SDN-Based Intrusion Response for In-Vehicle Networks
Solution Overview
Problem
Current intrusion detection and prevention systems for in-vehicle networks, particularly those using Ethernet-based systems, face challenges in compatibility and effectiveness due to limited computing power, which hampers the ability to detect and respond to attacks efficiently, especially in vehicle-to-everything (V2X) communication environments.
Innovation Solution
The implementation of a software-defined networking (SDN)-enabled intrusion prevention system that utilizes an SDN switch and controller to monitor and control packet flows, leveraging remote high-performance detection technologies like deep learning for real-time anomaly detection and response, while minimizing changes to existing network topologies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If machine learning or deep learning algorithms are applied for intrusion detection in IVN, then detection precision is improved, but computing power requirements increase beyond vehicle system capabilities
Solution Approach 1:
The patent extracts the intrusion detection function from the vehicle's onboard system and relocates it to an external server. The vehicle terminal only sends traffic data to the server for analysis, while the server performs the computationally intensive machine learning and deep learning algorithms. This separation allows high-precision detection using advanced algorithms without burdening the vehicle's limited computing resources.
2Power
If external detection architecture is used to overcome computing power limitations, then computing power requirement is reduced, but compatibility with in-vehicle environment deteriorates
Solution Approach 1:
The patent designs a detection architecture that can handle multiple types of in-vehicle networks (CAN bus, Ethernet-based IVN, V2X communication) through a unified external server platform. The server receives traffic data from different network types and applies appropriate detection algorithms, making the system universally compatible with various in-vehicle environments while maintaining low computing power requirements at the vehicle end.
3Reliability
If traditional intrusion detection systems are deployed in vehicles, then detection capability is provided, but response effectiveness to attacks deteriorates due to limited computing power
Solution Approach 1:
The patent introduces an external server as an intermediary between the vehicle's network traffic and the intrusion detection analysis. The server acts as a powerful processing unit that receives traffic data from the vehicle, performs comprehensive analysis using advanced algorithms, and generates detection results and response recommendations. This intermediary approach enables both reliable detection and effective response by offloading all computationally intensive operations to the server.
Data Source
AI summary
The present disclosure an intrusion prevention (or response) system and method for detecting and preventing a vehicle intrusion by means of an SDN-enabled switch installed in an in-vehicle network (IVN) and an SDN controller communicating with the SDN-enabled switch, the method in which the SDN support switch transmits a packet-in message to the SDN controller, enables an intrusion detection system (IDS) to determine whether a particular packet is an intrusion packet, receives an action according to a result of the determination, and transmits a packet-out message to the SDN-enabled switch so as to control a flow of a particular packet.