Flexible Data Rate Research Articles

Multi-Attack Intrusion Detection for In-Vehicle CAN-FD Messages.

As an enhanced version of standard CAN, the Controller Area Network with Flexible Data (CAN-FD) rate is vulnerable to attacks due to its lack of information security measures. However, although anomaly detection is an effective method to prevent attacks, the accuracy of detection needs further improvement. In this paper, we propose a novel intrusion detection model for the CAN-FD bus, comprising two sub-models: Anomaly Data Detection Model (ADDM) for spotting anomalies and Anomaly Classification Detection Model (ACDM) for identifying and classifying anomaly types. ADDM employs Long Short-Term Memory (LSTM) layers to capture the long-range dependencies and temporal patterns within CAN-FD frame data, thus identifying frames that deviate from established norms. ACDM is enhanced with the attention mechanism that weights LSTM outputs, further improving the identification of sequence-based relationships and facilitating multi-attack classification. The method is evaluated on two datasets: a real-vehicle dataset including frames designed by us based on known attack patterns, and the CAN-FD Intrusion Dataset, developed by the Hacking and Countermeasure Research Lab. Our method offers broader applicability and more refined classification in anomaly detection. Compared with existing advanced LSTM-based and CNN-LSTM-based methods, our method exhibits superior performance in detection, achieving an improvement in accuracy of 1.44% and 1.01%, respectively.

Experimental demonstration of flexible information rate PON beyond 100 Gb/s with rate-compatible LDPC codes

The applications of rate-compatible low-density parity-check (RC-LDPC) codes are investigated for a 16 quadrature amplitude modulation (16QAM) signal and coherent detection system. With rate-compatible signals, we can provide the flexible net data rate between 135.5 Gb/s and 169.7 Gb/s in a passive optical network (PON) link. Based on the LDPC codes defined in the IEEE 802.3ca standard, we construct two sets of RC-LDPC codes with a fixed and variable information bit length. Since the puncturing operation may degrade the performance of LDPC codes, we apply the protograph-based extrinsic information transfer (PEXIT) technique to optimize the puncturing positions to mitigate the degradation. Additionally, we explore four low-complexity LDPC decoding algorithms (min sum, offset min sum, variable weight min sum, and relaxed min sum with 2 nd min emulation) to investigate the relationship between the computational complexity and decoding performance. Simulation results indicate that the constructed codewords exhibit good performance in the waterfall region across a range of code rates. Finally, we conduct an experimental setup in a dual-polarization 25 GBaud 16QAM coherent PON to verify the effectiveness of the constructed LDPC codes with four decoding algorithms. The experimental results show maximal 4.8 dB receiver sensitivity differences, which demonstrate the feasibility of the method for constructing RC-LDPC codes in future high-speed flexible coherent PON.

Application-Layer Anomaly Detection Leveraging Time-Series Physical Semantics in CAN-FD Vehicle Networks

The Controller Area Network with Flexible Data-Rate (CAN-FD) bus is the predominant in-vehicle network protocol, responsible for transmitting crucial application semantic signals. Due to the absence of security measures, CAN-FD is vulnerable to numerous cyber threats, particularly those altering its authentic physical values. This paper introduces Physical Semantics-Enhanced Anomaly Detection (PSEAD) for CAN-FD networks. Our framework effectively extracts and standardizes the genuine physical meaning features present in the message data fields. The implementation involves a Long Short-Term Memory (LSTM) network augmented with a self-attention mechanism, thereby enabling the unsupervised capture of temporal information within high-dimensional data. Consequently, this approach fully exploits contextual information within the physical meaning features. In contrast to the non-physical semantics-aware whole frame combination detection method, our approach is more adept at harnessing the physical significance inherent in each segment of the message. This enhancement results in improved accuracy and interpretability of anomaly detection. Experimental results demonstrate that our method achieves a mere 0.64% misclassification rate for challenging-to-detect replay attacks and zero misclassifications for DoS, fuzzing, and spoofing attacks. The accuracy has been enhanced by over 4% in comparison to existing methods that rely on byte-level data field characterization at the data link layer.

A Millimeter-Wave Wideband Antenna Module With Switchable Fan-Beam Radiation for Wide Coverage of 5G IoT Applications

Millimeter wave (mm-wave) antenna modules with switchable beam radiation provide a potential solution for enabling flexible wireless links and high data rate in Internet of Things (IoT) networks. Aiming to simultaneously fulfill a wide coverage and follow the cost-effective principle of IoT devices, a novel mm-wave wideband antenna module with switchable fanbeam radiation is proposed based on an air-filled planar Cassegrain beam-former. A comprehensive design procedure combing the theoretical calculation and differential evolution (DE) algorithm is first introduced to construct the beam-former with wide-angle scanning capability. The desirable apertureshared switchable fan-beam radiation with high crossover is then obtained with the aid of a proposed two-feed-per-beam (2FPB) scheme based on a low-loss integrated switch network. A prototype of the antenna in the Ka-band is fabricated by simultaneously adopting the metallic three-dimensional (3D) printing and printed circuit board (PCB) technology. Excellent operating characteristics, including a wide bandwidth of more than 32%, twenty stable fan-shaped radiation beams scanning over a wide angular range of ±45∘ in the H-plane, a high beam crossover of about -3 dB, a gain of up to 19.6 dBi, and a radiation efficiency of greater than 80% are demonstrated experimentally. With the ability to fulfill the radio coverage within a wide conical area, the presented antenna module would be an attractive candidate for the fifth generation (5G) IoT applications.

Intelligent Resource Allocation Using an Artificial Ecosystem Optimizer with Deep Learning on UAV Networks

An Unmanned Aerial Vehicle (UAV)-based cellular network over a millimeter wave (mmWave) frequency band addresses the necessities of flexible coverage and high data rate in the next-generation network. But, the use of a wide range of antennas and higher propagation loss in mmWave networks results in high power utilization and UAVs are limited by low-capacity onboard batteries. To cut down the energy cost of UAV-aided mmWave networks, Energy Harvesting (EH) is a promising solution. But, it is a challenge to sustain strong connectivity in UAV-based terrestrial cellular networks due to the random nature of renewable energy. With this motivation, this article introduces an intelligent resource allocation using an artificial ecosystem optimizer with a deep learning (IRA-AEODL) technique on UAV networks. The presented IRA-AEODL technique aims to effectually allot the resources in wireless UAV networks. In this case, the IRA-AEODL technique focuses on the maximization of system utility over all users, combined user association, energy scheduling, and trajectory design. To optimally allocate the UAV policies, the stacked sparse autoencoder (SSAE) model is used in the UAV networks. For the hyperparameter tuning process, the AEO algorithm is used for enhancing the performance of the SSAE model. The experimental results of the IRA-AEODL technique are examined under different aspects and the outcomes stated the improved performance of the IRA-AEODL approach over recent state of art approaches.

Flexible Data Rate Allocation Using Non-Orthogonal Multiple Access (NOMA) in a Mode Division Multiplexing (MDM) Optical Power Splitter for System-on-Chip Networks.

We put forward and demonstrate a silicon photonics (SiPh)-based mode division multiplexed (MDM) optical power splitter that supports transverse-electric (TE) single-mode, dual-mode, and triple-mode (i.e., TE0, TE1, and TE2). An optical power splitter is needed for optical signal distribution and routing in optical interconnects. However, a traditional optical splitter only divides the power of the input optical signal. This means the same data information is received at all the output ports of the optical splitter. The powers at different output ports may change depending on the splitting ratio of the optical splitter. The main contributions of our proposed optical splitter are: (i) Different data information is received at different output ports of the optical splitter via the utilization of NOMA. By adjusting the power ratios of different channels in the digital domain (i.e., via software control) at the Tx, different channel data information can be received at different output ports of the splitter. It can increase the flexibility of optical signal distribution and routing. (ii) Besides, the proposed optical splitter can support the fundamental TE0 mode and the higher modes TE1, TE2, etc. Supporting mode-division multiplexing and multi-mode operation are important for future optical interconnects since the number of port counts is limited by the chip size. This can significantly increase the capacity besides wavelength division multiplexing (WDM) and spatial division multiplexing (SDM). The integrated SiPh MDM optical power splitter consists of a mode up-conversion section implemented by asymmetric directional couplers (ADCs) and a Y-branch structure for MDM power distribution. Here, we also propose and discuss the use of the Genetic algorithm (GA) for the MDM optical power splitter parameter optimization. Finally, to provide adjustable data rates at different output ports after the MDM optical power splitter, non-orthogonal multiple access-orthogonal frequency division multiplexing (NOMA-OFDM) is also employed. Experimental results validate that, in three modes (TE0, TE1, and TE2), user-1 and user-2 achieve data rates of (user-1: greater than 22 Gbit/s; user-2: greater than 12 Gbit/s) and (user-1: greater than 12 Gbit/s; user-2: 24 Gbit/s), respectively, at power-ratio (PR) = 2.0 or 3.0. Each channel meets the hard-decision forward-error-correction (HD-FEC, i.e., BER = 3.8 × 10-3) threshold. The proposed method allows flexible data rate allocation for multiple users for optical interconnects and system-on-chip networks.

CANASTA: Controller Area Network Authentication Schedulability Timing Analysis

The Controller Area Network (CAN) dominates in-vehicle networking systems in modern vehicles. CAN was designed with low-latency and reliability as key features. Authenticity of a CAN frame was not considered in the design, thus, most in-vehicle network nodes inherently trust received messages as coming from a legitimate source. As a result, it is trivial to program (or hack) a network node to spoof traffic. Authentication is challenging for CAN and related protocols, such as SAE J1939, due to limited frame sizes and high bus utilization. Adding a message authentication code (MAC) as a separate message can unduly stress the real-time delivery of safety-critical messages. Although this stressor is well-known, the impact of authentication protocols on real-time message delivery in CAN has not yet been thoroughly examined. In this paper, we provide the first comprehensive analysis of realtime schedulability analysis applied to authentication schemes for CAN, CAN Flexible Data-rate (CAN FD), and CAN extra long payload (CAN XL). We formulate the response time analysis for addition of MACs and periodic transmission of MACs, and we examine their impact on two case studies and through evaluation with randomized schedulability experiments over a wide range of message sets.

In-Vehicle Network Average Response Time Analysis for CAN-FD and Automotive Ethernet

In-vehicle network (IVN) technologies are changing corresponding to the rapidly increasing demand in autonomous driving and vehicle electrification. Due to the increase in real-time data generated from the control modules and sensors, controller area networks (CANs) have a heavier burden to satisfy the strict delay bounds. Therefore, CAN with flexible data rate (CAN-FD) and Automotive Ethernet (AE) have drawn attention as promising IVNs. This paper provides an overview of the IVN transmission protocols, time delay characteristics, and analysis methods. Most of the existing IVN timing analysis studies assume the worst case and consider only the occurrence of periodic or aperiodic messages, however for more accurate control, the average time delay needs to be accurately estimated. In this paper, CAN, CAN-FD, and AE analytical models based on queueing analysis are proposed to estimate the average response time for mixed traffic. For CAN and CAN-FD systems, the network synchronization statuses are considered and AE with 1-level preemption to support deterministic delays is analyzed. The improved accuracy of the newly derived analytical models is verified based on comparison with existing CAN queueing models through simulation experiments.

Security architecture for automotive communication networks with CAN FD

Modern vehicles have dozens of electronic modules, connected through sophisticated intra-vehicle networks, which essentially control all the vehicle functions. Recent studies have shown the vulnerability of vehicular computer systems, but the existing security models are not enough robust yet because the busload and level of cryptographic strategy are not considered enough to be implemented in the frame. This work proposes a new security model for the Controller Area Network with Flexible Data-Rate (CAN FD), based on encryption and authentication. The model divides the frame data field into two blocks. The AES-256 (Advanced Encryption Standard) symmetric key encryption is applied to the first block of the data frame, whose content is the data corresponding to the payload of the frame. The authentication of the data in the first block is executed through the implementation of the HMAC/SHA-256 function and inserted in the second block. Performance analysis has shown that the combination of 32 bytes for the first block and 32 bytes for the second one provides the shortest processing time and 33.33% fewer data compared to frame 48. Results indicated that the proposed security model has a higher encryption performance than existing methods.

КОДУВАННЯ ТА ДЕКОДУВАННЯ КАДРІВ ЛОКАЛЬНОЇ МЕРЕЖІ КОНТРОЛЕРІВ ЗА ДОПОМОГОЮ БАЗИ ДАНИХ CAN

The article examines the features of building a Controller Area Network (CAN) in the automotive industry. The main steps for encoding and decoding physical values in CAN and CAN FD (CAN with flexible data rate) frames are provided. The syntax of messages and signals in CAN DBC has been analyzed. An example of a DBC file that can be used to encode and decode the speed and engine speed of a truck is reviewed. Based on the Linux operating system and the python programming language, an experimental scheme of a virtual controller area network was created, which encodes data on one node and decodes data on the other using CAN DBC.

Security-Aware CAN-FD Message Packing in Intelligent Automotive Cyber–Physical Systems

Controller area network with flexible data-rate (CAN-FD) has received great attention in automotive cyber–physical systems (ACPSs) due to its high bandwidth and long payload. However, CAN-FD adopts a broadcast message transmission mechanism and lacks security protection, making it extremely vulnerable to cyberattacks. CAN-FD message packing (packing signals into messages) with low bandwidth occupancy (utilization) under security constraints is the prerequisite for running intelligent applications in ACPS. In this work, we implement a two-stage CAN-FD message packing solution to reduce bandwidth utilization and improve signal acceptance rate under security constraints. The first stage solves the message packing problem of minimizing bus bandwidth utilization under security constraints. The second stage aims at improving the signal acceptance rate by repacking signals. Experimental results show that the first stage reduces average bus bandwidth utilization by 135% compared with the unpacking solution, and the second stage improves the average signal acceptance rate by 5% than existing advanced methods.

Machine-Learning-Based 3-D Channel Modeling for U2V mmWave Communications

Unmanned aerial vehicle (UAV) millimeter wave (mmWave) technologies can provide flexible link and high data rate for future communication networks. By considering the new features of three-dimensional (3D) scattering space, 3D velocity, 3D antenna array, and especially 3D rotations, a machine learning (ML) integrated UAV-to-Vehicle (U2V) mmWave channel model is proposed. Meanwhile, a ML-based network for channel parameter calculation and generation is developed. The deterministic parameters are calculated based on the simplified geometry information, while the random ones are generated by the back propagation based neural network (BPNN) and generative adversarial network (GAN), where the training data set is obtained from massive ray-tracing (RT) simulations. Moreover, theoretical expressions of channel statistical properties, i.e., power delay profile (PDP), autocorrelation function (ACF), Doppler power spectrum density (DPSD), and cross-correlation function (CCF) are derived and analyzed. Finally, the U2V mmWave channel is generated under a typical urban scenario at 28 GHz. The generated PDP and DPSD show good agreement with RT-based results, which validates the effectiveness of proposed method. Moreover, the impact of 3D rotations, which has rarely been reported in previous works, can be observed in the generated CCF and ACF, which are also consistent with the theoretical and measurement results.

Ringing Suppression in a Controller Area Network With Flexible Data Rate Using Frequency-Selective Impedance Matching and Temporal Impedance Switching

An inherent impedance mismatch in a controller area network with flexible data rate (CAN-FD) network gives rise to signal distortion called ringing. Ringing is one of the main causes of communication errors and performance degradation. In this paper, a ringing suppression system is proposed, which alleviates the impedance mismatch at two mismatch locations: the unterminated CAN nodes and the divergence points of bus lines. At the unterminated CAN nodes, a temporal impedance switching circuit, including a matching resistor and a limiting diode, is added. The circuit is controlled to only engage right after a dominant-to-recessive transition when ringing likely occurs. At the divergence points, a frequency-selective impedance matching circuit is inserted. The circuit consists of a resistor, a capacitor, and an inductor connected in parallel, which is also designed to activate only during state transitions with the dependency of their impedance on frequency. Thus, the side effects on CAN-FD operations can be prevented. The performance of the ringing suppression system is verified by experiments. The experimental results demonstrate that the proposed system reduces ringing to a level lower than the input threshold for recessive bit detection in diverse bus configurations and supports more reliable CAN-FD communication.

PUF-Based Post-Quantum CAN-FD Framework for Vehicular Security

The Controller Area Network (CAN) is a bus protocol widely used in Electronic control Units (ECUs) to communicate between various subsystems in vehicles. Insecure CAN networks can allow attackers to control information between vital vehicular subsystems. As vehicles can have lifespans of multiple decades, post-quantum cryptosystems are essential for protecting the vehicle communication systems from quantum attacks. However, standard CAN’s efficiency and payload sizes are too small for post-quantum cryptography. The Controller Area Network Flexible Data-Rate (CAN-FD) is an updated protocol for CAN that increases transmission speeds and maximum payload size. With CAN-FD, higher security standards, such as post-quantum, can be utilized without severely impacting performance. In this paper, we propose PUF-Based Post-Quantum Cryptographic CAN-FD Framework, or PUF-PQC-CANFD. Our framework provides post-quantum security to the CAN network while transmitting and storing less information than other existing pre-quantum and post-quantum CAN frameworks. Our proposal protects against most cryptographic-based attacks while transmitting (at up to 100 ECUs) 25–94% less messages than existing pre-quantum frameworks and 99% less messages than existing post-quantum frameworks. PUF-PQC-CANFD is optimized for smaller post-quantum key sizes, storage requirements, and transmitted information to minimize the impact on resource-restricted ECUs.

Intelligent Accidental Detection and Prevention System for Car using Can FD Protocol

Controller Area Network with Flexible Data Rate (CAN FD) is a vehicle bus standard protocol designed especially for automotive application. By using CAN FD Bus protocol, ECUs (Electronic control units) of vehicles can communicate with each other. It is a high speed, bandwidth efficient network. In order to reduce point to point wiring harness in vehicle automation, CAN FD is suggested as a means for data communication within the vehicle environment. The benefits of CAN FD bus based network over traditional point to point schemes will offer increased flexibility and expandability for future technology insertions units. We have designed five nodes, 4-sensor nodes and 1-Bus monitor nodes. Sensor nodes and Bus monitor nodes are communicating with each other through CAN FD Bus. Bus monitor node collects all messages present on the CAN FD Bus and transmits to the PC by using the UART interface. The CAN FD monitor window is designed using Visual Studio.net which allows the time oriented buffering of CAN FD messages and visualization of the BUS data at the package level.

Performance evaluation of free space optics communication system in the scenario of triple play service using probabilistic shaping scheme

An advanced triple-play-services (TPS) system based on probabilistic shaping (PS) scheme for free- space-optical (FSO) communication network is proposed and experimentally demonstrated for the first time. In this paper, the PS-32-quadrature amplitude modulation (QAM) 10 Gb/s data, PS-32-QAM 10 Gb/s voice and PS based 2.5 Gb/s HDTV signal are successfully transmitted over 600-m FSO link employing doublet lens scheme. The PS and polarization multiplexing technique both are helped to upgrade the spectral efficiency and improve the system performance. Normalized-generalized-mutual-information (NGMI) threshold is 0.92 at FEC code rate 9/10 for voice/data and 0.82 at FEC code rate 4/5 for video signal are selected to successfully execute the experiment. The spectral efficiency of our system is achieved by calculating the NGMI and shaping parameter (α), 13.6 bits/s/Hz (voice and data) and 10.41 bits/s/Hz (video) spectral efficiency are obtained at maximum α. Experimental results prove that PS based FSO communication system provides flexible data rate and greater spectrum efficiency and also be a powerful candidate to alleviate pressure on modern optical transport system.

Overview of ultra-wideband transceivers—system architectures and applications

The Ultra-WideBand (UWB) technique, which offers good energy efficiency, flexible data rate, and high ranging accuracy, has recently been recognized as a revived wireless technology for short distance communication. This paper presents a brief overview of two UWB techniques, covering Impulse-Radio UWB (IR-UWB) and Frequency-Modulation UWB (FM-UWB) methods. The link margin enhancement technique, Very-WideBand (VWB), and power consumption reducing technique, chirp UWB, are also introduced. Then, several potential applications of IR-UWB with transceiver architectures are addressed, including high data rate proximity communication and secure wireless connectivity. With fine-ranging and energy-efficient communication features, the UWB wireless technology is highly promising for secure mobile Internet of Things (IoT) applications.

A Sub-100-μW 0.1-to-27-Mb/s Pulse-Based Digital Transmitter for the Human Intranet in 28-nm FD-SOI CMOS

Human body communications require energy-efficient transceivers to connect diverse devices on the human body for wellness and medical applications. This article presents a fully digital pulse-based transmitter (TX) for capacitive body-coupled communications (c-BCCs) in 28-nm Fully Depleted Silicon on Insulator (FD-SOI) CMOS. The TX is operating at 450 MHz where surface-wave (SW) propagation is the dominant mechanism of c-BCC, offering a larger bandwidth with a more stable channel. The heavily duty-cycled TX uses a 90-MHz free-running oscillator and edge combiners to generate OOK Gaussian-shaped pulses through a switched-capacitor power amplifier (PA). Wide range forward body biasing (FBB), specific to FD-SOI technology, allows frequency tuning and adaptive efficiency optimization as a function of data rate. The proposed TX consumes 17–76 <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$\mu \text{W}$ </tex-math></inline-formula> for flexible data rates from 0.1 to 27 Mb/s (170 down to 2.8 pJ/b) with up to 14% system efficiency under 0.5-V supply voltage.

Efficient Ambient LoRa Backscatter With On-Off Keying Modulation

Backscatter communication holds potential for ubiquitous and low-cost connectivity among low-power IoT devices. To avoid interference between the carrier signal and the backscatter signal, recent works propose a frequency-shifting technique to separate these two signals in the frequency domain. Such proposals, however, have to occupy the precious wireless spectrum that is already overcrowded, and increase the power, cost, and complexity of the backscatter tag. In this paper, we revisit the classic ON-OFF Keying (OOK) modulation and propose Aloba, a backscatter system that takes the ambient LoRa transmissions as the excitation and piggybacks the in- band OOK modulated signals over the LoRa transmissions. Our design enables the backscatter signal to work in the same frequency band of the carrier signal, meanwhile achieving flexible data rate at different transmission range. The key contributions of Aloba include: i) the design of a low-power backscatter tag that can pick up the ambient LoRa signals from other signals; ii) a novel decoding algorithm to demodulate both the carrier signal and the backscatter signal from their superposition. We further adopt link coding mechanism and interleave operation to enhance the reliability of backscatter signal decoding. We implement Aloba and conduct head-to-head comparison with the state-of-the-art LoRa backscatter system PLoRa in various settings. The experiment results show Aloba can achieve 39.5–199.4 Kbps data rate at various distances, 10.4– <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$52.4\times $ </tex-math></inline-formula> higher than PLoRa.

CANon: Lightweight and Practical Cyber-Attack Detection for Automotive Controller Area Networks.

Automotive cyber-physical systems are in transition from the closed-systems to open-networking systems. As a result, in-vehicle networks such as the controller area network (CAN) have become essential to connect to inter-vehicle networks through the various rich interfaces. Newly exposed security concerns derived from this requirement may cause in-vehicle networks to pose threats to automotive security and driver’s safety. In this paper, to ensure a high level of security of the in-vehicle network for automotive CPS, we propose a novel lightweight and practical cyber defense platform, referred to as CANon (CAN with origin authentication and non-repudiation), to be enabled to detect cyber-attacks in real-time. CANon is designed based on the hierarchical approach of centralized-session management and distributed-origin authentication. In the former, a gateway node manages each initialization vector and session of origin-centric groups consisting of two more sending and receiving nodes. In the latter, the receiving nodes belonging to the given origin-centric group individually perform the symmetric key-based detection against cyber-attacks by verifying each message received from the sending node, namely origin authentication, in real-time. To improve the control security, CANon employs a one-time local key selected from a sequential hash chain (SHC) for authentication of an origin node in a distributed mode and exploits the iterative hash operations with randomness. Since the SHC can constantly generate and consume hash values regardless of their memory capacities, it is very effective for resource-limited nodes for in-vehicle networks. In addition, through implicit key synchronization within a given group, CANon addresses the challenges of a key exposure problem and a complex key distribution mechanism when performing symmetric key-based authentication. To achieve lightweight cyber-attack detection without imposing an additive load on CAN, CANon uses a keyed-message authentication code (KMAC) activated within a given group. The detection performance of CANon is evaluated under an actual node of Freescale S12XF and virtual nodes operating on the well-known CANoe tool. It is seen that the detection rate of CANon against brute-force and replay attacks reaches 100% when the length of KMAC is over 16 bits. It demonstrates that CANon ensures high security and is sufficient to operate in real-time even on low-performance ECUs. Moreover, CANon based on several software modules operates without an additive hardware security module at an upper layer of the CAN protocol and can be directly ported to CAN-FD (CAN with Flexible Data rate) so that it achieves the practical cyber defense platform.