Vorrichtung und verfahren zur konstruktion eines auf eine can-kommunikation angewandten eindringungsdetektionssystems unter verwendung einer detektionsrichtlinienregel

Abstract

Disclosed are an apparatus and method for constructing an intrusion detection system applied to CAN communication. The method for constructing an intrusion detection system applied to CAN communication may include extracting standard information by parsing an input file associated with CAN communication, setting a policy rule by applying at least one of a static ruleset and a custom ruleset using the extracted standard information, and creating a policy file to be applied to the intrusion detection system by packing the standard information and the policy rule.