Enhanced Intrusion Detection in In-Vehicle Networks Using Advanced Feature Fusion and Stacking-Enriched Learning
Modern vehicles rely heavily on interconnected electronic control units (ECUs) through in-vehicle networks to perform crucial functions such as braking and monitoring engine RPMs. However, the increased number of ECUs and their connectivity to the in-vehicle network poses a security risk due to the...
| Main Author: | |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2024-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/10374358/ |
| _version_ | 1797361474480373760 |
|---|---|
| author | Ali Altalbe |
| author_facet | Ali Altalbe |
| author_sort | Ali Altalbe |
| collection | DOAJ |
| description | Modern vehicles rely heavily on interconnected electronic control units (ECUs) through in-vehicle networks to perform crucial functions such as braking and monitoring engine RPMs. However, the increased number of ECUs and their connectivity to the in-vehicle network poses a security risk due to the lack of encryption and authentication protocols such as the controller area network (CAN). To address this problem, machine learning (ML) based intrusion detection systems (IDSs) have been proposed. However, existing IDSs suffer from low detection accuracy, limited real-time response, and high resource requirements. This study proposes an accurate and low-complexity IDS for in-vehicle networks based on feature fusion and ensemble learning called the Feature Fusion and Stacking-based IDS (FFS-IDS). FFS-IDS fuses multiple features extracted from raw network traffic and then classifies traffic instances into intrusive and non-intrusive categories using a stacking ensemble learning of basic machine learning classifiers. Specifically, a decision tree is employed as a base classifier, and random forest is used as a meta-learner. This work implements and validates the FFS-IDS using real-time car hacking data sets and achieves better performance than individual decision tree classifiers and popular ensemble learning methods such as Random Forest, LightGBM, AdaBoost, and ExtraTree algorithms. The results demonstrate that FFS-IDS can detect Denial of Service (DoS), Gear spoofing, and RPM spoofing attacks with up to 99% accuracy and Fuzzy attacks with up to 97.5% accuracy using benchmark datasets. Overall, this study shows the effectiveness and practicality of FFS-IDS in detecting intrusions in in-vehicle networks, which is essential for ensuring the cybersecurity and safety of modern vehicles. Future work in this area could involve exploring additional feature extraction techniques and fine-tuning hyperparameters to improve the performance of IDSs further. |
| first_indexed | 2024-03-08T15:55:10Z |
| format | Article |
| id | doaj.art-fea2d66b42024bfb94d52bce55d0833f |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-03-08T15:55:10Z |
| publishDate | 2024-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-fea2d66b42024bfb94d52bce55d0833f2024-01-09T00:04:38ZengIEEEIEEE Access2169-35362024-01-01122045205610.1109/ACCESS.2023.334761910374358Enhanced Intrusion Detection in In-Vehicle Networks Using Advanced Feature Fusion and Stacking-Enriched LearningAli Altalbe0https://orcid.org/0009-0005-3510-4699Department of Computer Science, Prince Sattam bin Abdulaziz University, Al-Kharj, Saudi ArabiaModern vehicles rely heavily on interconnected electronic control units (ECUs) through in-vehicle networks to perform crucial functions such as braking and monitoring engine RPMs. However, the increased number of ECUs and their connectivity to the in-vehicle network poses a security risk due to the lack of encryption and authentication protocols such as the controller area network (CAN). To address this problem, machine learning (ML) based intrusion detection systems (IDSs) have been proposed. However, existing IDSs suffer from low detection accuracy, limited real-time response, and high resource requirements. This study proposes an accurate and low-complexity IDS for in-vehicle networks based on feature fusion and ensemble learning called the Feature Fusion and Stacking-based IDS (FFS-IDS). FFS-IDS fuses multiple features extracted from raw network traffic and then classifies traffic instances into intrusive and non-intrusive categories using a stacking ensemble learning of basic machine learning classifiers. Specifically, a decision tree is employed as a base classifier, and random forest is used as a meta-learner. This work implements and validates the FFS-IDS using real-time car hacking data sets and achieves better performance than individual decision tree classifiers and popular ensemble learning methods such as Random Forest, LightGBM, AdaBoost, and ExtraTree algorithms. The results demonstrate that FFS-IDS can detect Denial of Service (DoS), Gear spoofing, and RPM spoofing attacks with up to 99% accuracy and Fuzzy attacks with up to 97.5% accuracy using benchmark datasets. Overall, this study shows the effectiveness and practicality of FFS-IDS in detecting intrusions in in-vehicle networks, which is essential for ensuring the cybersecurity and safety of modern vehicles. Future work in this area could involve exploring additional feature extraction techniques and fine-tuning hyperparameters to improve the performance of IDSs further.https://ieeexplore.ieee.org/document/10374358/Controller area networkin-vehicle networkintrusion detection systemfeature fusionensemble learningcar hacking |
| spellingShingle | Ali Altalbe Enhanced Intrusion Detection in In-Vehicle Networks Using Advanced Feature Fusion and Stacking-Enriched Learning IEEE Access Controller area network in-vehicle network intrusion detection system feature fusion ensemble learning car hacking |
| title | Enhanced Intrusion Detection in In-Vehicle Networks Using Advanced Feature Fusion and Stacking-Enriched Learning |
| title_full | Enhanced Intrusion Detection in In-Vehicle Networks Using Advanced Feature Fusion and Stacking-Enriched Learning |
| title_fullStr | Enhanced Intrusion Detection in In-Vehicle Networks Using Advanced Feature Fusion and Stacking-Enriched Learning |
| title_full_unstemmed | Enhanced Intrusion Detection in In-Vehicle Networks Using Advanced Feature Fusion and Stacking-Enriched Learning |
| title_short | Enhanced Intrusion Detection in In-Vehicle Networks Using Advanced Feature Fusion and Stacking-Enriched Learning |
| title_sort | enhanced intrusion detection in in vehicle networks using advanced feature fusion and stacking enriched learning |
| topic | Controller area network in-vehicle network intrusion detection system feature fusion ensemble learning car hacking |
| url | https://ieeexplore.ieee.org/document/10374358/ |
| work_keys_str_mv | AT alialtalbe enhancedintrusiondetectionininvehiclenetworksusingadvancedfeaturefusionandstackingenrichedlearning |