V2X Message Filtering for Concurrent Flooding and Cloning Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems face challenges in defending against concurrent flooding and cloning attacks, which can lead to the filtering of legitimate messages during vehicle-to-everything (V2X) communications, resulting in the loss of critical information.
Innovation Solution
Implementing a filtering mechanism that alternates between ignoring and listening to messages from flooding source IDs, using different filtering states with varying duty cycles to distinguish between legitimate and attack-related messages, and transitioning based on message load indicators.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If continuous filtering is applied to block flooding attack messages, then attack mitigation is improved, but legitimate messages from cloned source IDs are also blocked
Solution Approach 1:
The system implements periodic filtering instead of continuous filtering. The filtering mechanism alternates between filtering and non-filtering periods, allowing the system to block flooding attack messages during filtering periods while permitting legitimate messages to pass during non-filtering periods. This periodic action resolves the contradiction by providing both attack mitigation and legitimate message delivery at different times.
Solution Approach 2:
The filtering mechanism dynamically adjusts its behavior based on detected attack conditions. When flooding attacks are detected, the system transitions to filtering mode; when attack conditions subside, it transitions to non-filtering mode. This dynamic adaptation allows the system to optimize between attack mitigation and message delivery based on real-time network conditions.
2Reliability
If filtering duration is extended to ensure complete attack blocking, then security is improved, but message delivery time increases
Solution Approach 1:
By implementing periodic filtering with defined filtering and non-filtering periods, the system ensures security during filtering periods while maintaining acceptable message delivery times during non-filtering periods. The periodic structure prevents excessive filtering duration that would cause unacceptable delays.
Solution Approach 2:
The system uses feedback from message load indicators and attack detection to dynamically adjust filtering decisions. When the message load indicator shows high traffic, the system may extend filtering duration; when traffic is normal, it reduces filtering duration. This feedback mechanism optimizes the balance between security and message delivery time.
Data Source
AI summary
A wireless communication process can include obtaining a wireless communication message associated with a source identifier (ID); determining that the source ID is associated with a flooding attack. The process can include filtering, based on determining that the source ID is associated with a flooding attack, wireless communication messages associated with the source ID. Filtering the wireless communication messages includes alternating between a first filtering state and a second filtering state. The first filtering state and the second filtering state are associated with different amounts of filtering.