Anomaly Detection Approach Using Adaptive Cumulative Sum Algorithm for Controller Area Network
| Authors | Habeeb Olufowobi, Uchenna Ezeobi, Eric Muhati, Gaylon Robinson, Clinton Young, Joseph Zambreno, and Gedare Bloom |
|---|---|
| Type | Conference Paper |
| Published in | Proceedings of the ACM Workshop on Automotive Cybersecurity (AutoSec) |
| Date | March 2019 |
Abstract
The modern vehicle has transformed from a purely mechanical system to a system that embeds several electronic devices. These devices communicate through the in-vehicle network for enhanced safety and comfort but are vulnerable to cyber-physical risks and attacks. A well-known technique of detecting these attacks and unusual events is by using intrusion detection systems. Anomalies in the network occur at unknown points and produce abrupt changes in the statistical features of the message stream. In this paper, we propose an anomaly-based intrusion detection approach using the cumulative sum (CUSUM) change-point detection algorithm to detect data injection attacks on the controller area network (CAN) bus. We leverage the parameters required for the change-point algorithm to reduce false alarm rate and detection delay. Using real dataset generated from a car in normal operation, we evaluate our detection approach on three different kinds of attack scenarios.
BibTeX
@conference{OluEze19A,
title = {Anomaly Detection Approach Using Adaptive Cumulative Sum Algorithm for Controller Area Network},
booktitle = {Proceedings of the ACM Workshop on Automotive Cybersecurity (AutoSec)},
year = {2019},
month = mar,
author = {Olufowobi, Habeeb and Ezeobi, Uchenna and Muhati, Eric and Robinson, Gaylon and Young, Clinton and Zambreno, Joseph and Bloom, Gedare}
}