Reference Message Selection for In-Vehicle Network Anomaly Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting spoofing attacks in in-vehicle networks, such as those using the CAN standard, are unable to effectively identify anomalous messages, as they only detect attacks that are currently occurring and do not provide a means to judge which messages are anomalous.
Innovation Solution
A reference message selection method is introduced, which involves storing candidate information for potential reference messages, selecting a suitable selection method based on this information, and then using that method to select the reference message. This approach allows for the appropriate selection of a reference message to determine whether messages sent to the network are anomalous.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If a reference message selection method is implemented to accurately identify anomalous messages, then the detection precision of unauthorized communication is improved, but the system complexity and processing time increase due to storing candidate information and selecting selection methods
Solution Approach 1:
The reference message selection process is segmented into distinct phases: storing candidate information, selecting a selection method based on candidate characteristics, and then selecting the reference message using the chosen method. This segmentation allows the system to manage complexity by breaking down the overall selection task into manageable sub-tasks, each handling a specific aspect of the selection process
Solution Approach 2:
Candidate information regarding potential reference messages is stored in advance before the actual selection process. This preliminary action enables the system to have pre-evaluated options ready, reducing the computational burden during real-time message detection and allowing for more sophisticated selection criteria without proportionally increasing real-time processing complexity
2Adaptability or versatility
If multiple selection methods are stored and selected based on candidate information, then the adaptability of the reference message selection is improved, but the loss of time increases due to the additional selection step
Solution Approach 1:
The system dynamically selects which selection method to use based on the characteristics of the stored candidate information. Rather than applying a fixed selection approach, the system adapts its selection strategy according to the specific candidates available, allowing optimal performance across different scenarios while maintaining efficiency through context-aware method selection
Solution Approach 2:
The system automatically selects the appropriate selection method based on the candidate information without requiring external intervention or manual configuration. This self-service capability enables the system to adapt to different candidate sets autonomously, reducing overhead by eliminating the need for external method selection processes
Data Source
AI summary
A selection method is for selecting a reference message to be used to detect unauthorized communication in an in-vehicle network system including a network and one or more electronic control units connected to the network. The reference message is used as a reference for determining whether a message sent to the network is anomalous. The selection method includes: storing candidate information regarding one or more reference message candidates each being a candidate of the reference message; selecting, based on the candidate information regarding the one or more reference message candidates stored in the storing, the selection method for selecting the reference message from among the one or more reference message candidates; and selecting the reference message from among the one or more reference message candidates using the selection method.