Vehicle Attack Detection Using Deferred Traffic Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing attack detection systems in motor vehicles are limited by the lack of computing power, preventing comprehensive analysis of data traffic, leading to restricted security capabilities.
Innovation Solution
A method where data traffic is partially stored during normal driving and analyzed during stationary periods, such as charging, utilizing available computing power from systems not in use during these states.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If comprehensive data traffic analysis is implemented continuously, then security detection capability is improved, but computing power requirements exceed vehicle capabilities
Solution Approach 1:
The system stores data traffic in a buffer during driving operations before analysis is performed. This preliminary storage action allows comprehensive analysis to be conducted later when computing resources are available, resolving the contradiction between continuous monitoring needs and limited real-time computing power.
Solution Approach 2:
The analysis function is activated periodically during idle periods rather than continuously. The control unit switches between storing data during active driving and analyzing accumulated data during idle periods, creating a periodic pattern that matches available computing resources while maintaining comprehensive security coverage.
2Power
If only partial data traffic is analyzed continuously, then computing power consumption is reduced, but security detection capability deteriorates
Solution Approach 1:
Data is preliminarily stored in complete form during driving operations rather than being filtered or sampled. This preserves the full data set for later comprehensive analysis, ensuring no security-relevant information is lost while minimizing real-time computing power consumption during critical driving phases.
Solution Approach 2:
The system maintains continuous data collection and storage throughout driving operations, ensuring uninterrupted security monitoring capability. The useful action of data gathering continues without interruption, while the intensive analysis action is deferred to idle periods, achieving both continuous coverage and resource efficiency.
3Measurement precision
If complete data traffic is transmitted to backend for analysis, then analysis capability is improved, but data transmission volume becomes unmanageable
Solution Approach 1:
The system extracts and stores only the necessary data traffic information locally during driving operations, separating it from other vehicle data. This extraction approach prepares targeted data sets for transmission to the backend during idle periods, improving analysis capability while keeping transmission volumes manageable by sending only relevant security data rather than complete vehicle operational data.
Data Source
AI summary
A method for monitoring data traffic of a motor vehicle by an attack detection system may include the attack detection system analyzing at least a first part of data from the data traffic. In this case, the first part of the data may be stored in a first operating state of the motor vehicle. In a second operating state of the motor vehicle, which is different from the first operating state and in which the motor vehicle is stationary and not in a driving mode, the stored first part of the data may be analyzed by the attack detection system.