TCAN-IDS: Intrusion Detection System for Internet of Vehicle Using Temporal Convolutional Attention Network
Intrusion detection systems based on recurrent neural network (RNN) have been considered as one of the effective methods to detect time-series data of in-vehicle networks. However, building a model for each arbitration bit is not only complex in structure but also has high computational overhead. Co...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2022-02-01
|
| Series: | Symmetry |
| Subjects: | |
| Online Access: | https://www.mdpi.com/2073-8994/14/2/310 |
| _version_ | 1797476401790582784 |
|---|---|
| author | Pengzhou Cheng Kai Xu Simin Li Mu Han |
| author_facet | Pengzhou Cheng Kai Xu Simin Li Mu Han |
| author_sort | Pengzhou Cheng |
| collection | DOAJ |
| description | Intrusion detection systems based on recurrent neural network (RNN) have been considered as one of the effective methods to detect time-series data of in-vehicle networks. However, building a model for each arbitration bit is not only complex in structure but also has high computational overhead. Convolutional neural network (CNN) has always performed excellently in processing images, but they have recently shown great performance in learning features of normal and attack traffic by constructing message matrices in such a manner as to achieve real-time monitoring but suffer from the problem of temporal relationships in context and inadequate feature representation in key regions. Therefore, this paper proposes a temporal convolutional network with global attention to construct an in-vehicle network intrusion detection model, called TCAN-IDS. Specifically, the TCAN-IDS model continuously encodes 19-bit features consisting of an arbitration bit and data field of the original message into a message matrix, which is symmetric to messages recalling a historical moment. Thereafter, the feature extraction model extracts its spatial-temporal detail features. Notably, global attention enables global critical region attention based on channel and spatial feature coefficients, thus ignoring unimportant byte changes. Finally, anomalous traffic is monitored by a two-class classification component. Experiments show that TCAN-IDS demonstrates high detection performance on publicly known attack datasets and is able to accomplish real-time monitoring. In particular, it is anticipated to provide a high level of symmetry between information security and illegal intrusion. |
| first_indexed | 2024-03-09T20:57:16Z |
| format | Article |
| id | doaj.art-3fb676e826104530856f13319fb532a4 |
| institution | Directory Open Access Journal |
| issn | 2073-8994 |
| language | English |
| last_indexed | 2024-03-09T20:57:16Z |
| publishDate | 2022-02-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Symmetry |
| spelling | doaj.art-3fb676e826104530856f13319fb532a42023-11-23T22:16:33ZengMDPI AGSymmetry2073-89942022-02-0114231010.3390/sym14020310TCAN-IDS: Intrusion Detection System for Internet of Vehicle Using Temporal Convolutional Attention NetworkPengzhou Cheng0Kai Xu1Simin Li2Mu Han3School of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang 212013, ChinaSchool of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang 212013, ChinaSchool of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang 212013, ChinaSchool of Computer Science and Communication Engineering, Jiangsu University, Zhenjiang 212013, ChinaIntrusion detection systems based on recurrent neural network (RNN) have been considered as one of the effective methods to detect time-series data of in-vehicle networks. However, building a model for each arbitration bit is not only complex in structure but also has high computational overhead. Convolutional neural network (CNN) has always performed excellently in processing images, but they have recently shown great performance in learning features of normal and attack traffic by constructing message matrices in such a manner as to achieve real-time monitoring but suffer from the problem of temporal relationships in context and inadequate feature representation in key regions. Therefore, this paper proposes a temporal convolutional network with global attention to construct an in-vehicle network intrusion detection model, called TCAN-IDS. Specifically, the TCAN-IDS model continuously encodes 19-bit features consisting of an arbitration bit and data field of the original message into a message matrix, which is symmetric to messages recalling a historical moment. Thereafter, the feature extraction model extracts its spatial-temporal detail features. Notably, global attention enables global critical region attention based on channel and spatial feature coefficients, thus ignoring unimportant byte changes. Finally, anomalous traffic is monitored by a two-class classification component. Experiments show that TCAN-IDS demonstrates high detection performance on publicly known attack datasets and is able to accomplish real-time monitoring. In particular, it is anticipated to provide a high level of symmetry between information security and illegal intrusion.https://www.mdpi.com/2073-8994/14/2/310control area networkintrusion detection systemtemporal convolution networkattention mechanism |
| spellingShingle | Pengzhou Cheng Kai Xu Simin Li Mu Han TCAN-IDS: Intrusion Detection System for Internet of Vehicle Using Temporal Convolutional Attention Network Symmetry control area network intrusion detection system temporal convolution network attention mechanism |
| title | TCAN-IDS: Intrusion Detection System for Internet of Vehicle Using Temporal Convolutional Attention Network |
| title_full | TCAN-IDS: Intrusion Detection System for Internet of Vehicle Using Temporal Convolutional Attention Network |
| title_fullStr | TCAN-IDS: Intrusion Detection System for Internet of Vehicle Using Temporal Convolutional Attention Network |
| title_full_unstemmed | TCAN-IDS: Intrusion Detection System for Internet of Vehicle Using Temporal Convolutional Attention Network |
| title_short | TCAN-IDS: Intrusion Detection System for Internet of Vehicle Using Temporal Convolutional Attention Network |
| title_sort | tcan ids intrusion detection system for internet of vehicle using temporal convolutional attention network |
| topic | control area network intrusion detection system temporal convolution network attention mechanism |
| url | https://www.mdpi.com/2073-8994/14/2/310 |
| work_keys_str_mv | AT pengzhoucheng tcanidsintrusiondetectionsystemforinternetofvehicleusingtemporalconvolutionalattentionnetwork AT kaixu tcanidsintrusiondetectionsystemforinternetofvehicleusingtemporalconvolutionalattentionnetwork AT siminli tcanidsintrusiondetectionsystemforinternetofvehicleusingtemporalconvolutionalattentionnetwork AT muhan tcanidsintrusiondetectionsystemforinternetofvehicleusingtemporalconvolutionalattentionnetwork |