Abstract

Philipp Meyer, Timo Häckel, Franz Korf, Thomas C. Schmidt,
Network Anomaly Detection in Cars based on Time-Sensitive Ingress Control,
In: Proc. of the IEEE 21th Vehicular Technology Conference: VTC2020-Fall, IEEE Press, October 2020.
[html][BibTeX][Abstract]

Abstract: Connected cars need robust protection against network attacks. Network anomaly detection and prevention on board will be particularly fast and reliable when situated on the lowest possible layer. Blocking traffic on a low layer, however, causes severe harm if triggered erroneously by falsely positive alarms. In this paper, we introduce and evaluate a concept for detecting anomalous traffic using the ingress control of Time-Sensitive Networking (TSN). We build on the idea that TSN traffic descriptors for in-car network configurations are rigorous, and hence any observed violation should not be a false positive. We use Software-Defined Networking (SDN) to evaluate anomaly reports, to identify the generating flows, and to ban them from the network. We evaluate our concept by simulating a real-world zonal network topology of a future car. Our findings confirm that abnormally behaving individual flows can indeed be reliably segregated with zero false positives.

Themes: Time-Sensitive Networking , Network Security

 

This page generated by bibTOhtml on Thu 21 Nov 2024 12:05:04 AM UTC