Exploiting Temperature-Varied Voltage Fingerprints for In-vehicle CAN Intrusion Detection

Abstract

The Controller Area Network (CAN) is the most commonly used in-vehicle protocol for reliable communication between Electronic Control Units (ECUs). Due to its broadcast nature and absence of message authentication mechanisms, CAN bus is vulnerable to several severe attacks. To combat these defects, many intrusion detection systems (IDSs) that exploit ECU’s inimitable voltage signal have been proposed. However, existing works ignore the impact of temperature changes or only consider a small range of temperature changes. Through experiences, we found that the ECU’s voltage signals will be affected by the temperature, which will cause the state-of-the-art voltage-based IDS to fail. To mitigate this deficiency, we propose a temperature-varied voltage fingerprinting scheme(TVV). TVV collects the voltage signals sent by each ECU at different temperatures, and it constructs a fingerprint database of each ECU. Then TVV performs intrusion detection based on the fingerprint database and the current driving state of the car. We have implemented TVV on both CAN bus prototype and real vehicles at a temperature of 0℃ to 80℃, and results show that our scheme is able to detect the masquerade attack.