A novel intrusion detection model for the CAN bus packet of in-vehicle network based on attention mechanism and autoencoder

The attacks on in-vehicle Controller Area Network(CAN)bus messages severely disrupt normal communication between vehicles.Therefore,researches on intrusion detection models for CAN have positive business value for vehicle security,and the intrusion detection technology for CAN bus messages can effectively protect the invehicle network from unlawful attacks.Previous machine learning-based models are unable to effectively identify intrusive abnormal messages due to their inherent shortcomings.Hence,to address the shortcomings of the previous machine learning-based intrusion detection technique,we propose a novel method using Attention Mechanism and AutoEncoder for Intrusion Detection(AMAEID).The AMAEID model first converts the raw hexadecimal message data into binary format to obtain better input.Then the AMAEID model encodes and decodes the binary message data using a multi-layer denoising autoencoder model to obtain a hidden feature representation that can represent the potential features behind the message data at a deeper level.Finally,the AMAEID model uses the attention mechanism and the fully connected layer network to infer whether the message is an abnormal message or not.The experimental results with three evaluation metrics on a real in-vehicle CAN bus message dataset outperform some traditional machine learning algorithms,demonstrating the effectiveness of the AMAEID model.

M/S Controller Area Network(CAN) System Using Shared-Clock Scheduler

The Controller Area Network (CAN) is a well established control network for automotive and automation control applications. Time-Triggered Controller Area Network (TTCAN) is a recent development which introduces a session layer,for message scheduling,to the existing CAN standard,which is a two layer standard comprising of a physical layer and a data link layer. TTCAN facilitates network communication in a time-triggered fashion,by introducing a Time Division Multiple Access style communication scheme. This allows deterministic network behavior,where maximum message latency times can be quantified and guaranteed. In order to solve the problem of determinate time latency and synchronization among several districted units in one auto panel CAN systems,this paper proposed a prototype design implementation for a shared-clock scheduler based on PIC18F458 MCU. This leads to improved CAN system performance and avoid the latency jitters and guarantee a deterministic communication pattern on the bus. The real runtime performance is satisfied.

基于MobileViT轻量化网络的车载CAN入侵检测方法

车载控制区域网络(controller area network,CAN)总线因缺少安全措施而易被攻击,因此入侵检测系统(intrusion detection system,IDS)在保护车载CAN总线免受网络攻击中发挥着重要作用.现有基于深度学习的车载CAN总线入侵检测方法存在资源开销大和延迟较高的问题.为减少检测延迟,提高检测率,提出一种利用改进的轻量化MobileViT模型对车载CAN总线进行入侵检测的方法.首先,将攻击流量可视化为彩色图,再使用GELU替换MobileViT的MV2模块中常规ReLU6,从而作为该模块的激活函数,可有效解决神经元死亡问题,提升模型收敛速度.使用指数衰减自动更新学习率,并通过迁移学习加速训练过程实现对彩色图分类,从而达到对入侵行为的检测.基于CAR-HACKING DATASET数据集的实验表明,改进后的MobileViT在消耗较少算力的情况下对入侵行为的检测准确率为100%,模型参数仅为2.12 MB,平均响应时间仅为1.6 ms,节省了训练资源,并保证了检测的准确率.

Reliability Analysis of Controller Area Network Based Systems—A Review

This paper reviews the research work done on the Reliability Analysis of Controller Area Network (CAN) based systems. During the last couple of decades, real-time researchers have extended schedulability analysis to a mature technique which for nontrivial systems can be used to determine whether a set of tasks executing on a single CPU or in a distributed system will meet their deadlines or not [1-3]. The main focus of the real-time research community is on hard real-time systems, and the essence of analyzing such systems is to investigate if deadlines are met in a worst case scenario. Whether this worst case actually will occur during execution, or if it is likely to occur, is not normally considered. Reliability modeling, on the other hand, involves study of fault models, characterization of distribution functions of faults and development of methods and tools for composing these distributions and models in estimating an overall reliability figure for the system [4]. This paper presents the research work done on reliability analysis developed with a focus on Controller-Area-Network-based automotive systems.

基于UVM的异步接口CAN控制器验证平台

针对带有异步接口的CAN控制器,设计实现了一种基于UVM的随机化、可重用的功能验证平台。该平台使用面向对象的UVM类搭建,代码可重用性更强,开发周期更短;引入随机化程度更高的激励加快功能验证的收敛速度,且更加贴近芯片的实际应用场景;自动化比对机制可以实时地输出结果报告,便于问题的定位和调试。平台独创性地实现了CAN总线代理器和异步接口驱动器两个组件,兼容CAN 2.0B标准协议和Intel/Motorola异步接口时序,实现了平台与DUT的数据交互。实验结果表明,设计验证平台可以有效验证待测设计异步接口CAN控制器。

基于Cortex-M3的串口与CAN转换模块的设计与实现

针对采用控制器局域网络(CAN:Controller Area Network)总线的自动操舵系统和采用串口通讯的航海导航设备之间通讯的不匹配问题,设计了一种基于Cortex-M3嵌入式平台的通信转换模块,实现了串口与CAN总线数据的双向转换功能。同时对传统CAN收发器CTM1050存在的信号稳定性不足、波特率精准度低等问题,提出并实现了一种硬件电路的替代方案,提高了数据通讯的时效性和稳定性。基于CAN2.0B扩展帧,设计了自动操舵系统内部CAN总线协议。该协议可根据报文信息优先级分配标识帧,保证了总线数据的有序传输。实验结果表明,该通讯模块功能使用正常且通讯效果良好,具有一定通用性,可在多种需要转换的设备系统上推广使用。

整车CAN网络错误帧研究与应用

控制器局域网络CAN问世以来,凭借其优良的可靠性、实时性、低成本等优势,成为当下商用车和乘用车包括新能源汽车上最普遍的整车通信方式。为满足各种需求,整车CAN通信网络变得越来越复杂,由此引发的错误帧问题也越来越多,导致工程师不得不花费大量精力解决错误帧问题。文章介绍错误帧的类型、错误帧结构和节点设备错误状态,分析引起错误帧的常见原因,最后结合工作中实际案例,分析产生错误帧的原因,可为解决其它CAN错误帧或通信失败问题提供参考。

基于CANBUS的蓄电池组计算机监测系统

介绍一种由计算机和采集器二级系统组成的蓄电池组计算机监测系统 ,实时监测蓄电池组的总电压、充电电流、放电电流及单体电压等参数 ,详细叙述了采集器的组成 ,蓄电池组单体电压的测量 ,CAN总线的特点。

基于DSP的CANbus机床加工通讯的研究

本文采用了DSP和CAN总线的技术 ,利用DSP的实时和CAN数字传输、分布控制的特点 ,提出了实现现代机床加工控制的新方法 ,使机床加工控制更加高效、方便。

CAN总线时间同步协议测试的研究与分析

CAN总线,以其卓越的特性、低廉的价格、极高的可靠性和灵活的结构,是目前车载通信中应用最广泛的总线之一。本文主要介绍CAN总线时间同步技术,对时间同步机制、时间同步报文帧进行剖析,并着重介绍时间同步的主要测试内容、测试方法等,为进一步提高总线系统运行的精度和安全性提供参考。

水下控制系统CAN总线技术方案研究

控制器局域网(CAN)最初为汽车应用设计的数字协议,现在已经广泛应用于楼宇自动化、机械制造、安全监控、汽车工业、航空工业等领域。目前,国内尚未有油气开发领域水下控制系统CAN总线技术应用的规范。通过对CAN总线物理层、CAN-open协议的研究,结合道路汽车领域的ISO 11898和CAN-open的CAN-in-Automation(CiA)系列规范,探讨了在深水油气开发领域典型水下采气树CAN总线数据监测的工程设计方法,提出了水下控制系统中CAN总线完整的技术方案。该方案包括速率选择、接口界面、拓扑、线缆类型、数据协议等。随着水下控制系统国产化步伐加快,深入研究并掌握CAN技术,为水下电子模块国产化提供了嵌入式开发的技术方向,可对深水监测仪表及水下控制模块国产化研究的顺利进行起到促进作用。

A Game Theoretic Approach for Inter-Network Interference Mitigation in Wireless Body Area Networks

Wireless Body Area Network(WBAN) is an emerging technology to provide real-time health monitoring and ubiquitous healthcare services. In many applications, multiple wireless body area networks have to coexist in a small area, resulting in serious inter-network interference. This not only reduces network reliability that is especially important in emergency medical applications, but also consumes more power of WBANs. In this paper, an inter-network interference mitigation approach based on a power control algorithm is proposed. Power control is modeled as a non-cooperative game, in which both inter-network interference and energy efficiency of WBANs are considered. The existence and uniqueness of Nash Equilibrium in the game are proved, and an optimal scheme based on best response is proposed to find its Nash Equilibrium. By coordinating the transmission power levels among networks under interference environment, the total system throughput can be increased with minimum power consumed. The effectiveness of the proposed method has been illustrated by simulation results, where the performance of the proposed approach is evaluated in terms of overall utility and power efficiency and convergence speed.

Design of Multi-domain Collaborative Simulation System for Dual Clutch Transmission Based on CAN Bus

A multi-domain collaborative simulation(MDCS) system for dual clutch transmission(DCT) was presented based on controller area network(CAN) bus.An interface card of CAN bus was designed,in which MDCS subsystems were linked as the nodes according to the interface mode of MDCS.A DCT simulation model was established based on Matlab/Simdriveline,whose running process was accurately controlled by the designed control system.The playback system of vehicle state(VPS) was proposed whose input was the road-test data,with a real vehicle test environment for the development of transmission control unit(TCU) being provided.A DCT kinematic system model was set up,and the running status of DCT parts could be displayed in real time.The functions of MDCS were verified based on the extra-urban driving cycle(EUDC) and the vehicle road-test data respectively.The results show the functions of MDCS are accomplished,and the unified supporting platform for the development of TCU is achieved by MDCS.

Simulation of Optical Packet-Switched Metropolitan Area Network

This paper introduces architectures of two types optical packet switched metropolitan area networks and their media access control protocols. We have designed related network simulation systems. With these simulation systems, the characteristics and performance of the two MANs can be achieved.

MAC Layer Resource Allocation for Wireless Body Area Networks

Wireless body area networks （WBANs） can provide low-cost, timely healthcare services and are expected to be widely used for e-healthcare in hospitals. In a hospital, space is often limited and multiple WBANs have to coexist in an area and share the same channel in order to provide healthcare services to different patients. This causes severe interference between WBANs that could significantly reduce the network throughput and increase the amount of power consumed by sensors placed on the body. There-fore, an efficient channel-resource allocation scheme in the medium access control （MAC） layer is crucial. In this paper, we devel-op a centralized MAC layer resource allocation scheme for a WBAN. We focus on mitigating the interference between WBANs and reducing the power consumed by sensors. Channel and buffer state are reported by smartphones deployed in each WBAN, and channel access allocation is performed by a central controller to maximize network throughput. Sensors have strict limitations in terms of energy consumption and computing capability and cannot provide all the necessary information for channel allocation in a timely manner. This deteriorates network performance. We exploit the temporal correlation of the body area channel in order to minimize the number of channel state reports necessary. We view the network design as a partly observable optimization prob-lem and develop a myopic policy, which we then simulate in Matlab.

CAN-Bus上实现P/S通讯模式的问题探讨

介绍了P/S通信模型的特性,构建了CAN-Bus上实现P/S模型的基本网络结构,讨论了CAN-Bus上实现P/S通信模型的可行性,讨论了CAN-Bus上实现P/S通信模型的关键技术。

A Realistic ICT Network Design and Implementation in the Neighbourhood Area of the Smart Grid

The Smart Grid has three main characteristics, which are to some degree antagonistic. These characteristics are: provision of good power quality, energy cost reduction and improvement in the reliability of the grid. The need to ensure that they can be accomplished together demands a much richer ICT monitoring and control network than the current system. In this paper we particularly investigate the design and deployment of the ICT system in the urban environment, specifically in a university campus that is embedded in a city, thus it represents the Neighbourhood Area Network (NAN) level of the Smart Grid. In order to design an ICT infrastructure, we have introduced two related architectures: namely communications network architecture and a software architecture. Having access to the characteristics of a real NAN guides us to choose appropriate communication technologies and identify the actual requirements of the system. To implement these architectures at this level we need to gather and process information from environmental sensors (monitoring e.g. temperature, movement of people and vehicles) that can provide useful information about changes in the loading of the NAN, with information from instrumentation of the Power Grid itself. Energy constraints are one of the major limitations of the communication network in the Smart Grid, especially where wireless networking is proposed. Thus we analyse the most energy efficient method of collecting and sending data. The main contribution of this research is that we propose and implement an energy efficient ICT network and describe our software architecture at the NAN level, currently very underdeveloped. We also discuss our experimental results. To our knowledge, no such architectures have yet been implemented for collecting data which can provide the basis of Decision Support Tools (DSTs).

Error Control Strategy in Ultrasonic Body Area Networks

Recently,ultrasonic waves had been introduced as the transmission medium in Body Area Networks(BANs) to reduce the incalculable damage caused by radio waves. However,the communications based on ultrasonic waves suffer from poor propagation of signals in air and consume too much energy. To address these limitations,firstly,we make the theoretical analysis to ensure ultrasonic waves could be used in BANs(UBANs). Then,we propose an error control strategy in UBANs to dynamically adjust the error control scheme and the Max-Retries based on the current channel state,which is called UECS. The UECS is based on IEEE 802.15.6 standards and considering the characteristics of ultrasonic waves in BANs. Simulation results show that UECS achieves better performance in terms of packet delivery ratio and energy consumption compared with the traditional strategies.

基于注意力机制的CNN-LSTM网络车内CAN总线入侵检测技术

随着智能汽车功能的不断扩展和用户群体的增加,汽车自身的网络安全性问题也逐渐引起人们的重视.智能汽车的大量外部接口为攻击者提供了许多种入侵车内网络的机会,而由于车内网络本身没有任何抵御外部攻击的机制,攻击者可以很容易地通过外部接口接入车辆内部网络并操控车辆,引发严重的交通安全事故.目前针对车辆内部网络的入侵检测系统被认为是抵御车辆内部网络入侵的有效方法.提出一种基于带有注意力机制的卷积-长短期记忆神经网络算法进行车内控制器局域网(controller area network,CAN)总线入侵检测.该方法首先将CAN总线通信数据转化为图像,然后利用卷积神经网络提取其中特征,再通过带有注意力机制的长短期记忆神经网络判断CAN总线通信是否异常.实验结果证明提出的方法在各项指标中都有较好的表现,能够有效检测针对CAN总线的入侵.

Resource Exhaustion Attack Detection Scheme for WLAN Using Artificial Neural Network

IEEE 802.11 Wi-Fi networks are prone to many denial of service(DoS)attacks due to vulnerabilities at the media access control(MAC)layer of the 802.11 protocol.Due to the data transmission nature of the wireless local area network(WLAN)through radio waves,its communication is exposed to the possibility of being attacked by illegitimate users.Moreover,the security design of the wireless structure is vulnerable to versatile attacks.For example,the attacker can imitate genuine features,rendering classificationbased methods inaccurate in differentiating between real and false messages.Althoughmany security standards have been proposed over the last decades to overcome many wireless network attacks,effectively detecting such attacks is crucial in today’s real-world applications.This paper presents a novel resource exhaustion attack detection scheme(READS)to detect resource exhaustion attacks effectively.The proposed scheme can differentiate between the genuine and fake management frames in the early stages of the attack such that access points can effectively mitigate the consequences of the attack.The scheme is built through learning from clustered samples using artificial neural networks to identify the genuine and rogue resource exhaustion management frames effectively and efficiently in theWLAN.The proposed scheme consists of four modules whichmake it capable to alleviates the attack impact more effectively than the related work.The experimental results show the effectiveness of the proposed technique by gaining an 89.11%improvement compared to the existing works in terms of detection.