<p>In recent years, intelligent connected vehicles (ICVs) have risen to prominence within vehicular networks, making them susceptible to a wide range of network attacks. Modern ICVs deploy onboard intrusion detection and share detected threats with the cloud for collaborative defense. Machine learning (ML) has been proven to improve intrusion detection performance. However, its high computational demand limits real-time detection capabilities, which are crucial for ICV security. Therefore, this paper proposes a responsive and dynamic real-time intrusion detection for the ICV system. More specifically, an ML integrating with Blacklist Filter (ML-BF) model is designed, which leverages a supervised model with feature engineering, and the Bloom filter to enhance detection and real-time performance. Moreover, the Autoencoder (AE) is used to detect unknown attacks and dynamically update signatures/rules. Experiments on Car-Hacking and CT&amp;T datasets show that ML-BF achieves over 99.9% accuracy with microsecond-level detection time and reduces false negatives to below 0.05%, outperforming existing solutions.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

ML-BF: Responsive and Dynamic Intrusion Detection towards Intelligent Connected Vehicles

  • Jia Liu,
  • Wenjun Fan,
  • Enggee Lim,
  • Yifan Dai,
  • Alexei Lisitsa

摘要

In recent years, intelligent connected vehicles (ICVs) have risen to prominence within vehicular networks, making them susceptible to a wide range of network attacks. Modern ICVs deploy onboard intrusion detection and share detected threats with the cloud for collaborative defense. Machine learning (ML) has been proven to improve intrusion detection performance. However, its high computational demand limits real-time detection capabilities, which are crucial for ICV security. Therefore, this paper proposes a responsive and dynamic real-time intrusion detection for the ICV system. More specifically, an ML integrating with Blacklist Filter (ML-BF) model is designed, which leverages a supervised model with feature engineering, and the Bloom filter to enhance detection and real-time performance. Moreover, the Autoencoder (AE) is used to detect unknown attacks and dynamically update signatures/rules. Experiments on Car-Hacking and CT&T datasets show that ML-BF achieves over 99.9% accuracy with microsecond-level detection time and reduces false negatives to below 0.05%, outperforming existing solutions.