LSTM-Based Intrusion Detection System for In-Vehicle Can Bus Communications

Md Delwar Hossain,Youki Kadobayashi,Hiroyuki Inoue,Doudou Fall,Hideya Ochiai

doi:10.1109/access.2020.3029307

Abstract

The modern automobile is a complex piece of technology that uses the Controller Area Network (CAN) bus system as a central system for managing the communication between the electronic control units (ECUs). Despite its central importance, the CAN bus system does not support authentication and authorization mechanisms, i.e., CAN messages are broadcast without basic security features. As a result, it is easy for attackers to launch attacks at the CAN bus network system. Attackers can compromise the CAN bus system in several ways including Denial of Service (DoS), Fuzzing and Spoofing attacks. It is imperative to devise methodologies to protect modern cars against the aforementioned attacks. In this paper, we propose a Long Short-Term Memory (LSTM)-based Intrusion Detection System (IDS) to detect and mitigate the CAN bus network attacks. We generate our own dataset by first extracting attack-free data from our experimental car and by injecting attacks into the latter and collecting the dataset. We use the dataset for testing and training our model. With our selected hyper-parameter values, our results demonstrate that our classifier is efficient in detecting the CAN bus network attacks, we achieved an overall detection accuracy of 99.995%. We also compare the proposed LSTM method with the Survival Analysis for automobile IDS dataset which is developed by the Hacking and Countermeasure Research Lab, Korea. Our proposed LSTM model achieves a higher detection rate than the Survival Analysis method.

Highlights

The car is arguably the most important means of transportation of the modern era
We evaluate our method against the Survival Analysis Dataset for automobile Intrusion Detection System (IDS) [2] which was developed by the Hacking and Countermeasure Research Lab, Korea
We plot the True Positive Rate (TPR) against the False Positive Rate (FPR) in the Area Under The Curve (AUC)-Receiver Operating Characteristics (ROC) curve wherein FPR and TPR are on the x-axis and y-axis, respectively

Summary

Introduction

The car is arguably the most important means of transportation of the modern era. The modern car has gone through numerous transformations to become more efficient, reliable and secure. The Controller Area Network (CAN) bus protocol is one the most important transformations introduced to the car industry. Developed by Robert Bosch in the 1980s, the CAN is an International Standardization Organization (ISO) defined serial communication bus that is in charge of the flow of. Information between the Electronic Control Units (ECUs) of a car. The CAN bus coordinates the movements between the engine, the brakes, the steering wheel, etc., i.e., it makes the modern car connected. The CAN protocol was initially engineered for industrial machinery, it has been adopted for vehicular network communications

Results

Discussion

Conclusion