Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting
Abstract The development of Intrusion Detection Systems (IDS) for in-vehicle buses has gained a lot of momentum in recent years as the number of reported vulnerabilities and the degree of interconnectivity for modern vehicles are on the rise. Since intrusion detection is resource consuming, it can b...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Nature Portfolio
2024-04-01
|
| Series: | Scientific Reports |
| Online Access: | https://doi.org/10.1038/s41598-024-58694-4 |
| _version_ | 1797209400822202368 |
|---|---|
| author | Tudor Andreica Adrian Musuroi Alfred Anistoroaei Camil Jichici Bogdan Groza |
| author_facet | Tudor Andreica Adrian Musuroi Alfred Anistoroaei Camil Jichici Bogdan Groza |
| author_sort | Tudor Andreica |
| collection | DOAJ |
| description | Abstract The development of Intrusion Detection Systems (IDS) for in-vehicle buses has gained a lot of momentum in recent years as the number of reported vulnerabilities and the degree of interconnectivity for modern vehicles are on the rise. Since intrusion detection is resource consuming, it can be performed on computationally capable Android head units that are now present inside vehicles. Moreover, these units are connected to the internet, which enables the use of more complex algorithms that run in cloud environments. In this work we develop one such approach: an IDS that consists of a locally installed copy, running on head units, and a centralized instance of it that runs in the cloud and monitors traffic for groups of similar vehicles. Additionally, the centralized instance is part of a cloud service for intrusion detection which is continuously updated with the most recent types of attacks. The classification results of the cloud-based service are further analyzed by an incident response team which confirms the presence of known attacks, analyzes new types of attacks and assesses their impact. The output of this activity is stored on the Blockchain as ISO/SAE 21434 compliant reports, ensuring the transparency and traceability of the reported incidents. |
| first_indexed | 2024-04-24T09:54:06Z |
| format | Article |
| id | doaj.art-3e8f0150ddf34ea79de778da1838b3b9 |
| institution | Directory Open Access Journal |
| issn | 2045-2322 |
| language | English |
| last_indexed | 2024-04-24T09:54:06Z |
| publishDate | 2024-04-01 |
| publisher | Nature Portfolio |
| record_format | Article |
| series | Scientific Reports |
| spelling | doaj.art-3e8f0150ddf34ea79de778da1838b3b92024-04-14T11:12:50ZengNature PortfolioScientific Reports2045-23222024-04-0114111710.1038/s41598-024-58694-4Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reportingTudor Andreica0Adrian Musuroi1Alfred Anistoroaei2Camil Jichici3Bogdan Groza4Faculty of Automation and Computers, Politehnica University of TimisoaraFaculty of Automation and Computers, Politehnica University of TimisoaraFaculty of Automation and Computers, Politehnica University of TimisoaraFaculty of Automation and Computers, Politehnica University of TimisoaraFaculty of Automation and Computers, Politehnica University of TimisoaraAbstract The development of Intrusion Detection Systems (IDS) for in-vehicle buses has gained a lot of momentum in recent years as the number of reported vulnerabilities and the degree of interconnectivity for modern vehicles are on the rise. Since intrusion detection is resource consuming, it can be performed on computationally capable Android head units that are now present inside vehicles. Moreover, these units are connected to the internet, which enables the use of more complex algorithms that run in cloud environments. In this work we develop one such approach: an IDS that consists of a locally installed copy, running on head units, and a centralized instance of it that runs in the cloud and monitors traffic for groups of similar vehicles. Additionally, the centralized instance is part of a cloud service for intrusion detection which is continuously updated with the most recent types of attacks. The classification results of the cloud-based service are further analyzed by an incident response team which confirms the presence of known attacks, analyzes new types of attacks and assesses their impact. The output of this activity is stored on the Blockchain as ISO/SAE 21434 compliant reports, ensuring the transparency and traceability of the reported incidents.https://doi.org/10.1038/s41598-024-58694-4 |
| spellingShingle | Tudor Andreica Adrian Musuroi Alfred Anistoroaei Camil Jichici Bogdan Groza Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting Scientific Reports |
| title | Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting |
| title_full | Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting |
| title_fullStr | Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting |
| title_full_unstemmed | Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting |
| title_short | Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting |
| title_sort | blockchain integration for in vehicle can bus intrusion detection systems with iso sae 21434 compliant reporting |
| url | https://doi.org/10.1038/s41598-024-58694-4 |
| work_keys_str_mv | AT tudorandreica blockchainintegrationforinvehiclecanbusintrusiondetectionsystemswithisosae21434compliantreporting AT adrianmusuroi blockchainintegrationforinvehiclecanbusintrusiondetectionsystemswithisosae21434compliantreporting AT alfredanistoroaei blockchainintegrationforinvehiclecanbusintrusiondetectionsystemswithisosae21434compliantreporting AT camiljichici blockchainintegrationforinvehiclecanbusintrusiondetectionsystemswithisosae21434compliantreporting AT bogdangroza blockchainintegrationforinvehiclecanbusintrusiondetectionsystemswithisosae21434compliantreporting |