperform other techniques that have been used previously.
format article
author Tarek Moulahi
Salah Zidi
Abdulatif Alabdulatif
Mohammed Atiquzzaman
author_facet Tarek Moulahi
Salah Zidi
Abdulatif Alabdulatif
Mohammed Atiquzzaman
author_sort Tarek Moulahi
title Comparative Performance Evaluation of Intrusion Detection Based on Machine Learning in In-Vehicle Controller Area Network Bus
title_short Comparative Performance Evaluation of Intrusion Detection Based on Machine Learning in In-Vehicle Controller Area Network Bus
title_full Comparative Performance Evaluation of Intrusion Detection Based on Machine Learning in In-Vehicle Controller Area Network Bus
title_fullStr Comparative Performance Evaluation of Intrusion Detection Based on Machine Learning in In-Vehicle Controller Area Network Bus
title_full_unstemmed Comparative Performance Evaluation of Intrusion Detection Based on Machine Learning in In-Vehicle Controller Area Network Bus
title_sort comparative performance evaluation of intrusion detection based on machine learning in in-vehicle controller area network bus
publisher IEEE
publishDate 2021
url https://doaj.org/article/fd5986216d094ba4b18f70f7e423563b
work_keys_str_mv AT tarekmoulahi comparativeperformanceevaluationofintrusiondetectionbasedonmachinelearningininvehiclecontrollerareanetworkbus
AT salahzidi comparativeperformanceevaluationofintrusiondetectionbasedonmachinelearningininvehiclecontrollerareanetworkbus
AT abdulatifalabdulatif comparativeperformanceevaluationofintrusiondetectionbasedonmachinelearningininvehiclecontrollerareanetworkbus
AT mohammedatiquzzaman comparativeperformanceevaluationofintrusiondetectionbasedonmachinelearningininvehiclecontrollerareanetworkbus
_version_ 1718417415470055424