Pith. sign in

REVIEW 3 major objections 5 minor 189 references

Vehicular Intrusion Detection System for Controller Area Network: A Comprehensive Survey and Evaluation

T0 review · 3 major / 5 minor · reviewed 2026-08-07 · deepseek-v4-flash

Challenge this review Re-run · record.json Download PDF Read on arXiv ↗

Pith's one-line read Most CAN bus intrusion detectors are periodicity-dependent and fail against masquerade attacks that preserve normal message timing, according to a unified re-evaluation of 19 detection methods on real vehicle traffic.

desk verdict Useful survey and a brave but compromised benchmark: the "masquerade" experiment does not actually implement the paper's own masquerade definition. read the letter →

arxiv 2505.17274 v1 pith:RCPCDDXZ submitted 2025-05-22 cs.CR

Yangyang Liu , Lei Xue , Sishan Wang , Xiapu Luo , Kaifa Zhao , Pengfei Jing , Xiaobo Ma , Yajuan Tang
show 1 more author
Haiying Zhou
This is my paper · ORCID
classification cs.CR
keywords controllerareanetworkvehicularintrusiondetectionCANbussecuritymasqueradeattackperiodicityassumptionanomalyevaluationautomotivecybersecuritydiagnostic
verification ladder T0 review T1 audit T2 compute T3 formal

The pith

A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.

The reading

This paper tries to establish that the field of vehicular intrusion detection for the Controller Area Network has been aimed at the wrong target: most proposed VIDS concentrate on classic spoofing, fuzzing, and denial-of-service attacks, while realistic and newer threats—especially diagnostic attacks and masquerade attacks that imitate a legitimate ECU—are underrepresented. To back this, the authors survey 34 attack studies, classify 53 VIDS by the feature they monitor, and re-implement 19 detection methods that can be run on a common dataset collected from a real CAN bus. The unified evaluation is the load-bearing part: it shows that frequency-based, information-entropy-based, ID-sequence-based, and similarity-based detectors all lean on the periodicity of CAN messages and report near-zero detection on masquerade attacks that keep the victim's message timing intact. The paper concludes that payload-based methods offer the only reimplemented route to masquerade detection but are themselves limited by the difficulty of modeling normal payloads, and that future VIDS should be tested against the broader attack taxonomy.

What carries the argument

The argument is carried by a controlled re-implementation experiment rather than by a single new algorithm. The authors select 19 detection methods from 17 papers spanning the feature families they taxonomize (frequency, information entropy, ID sequence, similarity, payload), and run them on one testbed built from the CAN hardware of a 2014 Toyota Corolla with three ECUs and 23 message IDs, using 11 datasets that cover replay, fabrication, masquerade, DoS, fuzzing, and diagnostic attacks. The taxonomy of attacks (sniffing, spoofing with six subtypes, DoS with five subtypes, fuzzing, and diagnostic attacks) and the classification of VIDS by monitored feature are what make the comparison interpretable: each family's detection principle is tied to a specific assumption about CAN traffic, and the experiment shows which assumptions break.

What would settle it

Re-run the 19 detectors on a second vehicle's CAN traffic or on a public CAN intrusion dataset, fixing all thresholds after training on normal traffic only, and check whether the masquerade-attack F1 scores remain near zero; any frequency-based detector that then reports high F1 would falsify the claim that periodicity-based methods are inherently blind to masquerade attacks.

Watch

Extended reading notes

Core claim

The central claim is that periodicity is the hidden assumption of the most common CAN intrusion detectors, and that a same-dataset comparison exposes it. In the authors' experiments, the frequency-based, entropy-based, ID-sequence-based, and similarity-based methods detect high-rate injection, DoS, and fuzzing attacks well, but they fail on the SPA-3 masquerade attack, where forged messages replace normal ones while preserving the time interval from the preceding message; several detectors get precision, recall, and F1 of zero on that attack. The same methods also cannot separate normal diagnostic messages from malicious diagnostic traffic, because diagnostic messages do not follow a stable periodic pattern. Payload-based methods, which look for changes in the data field rather than in timing, are the family that can in principle catch masquerade attacks, but the paper reports that building a reliable model of normal CAN payloads is hard, so their detection rates remain low.

Load-bearing premise

The evaluation assumes that tuning each detector's uncertain parameters separately on each attack dataset still measures real-world detection ability; if those thresholds are overfit to the test attacks, the reported scores flatter the methods and the comparative conclusions may not generalize to other vehicles or traffic conditions.

Editorial extensions

If this is right

  • Frequency-, entropy-, ID-sequence-, and similarity-based VIDS can catch attacks that change message counts, IDs, or regularity, but they will miss a masquerade attack that preserves the victim's message cycle.
  • Diagnostic attacks are effectively outside the detection scope of the reimplemented periodicity-based VIDS, and even benign diagnostic traffic is frequently misclassified as normal.
  • Payload-based detection is the only reimplemented family with a plausible path to catching masquerade attacks, but its practical ceiling is set by how well normal payloads can be modeled.
  • The survey's attack taxonomy gives future VIDS a checklist: designs that target only spoofing, fuzzing, and DoS are leaving diagnostic, cloaking, and voltage-corruption threats uncovered.

Reading between the lines

Editorial extensions of the paper, not claims the author makes directly.

  • Beyond the paper: because thresholds were tuned per attack dataset, the absolute accuracy and F1 numbers likely overstate the deployable performance of every method; the qualitative ranking of families may hold, but the magnitudes should be read as upper bounds.
  • Beyond the paper: the same evaluation protocol could be extended to fingerprint-based VIDS (clock skew, voltage, bit time) if a shared physical-layer dataset were captured, which would test whether the periodicity-independent families actually close the masquerade gap the paper identifies.
  • Beyond the paper: a natural next experiment is a combined detector that fuses a periodicity check with a payload or physical-layer fingerprint; the survey's analysis predicts such a hybrid would be the minimal design able to cover both high-rate injection and masquerade attacks.
  • Beyond the paper: the diagnostic-attack results imply that any VIDS deployed on vehicles that allow OBD-II diagnostics should be validated on diagnostic sessions, not just on normal periodic traffic.
Share X Bluesky LinkedIn Reddit HN

Editorial analysis

A structured set of objections, weighed in public.

Desk editor's note, referee report, and a circularity audit.

Referee Report

3 major / 5 minor

Summary. This paper presents a survey of attacks and intrusion detection systems for the Controller Area Network (CAN), together with an empirical evaluation of reimplemented detection methods. The authors classify attacks into a five-category taxonomy (sniffing, spoofing, DoS, fuzzing, diagnostic) with 18 subtypes, survey 53 VIDSs under a feature/technology taxonomy, and reimplement 19 VIDSs on data collected from a real CAN bench built from a 2014 Toyota Corolla. The empirical section reports accuracy, precision, recall, and F1 for each method on 11 attack datasets and concludes that frequency-, entropy-, ID-sequence-, and similarity-based VIDSs rely on CAN message periodicity and fail against masquerade attacks. The paper also discusses practical challenges and future directions for vehicular intrusion detection.

Significance. If its empirical conclusions were fully supported, the paper would be a valuable resource: the survey covers a large body of work, the threat-model and attack taxonomies are useful organizing tools, and the attempt to compare reimplemented methods on a unified dataset goes beyond typical survey practice. The observation that the examined VIDSs concentrate on spoofing, fuzzing, and DoS while neglecting diagnostic and stealthier attacks is well grounded in the collected literature. However, the central empirical claim about masquerade attacks is undermined by the SPA-3 dataset construction, and the per-dataset parameter tuning compromises the quantitative comparison. These issues are local and fixable, but they currently prevent the evaluation from supporting the paper's headline conclusion.

major comments (3)
  1. [§VIII.B, §V.B.3, Fig. 6] The SPA-3 dataset is not a masquerade attack under the paper's own definition. In Section V.B.3 and Figure 3, a masquerade requires either a compromised or unauthorized sender forging frames with the victim ID while suppressing or replacing the legitimate ECU's transmissions (e.g., via a bus-off attack), so that the attacker simulates the victim's normal message cycle. Section VIII.B instead states that pausing the target ECU 'is a very big challenge' and therefore constructs SPA-3 by selecting messages with a specific ID and changing their payload every 10 seconds. This is a stealthy payload-modification/tampering dataset within recorded normal traffic, not a masquerade as defined. Consequently, the zero precision/recall values for SPA-3 in Figure 6 demonstrate only that these methods miss payload edits while timing and IDs remain unchanged; they do not demonstrate failure against an adversary that simulates the victim ECU's normal transmission pattern. The Brief Discussion and abstract conclusions that frequency-, entropy-, ID-sequence-, and similarity-based methods fail against masquerade attacks are therefore not supported by the reported experiment. The authors should either implement a genuine masquerade scenario (e.g., bus-off followed by forged injection, or a suspended sender with attacker frames matching the victim's ID/timing) or rename SPA-3 as a stealthy payload-modification attack and temper the corresponding claims.
  2. [§VIII.C.1, Fig. 6] The evaluation tunes uncertain parameters separately for each attack dataset 'to achieve the best effectiveness of these VIDSs.' For example, the entropy threshold parameter k in [70] is adjusted per dataset. This means the reported accuracy, precision, recall, and F1 values in Figure 6 are per-dataset best-case results obtained by fitting thresholds to each test set, not results of a fixed-configuration benchmark. As a consequence, the comparative statements among methods and attacks may reflect favorable threshold choices rather than general detection ability. The authors should fix uncertain parameters on a training or validation split (or at least report both fixed and per-dataset-tuned settings), and should clearly label the current numbers as upper bounds under per-dataset tuning. This issue is load-bearing for the quantitative comparison.
  3. [§VIII.A, §VIII.D] The reproduced set includes only parameters-monitoring-based and payload-based methods; fingerprint-based VIDSs such as clock-skew, voltage, and bit-time methods are excluded because they require special data collection equipment. The conclusion in the Brief Discussion and abstract should therefore be scoped explicitly to the evaluated method families. As currently written, statements such as 'these methods' can be read as applying to all anomaly-based VIDS, whereas fingerprint-based methods are specifically designed to detect masquerade-style impersonation and were not evaluated. Adding an explicit scope sentence in the abstract and in Section VIII.D would prevent overgeneralization.
minor comments (5)
  1. [§VIII.B] The attack labeled 'Disorderly Control attack (SPA-2)' is mislabeled: SPA-2 is Fabrication in the taxonomy of Section V.B and Figure 3, while Disorderly Control is FUA-1. The same dataset file is referred to as FUA-1 in Table V, so the text and table are inconsistent.
  2. [§VIII.C.2] The heading 'Inconsitence Defeination of Attack Models' contains typos; it should read 'Inconsistency in Definition of Attack Models.'
  3. [Fig. 6] The subfigures in Figure 6 are visually dense, with four metrics plotted on the same y-axis labeled 'Probability.' A tabular listing of the numerical values or separate, larger subfigures would make the results substantially more readable and verifiable.
  4. [Table IV, Table III] The authors' own SAID system (reference [135]) appears in Table IV but is not described in the main survey taxonomy in Section VI or in Table III. If it is included as a surveyed system, it should be described like the others; if it is included only for comparison, the paper should state this explicitly and disclose the self-citation.
  5. [§VIII.B, Table V] The evaluation is based on a bench with only three ECUs and 23 CAN IDs from a single vehicle model. The paper should state more prominently that the empirical results are a single-platform case study and that generalization to other vehicles and network architectures remains untested.

Circularity Check

0 steps flagged · score 1.0 of 10

No significant circularity: the survey and reimplementation are self-contained; the only overlap is a non-load-bearing self-citation to the authors' SAID system.

full rationale

This paper is a survey plus an empirical reimplementation study, so the circularity analysis focuses on whether any claimed prediction is equivalent to a fitted input or to a self-citation chain. The central claim that frequency-, entropy-, ID-sequence-, and similarity-based VIDS fail against masquerade-like attacks is supported by the SPA-3 experiment, in which the authors 'select the messages with a specific ID and change their payload' while keeping the recorded timing intact. That construction is a threat-validity concern: it implements payload-only edits rather than the full bus-off/impersonation masquerade defined in Section V.B.3, so the experiment does not fully test the paper's own masquerade definition. However, this is an experimental-design/soundness issue, not a circular reduction: the failure of periodicity-based detectors on a dataset that preserves periodicity follows from the detectors' defined features, and no fitted parameter is later renamed as a prediction. The per-dataset threshold tuning in Section VIII.C.1 ('we adjust these uncertain parameters for each dataset separately') is likewise an in-sample evaluation limitation that could inflate reported metrics, but it is not circular reasoning. The only self-citation is reference [135] (SAID, by overlapping authors) appearing in the survey tables; it is descriptive, is not part of the reimplemented evaluation, and does not drive the conclusions. Overall, no derivation in the paper reduces by construction to its own inputs.

Assumptions & free parameters 2 free parameters · 4 assumptions · 0 invented entities

The central empirical claim rests on free parameters tuned per dataset (Section VIII.C.1) and on assumptions about the representativeness of the bench dataset and the fidelity of reimplementations. No invented entities are introduced.

free parameters (2)
  • Detection thresholds and model hyperparameters for each reimplemented VIDS = Not reported; adjusted per attack dataset
    Section VIII.C.1 states uncertain parameters are tuned separately for each dataset to achieve the best effectiveness. Examples include the entropy threshold parameter k in [76] and likely thresholds for frequency, interval, and similarity rules. This makes the reported results dependent on test-set-specific fitting.
  • Entropy threshold parameter k (Muter et al. [70]) = Adjusted per dataset, exact value not given
    The paper names k as a customized parameter used to adjust the entropy threshold and says it is tuned per dataset (Section VIII.C.1). No values are reported.
assumptions (4)
  • domain assumption CAN message traffic is periodic and stable in normal operation
    Many surveyed VIDS rely on periodicity, and the evaluation assumes that normal traffic follows this pattern while attacks deviate from it (Sections VI and VIII).
  • domain assumption The bench setup with three ECUs and 23 CAN IDs from a 2014 Toyota Corolla is representative of real in-vehicle CAN traffic
    Section VIII.B describes the testbed. The evaluation generalizes from this limited setup to conclusions about VIDS performance on real vehicles.
  • domain assumption The reimplementations faithfully reproduce the original VIDS algorithms from the cited papers
    Section VIII.A selects methods and implements them. Fidelity to the original papers is asserted but not verified against original code or by the original authors.
  • ad hoc to paper Masquerade attack simulation by modifying payloads of normal messages approximates a real masquerade attack
    Section VIII.B states they modify the existing normal dataset instead of pausing the ECU, which may not capture the real attack dynamics of a suspended or compromised ECU.

how reviews work

0 comments
Cite this review

Pith. "Pith review of Vehicular Intrusion Detection System for Controller Area Network: A Comprehensive Survey and Evaluation." pith.science (2026). https://pith.science/paper/RCPCDDXZ

@misc{pith2026250517274,
  author       = {Pith},
  title        = {Pith review of: Vehicular Intrusion Detection System for Controller Area Network: A Comprehensive Survey and Evaluation},
  year         = {2026},
  howpublished = {\url{https://pith.science/paper/RCPCDDXZ}},
  note         = {Machine review of arXiv:2505.17274}
}
read the original abstract

The progress of automotive technologies has made cybersecurity a crucial focus, leading to various cyber attacks. These attacks primarily target the Controller Area Network (CAN) and specialized Electronic Control Units (ECUs). In order to mitigate these attacks and bolster the security of vehicular systems, numerous defense solutions have been proposed.These solutions aim to detect diverse forms of vehicular attacks. However, the practical implementation of these solutions still presents certain limitations and challenges. In light of these circumstances, this paper undertakes a thorough examination of existing vehicular attacks and defense strategies employed against the CAN and ECUs. The objective is to provide valuable insights and inform the future design of Vehicular Intrusion Detection Systems (VIDS). The findings of our investigation reveal that the examined VIDS primarily concentrate on particular categories of attacks, neglecting the broader spectrum of potential threats. Moreover, we provide a comprehensive overview of the significant challenges encountered in implementing a robust and feasible VIDS. Additionally, we put forth several defense recommendations based on our study findings, aiming to inform and guide the future design of VIDS in the context of vehicular security.

Figures

Figures reproduced from arXiv: 2505.17274 by the authors.

Figure 1
Figure 1. Two common IVN architectures. TABLE II: Specifications of the widely used IVNs. Network Technologies Bitrate(Max) Medium Standard LIN 19.2 Kbps Single Wire Serial CAN 1 Mbps Twisted Pair CSMA/CR CAN-FD 8 Mbps Twisted Pair CSMA/CR FlexRay 10 Mbps Twisted Pair or Optical Fibre TDMA MOST 150 Mbps Optical Fibre TDMA Automotive Ethernet 10 Gbps Twisted Pair Switched Full Duplex vehicle [40]. In [PITH_FULL_IMAGE:figures/… view at source ↗
Figure 2
Figure 2. The threat model of the attack. the bus while fully controlling the ECU. Many researchers demonstrate the methods to fully compromise an ECU. For example, Checkoway et al. [47] demonstrate vehicle vulnerabilities in some different external channels. In addition, they evaluate the potential for controlling the ECUs via the prototype implementations for TPMS (tire pressure monitoring system), Bluetooth, FM (Frequency … view at source ↗
Figure 3
Figure 3. Detailed taxonomy of attack scenarios. the airbag control system and hide the absence of the system. They record the reactions to diagnostic queries in the presence of the airbag control module at first, and then they replay these replies when diagnostics software sends the diagnostic queries. As a result, the diagnostics software reports the airbag control module’s presence (including its name, part no., etc.) with… view at source ↗
Figures from the paper (3 more)
Figure 4
Figure 4. Figure 4: Existing intrusion detection systems. queries from diagnostic devices and replay the record messages to spoof the diagnostic devices. For example, in [6], Hoppe et al. spoof the diagnostics software and hide the absence of the airbag control module. Specifically, they …
Figure 5
Figure 5. Figure 5: The topology of the real CAN. B. Dataset We need to collect the CAN bus data in an attack-free state and under various attacks to implement these VIDS. We collect the data from a real CAN bus, which is shown in [PITH_FULL_IMAGE:figures/full_fig_p018_5.png]
Figure 6
Figure 6. Figure 6: The results of the algorithm evaluation. [PITH_FULL_IMAGE:figures/full_fig_p020_6.png]

Discussion (0). Continue with ORCID to comment.

Reference graph

Works this paper leans on

189 extracted references · 76 canonical work pages

  1. [70]

    Entropy-based anomaly detection for in-vehicle networks,

    M. M ¨uter and N. Asaj, “Entropy-based anomaly detection for in-vehicle networks,” in 2011 IEEE Intelligent Vehicles Symposium (IV) . IEEE, 2011, pp. 1110–1115

    2011

  2. [1]

    Automotive cybersecurity market research report 2023 — growth rate and forecast till 2031,

    “Automotive cybersecurity market research report 2023 — growth rate and forecast till 2031,” https://www.linkedin.com/pulse/automotive- cybersecurity-market-research-report-tadqf, 2023

    2023

  3. [2]

    Vehicle ecu classification based on safety-security characteristics,

    D. K. Nilsson, P. H. Phung, and U. E. Larson, “Vehicle ecu classification based on safety-security characteristics,” 2008

    2008

  4. [3]

    Intra-vehicle networks: A review,

    S. Tuohy, M. Glavin, C. Hughes, E. Jones, M. Trivedi, and L. Kilmartin, “Intra-vehicle networks: A review,” IEEE Transactions on Intelligent Transportation Systems, vol. 16, no. 2, pp. 534–545, 2014

    2014

  5. [4]

    Intrusion detection systems for intra-vehicle networks: A review,

    O. Y . Al-Jarrah, C. Maple, M. Dianati, D. Oxtoby, and A. Mouzakitis, “Intrusion detection systems for intra-vehicle networks: A review,” IEEE Access, vol. 7, pp. 21 266–21 289, 2019

    2019

  6. [5]

    How to steal cars a practical attack on keeloq,

    E. Biham, O. Dunkelman, S. Indesteege, N. Keller, and B. Preneel, “How to steal cars a practical attack on keeloq,” in EUROCRYPT, 2008, pp. 1–18

    2008

  7. [6]

    Security threats to automotive can networks—practical examples and selected short-term countermeasures,

    T. Hoppe, S. Kiltz, and J. Dittmann, “Security threats to automotive can networks—practical examples and selected short-term countermeasures,” Reliability Engineering & System Safety , vol. 96, no. 1, pp. 11–25, 2011

    2011

  8. [7]

    Adventures in automotive networks and control units,

    C. Miller and C. Valasek, “Adventures in automotive networks and control units,” Def Con, 2013

    2013

Show all 189 references
  1. [8]

    Remote exploitation of an unaltered passenger vehicle,

    ——, “Remote exploitation of an unaltered passenger vehicle,” Black Hat USA, vol. 2015, p. 91, 2015. 27

    2015

  2. [9]

    Hackers remotely kill a jeep on the highway—with me in it,

    A. Greenberg, “Hackers remotely kill a jeep on the highway—with me in it,” Wired, vol. 7, p. 21, 2015

    2015

  3. [10]

    Cannon: Reliable and stealthy remote shutdown attacks via unaltered automotive micro- controllers,

    S. Kulandaivel, S. Jain, J. Guajardo, and V . Sekar, “Cannon: Reliable and stealthy remote shutdown attacks via unaltered automotive micro- controllers,” in 2021 IEEE Symposium on Security and Privacy (SP) . IEEE, 2021, pp. 195–210

    2021

  4. [11]

    Hackers discover a way to hack into your car’s remote control app,

    T. Lee, “Hackers discover a way to hack into your car’s remote control app,” https://www.ubergizmo.com/2011/07/hackers-discover-a-way-to- hack-into-your-cars-remote-control-app/, 2011

    2011

  5. [12]

    Connected car vulnerabilities affect the can stan- dard,

    Trend Micro, “Connected car vulnerabilities affect the can stan- dard,” https://www.trendmicro.com/en us/research/17/h/connected-car- hack.html, 2017

    2017

  6. [13]

    Fast and vulnerable: A story of telematic failures,

    I. Foster, A. Prudhomme, K. Koscher, and S. Savage, “Fast and vulnerable: A story of telematic failures,” in 9th {USENIX} Workshop on Offensive Technologies ( {WOOT} 15), 2015

    2015

  7. [14]

    Cantrack: Enhancing automotive can bus security using intuitive encryption algorithms,

    W. A. Farag, “Cantrack: Enhancing automotive can bus security using intuitive encryption algorithms,” in 2017 7th International Conference on Modeling, Simulation, and Applied Optimization (ICMSAO) . IEEE, 2017, pp. 1–5

    2017

  8. [15]

    Trade-off analysis of safety and security in can bus communication,

    L. Dariz, M. Selvatici, M. Ruggeri, G. Costantino, and F. Martinelli, “Trade-off analysis of safety and security in can bus communication,” in 2017 5th IEEE International Conference on Models and Technologies for Intelligent Transportation Systems (MT-ITS) . IEEE, 2017, pp. 226–231

    2017

  9. [16]

    Design of a message authentication protocol for can fd based on chaskey lightweight mac,

    G. Carel, R. Isshiki, T. Kusaka, Y . Nogami, and S. Araki, “Design of a message authentication protocol for can fd based on chaskey lightweight mac,” in 2018 Sixth International Symposium on Computing and Networking Workshops (CANDARW) . IEEE, 2018, pp. 267–271

    2018

  10. [17]

    An efficient authentication scheme for intra-vehicular controller area network,

    B. Palaniswamy, S. Camtepe, E. Foo, and J. Pieprzyk, “An efficient authentication scheme for intra-vehicular controller area network,” IEEE Transactions on Information Forensics and Security , vol. 15, pp. 3107– 3122, 2020

    2020

  11. [18]

    An automotive signal- layer security and trust-boundary identification approach,

    G. Macher, H. Sporer, E. Brenner, and C. Kreiner, “An automotive signal- layer security and trust-boundary identification approach,” Procedia Computer Science, vol. 109, pp. 490–497, 2017

    2017

  12. [19]

    Cvshield: Guarding sensor data in connected vehicle with trusted execution environment,

    S. Hu, Q. A. Chen, J. Joung, C. Carlak, Y . Feng, Z. M. Mao, and H. X. Liu, “Cvshield: Guarding sensor data in connected vehicle with trusted execution environment,” in Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security , 2020, pp. 1–4

    2020

  13. [20]

    Fingerprinting electronic control units for vehicle intrusion detection,

    K.-T. Cho and K. G. Shin, “Fingerprinting electronic control units for vehicle intrusion detection,” in Proc. USENIX Security , 2016

    2016

  14. [21]

    Viden: Attacker identification on in-vehicle networks,

    ——, “Viden: Attacker identification on in-vehicle networks,” in Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2017, pp. 1109–1123

    2017

  15. [22]

    Plug-n-pwned: Comprehensive vulnerability analysis of obd-ii dongles as a new over-the-air attack surface in automotive iot,

    H. Wen, Q. A. Chen, and Z. Lin, “Plug-n-pwned: Comprehensive vulnerability analysis of obd-ii dongles as a new over-the-air attack surface in automotive iot,” 2020

    2020

  16. [23]

    Sensor fault detection and isolation using a support vector machine for vehicle suspension systems,

    K. Jeong, S. B. Choi, and H. Choi, “Sensor fault detection and isolation using a support vector machine for vehicle suspension systems,” IEEE Transactions on Vehicular Technology, vol. 69, no. 4, pp. 3852–3863, 2020

    2020

  17. [24]

    Hold the door! fingerprinting your car key to prevent keyless entry car theft,

    K. Joo, W. Choi, and D. H. Lee, “Hold the door! fingerprinting your car key to prevent keyless entry car theft,” arXiv preprint arXiv:2003.13251, 2020

    2003 arXiv

  18. [25]

    Detecting attacks to internal vehicle networks through hamming distance,

    D. Stabili, M. Marchetti, and M. Colajanni, “Detecting attacks to internal vehicle networks through hamming distance,” in 2017 AEIT International Annual Conference . IEEE, 2017, pp. 1–6

    2017

  19. [26]

    State-of-the-art survey on in-vehicle network communication (can-bus) security and vulnerabilities,

    O. Avatefipour and H. Malik, “State-of-the-art survey on in-vehicle network communication (can-bus) security and vulnerabilities,” arXiv preprint arXiv:1802.01725, 2018

    2018 arXiv

  20. [27]

    Towards viable intrusion detection methods for the automotive controller area network,

    A. Tomlinson, J. Bryans, and S. A. Shaikh, “Towards viable intrusion detection methods for the automotive controller area network,” in 2nd ACM Computer Science in Cars Symposium. ACM, Munich, Germany , 2018, pp. 1–9

    2018

  21. [28]

    Survey of automotive controller area network intrusion detection systems,

    C. Young, J. Zambreno, H. Olufowobi, and G. Bloom, “Survey of automotive controller area network intrusion detection systems,” IEEE Design & Test, vol. 36, no. 6, pp. 48–55, 2019

    2019

  22. [29]

    A survey of intrusion detection for in-vehicle networks,

    W. Wu, R. Li, G. Xie, J. An, Y . Bai, J. Zhou, and K. Li, “A survey of intrusion detection for in-vehicle networks,” IEEE Transactions on Intelligent Transportation Systems, 2019

    2019

  23. [30]

    Demystifying in-vehicle intrusion detection systems: A survey of surveys and a meta-taxonomy,

    G. Karopoulos, G. Kambourakis, E. Chatzoglou, J. L. Hern´andez-Ramos, and V . Kouliaridis, “Demystifying in-vehicle intrusion detection systems: A survey of surveys and a meta-taxonomy,” Electronics, vol. 11, no. 7, p. 1072, 2022

    2022

  24. [31]

    Ai-based intrusion detection systems for in-vehicle networks: A survey,

    S. Rajapaksha, H. Kalutarage, M. O. Al-Kadri, A. Petrovski, G. Madzudzo, and M. Cheah, “Ai-based intrusion detection systems for in-vehicle networks: A survey,” ACM Computing Surveys , vol. 55, no. 11, pp. 1–40, 2023

    2023

  25. [32]

    Cyberattacks and countermeasures for in-vehicle networks,

    E. Aliwa, O. Rana, C. Perera, and P. Burnap, “Cyberattacks and countermeasures for in-vehicle networks,” ACM Computing Surveys (CSUR), vol. 54, no. 1, pp. 1–37, 2021

    2021

  26. [33]

    Cybersecurity protection on in-vehicle networks for distributed automotive cyber- physical systems: State-of-the-art and future challenges,

    Y . Xie, Y . Zhou, J. Xu, J. Zhou, X. Chen, and F. Xiao, “Cybersecurity protection on in-vehicle networks for distributed automotive cyber- physical systems: State-of-the-art and future challenges,” Software: Practice and Experience , vol. 51, no. 11, pp. 2108–2127, 2021

    2021

  27. [34]

    State of the art survey on comparison of physical fingerprinting-based intrusion detection techniques for in-vehicle security,

    A. Hafeez, K. Rehman, and H. Malik, “State of the art survey on comparison of physical fingerprinting-based intrusion detection techniques for in-vehicle security,” SAE Technical Paper, Tech. Rep., 2020

    2020

  28. [35]

    Intrusion detection system for automotive controller area network (can) bus system: a review,

    S.-F. Lokman, A. T. Othman, and M.-H. Abu-Bakar, “Intrusion detection system for automotive controller area network (can) bus system: a review,” EURASIP Journal on Wireless Communications and Networking, vol. 2019, no. 1, pp. 1–17, 2019

    2019

  29. [36]

    A survey of network intrusion detection systems for controller area network,

    G. Dupont, J. den Hartog, S. Etalle, and A. Lekidis, “A survey of network intrusion detection systems for controller area network,” in 2019 IEEE International Conference on Vehicular Electronics and Safety (ICVES). IEEE, 2019, pp. 1–6

    2019

  30. [37]

    In-vehicle network attacks and countermeasures: Challenges and future directions,

    J. Liu, S. Zhang, W. Sun, and Y . Shi, “In-vehicle network attacks and countermeasures: Challenges and future directions,” IEEE Network , vol. 31, no. 5, pp. 50–58, 2017

    2017

  31. [38]

    Evading voltage-based intrusion detection on automotive can

    R. Bhatia, V . Kumar, K. Serag, Z. B. Celik, M. Payer, and D. Xu, “Evading voltage-based intrusion detection on automotive can.” in NDSS, 2021

    2021

  32. [39]

    In vehicle networking,

    B. Ramesh and S. Murthy, “In vehicle networking,” in Proceedings of the third International Conference on Automotive and Fuel Technology . Allied Publishers, 2004, p. 194

    2004

  33. [40]

    A survey of remote automotive attack surfaces,

    C. Miller and C. Valasek, “A survey of remote automotive attack surfaces,” black hat USA , 2014

    2014

  34. [41]

    Most specification,

    M. Cooperation, “Most specification,” Rev. 3.0, URL: www. mostcoop- eration. com, Jun , 2008

    2008

  35. [42]

    Robert bosch gmbh,

    C. Specification, “Robert bosch gmbh,” Stuttgart, Germany, 1991

    1991

  36. [43]

    Revision 2.0,

    L. S. Package, “Revision 2.0,” LIN consortium, 2003

    2003

  37. [44]

    Flexray-a communication network for automotive control systems,

    R. Makowitz and C. Temple, “Flexray-a communication network for automotive control systems,” in 2006 IEEE International Workshop on Factory Communication Systems. IEEE, 2006, pp. 207–212

    2006

  38. [45]

    Can specification version 2.0,

    R. Bosch et al., “Can specification version 2.0,” Rober Bousch GmbH, Postfach, vol. 300240, p. 72, 1991

    1991

  39. [46]

    Evolution of local interconnect network (lin) solutions,

    M. Ruff, “Evolution of local interconnect network (lin) solutions,” in 2003 IEEE 58th Vehicular Technology Conference. VTC 2003-Fall (IEEE Cat. No. 03CH37484) , vol. 5. IEEE, 2003, pp. 3382–3389

    2003

  40. [47]

    Comprehensive experimental analyses of automotive attack surfaces

    S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham, S. Savage, K. Koscher, A. Czeskis, F. Roesner, T. Kohno et al. , “Comprehensive experimental analyses of automotive attack surfaces.” in USENIX Security Symposium , vol. 4. San Francisco, 2011, pp. 447–462

    2011

  41. [48]

    Experimental security analysis of a modern automobile,

    K. Koscher, A. Czeskis, F. Roesner, S. Patel, T. Kohno, S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham et al., “Experimental security analysis of a modern automobile,” in Proc. IEEE SP , 2010

    2010

  42. [49]

    State-of-the-art survey of in-vehicle protocols and automotive ethernet security and vulnerabilities,

    A. B. C. Douss, R. Abassi, and D. Sauveron, “State-of-the-art survey of in-vehicle protocols and automotive ethernet security and vulnerabilities,” Mathematical Biosciences and Engineering , vol. 20, no. 9, pp. 17 057– 17 095, 2023

    2023

  43. [50]

    In-vehicle network average response time analysis for can-fd and automotive ethernet,

    H. Kim, W. Yoo, S. Ha, and J.-M. Chung, “In-vehicle network average response time analysis for can-fd and automotive ethernet,” IEEE Transactions on Vehicular Technology, vol. 72, no. 6, pp. 6916–6932, 2023

    2023

  44. [51]

    Automotive ethernet: A crossroads for the connected car,

    Brandon Lewis, “Automotive ethernet: A crossroads for the connected car,” https://embeddedcomputing.com/application/automotive/vehicle- networking/automotive-ethernet-a-crossroads-for-the-connected-car, 2018

    2018

  45. [52]

    Solutions for automotive ethernet,

    Vector, “Solutions for automotive ethernet,” https://www.vector.com/ int/en/products/solutions/networks/automotive-ethernet/#, 2024

    2024

  46. [53]

    A Remote Attack on the Bosch Drivelog Connector Dongle,

    “A Remote Attack on the Bosch Drivelog Connector Dongle,” https: //argus-sec.com/remote-attack-bosch-drivelog-connector-dongle/

  47. [54]

    Ethical hacking of iot devices: Obd-ii dongles,

    L. Christensen and D. Dannberg, “Ethical hacking of iot devices: Obd-ii dongles,” 2019

    2019

  48. [55]

    Automated cross-platform reverse engineering of can bus commands from mobile apps,

    H. Wen, Q. Zhao, Q. A. Chen, and Z. Lin, “Automated cross-platform reverse engineering of can bus commands from mobile apps,” in Proceedings 2020 Network and Distributed System Security Symposium (NDSS’20), 2020

    2020

  49. [56]

    Candy: A social engineering attack to leak information from infotainment system,

    G. Costantino, A. La Marra, F. Martinelli, and I. Matteucci, “Candy: A social engineering attack to leak information from infotainment system,” 28 in 2018 IEEE 87th Vehicular Technology Conference (VTC Spring) . IEEE, 2018, pp. 1–5

    2018

  50. [57]

    Relay attack prevention for passive entry passive start (peps) vehicle security systems,

    T. P. Oman and K. J. Hawes, “Relay attack prevention for passive entry passive start (peps) vehicle security systems,” Jan. 6 2015, uS Patent 8,930,045

    2015

  51. [58]

    Detecting and mitigating spoofing attack against an automotive radar,

    P. Kapoor, A. V ora, and K.-D. Kang, “Detecting and mitigating spoofing attack against an automotive radar,” in 2018 IEEE 88th Vehicular Technology Conference (VTC-Fall). IEEE, 2018, pp. 1–6

    2018

  52. [59]

    Btmonitor: Bit-time-based intrusion detection and attacker identification in controller area network,

    J. Zhou, P. Joshi, H. Zeng, and R. Li, “Btmonitor: Bit-time-based intrusion detection and attacker identification in controller area network,” ACM Transactions on Embedded Computing Systems (TECS) , vol. 18, no. 6, pp. 1–23, 2019

    2019

  53. [60]

    Casad: Can- aware stealthy-attack detection for in-vehicle networks,

    N. Nowdehi, W. Aoudi, M. Almgren, and T. Olovsson, “Casad: Can- aware stealthy-attack detection for in-vehicle networks,” arXiv preprint arXiv:1909.08407, 2019

    1909 arXiv

  54. [61]

    Microchip MCP2515 Datasheet,

    “Microchip MCP2515 Datasheet,” www.microchip.com/MCP2515

  55. [62]

    Error handling of in-vehicle networks makes them vulnerable,

    K.-T. Cho and K. G. Shin, “Error handling of in-vehicle networks makes them vulnerable,” in Proc. ACM CCS , 2016

    2016

  56. [63]

    Relay attacks on passive keyless entry and start systems in modern cars,

    A. Francillon, B. Danev, and S. Capkun, “Relay attacks on passive keyless entry and start systems in modern cars,” in Proceedings of the Network and Distributed System Security Symposium (NDSS) . Eidgen¨ossische Technische Hochschule Z¨urich, Department of Computer Science, 2011

    2011

  57. [64]

    Lock it and still lose it—on the (in) security of automotive remote keyless entry systems,

    F. D. Garcia, D. Oswald, T. Kasper, and P. Pavlid `es, “Lock it and still lose it—on the (in) security of automotive remote keyless entry systems,” in 25th {USENIX} Security Symposium ( {USENIX} Security 16), 2016

    2016

  58. [65]

    Automotive connectivity, cyber attack scenarios and automotive cyber security,

    R. E. Haas and D. P. M ¨oller, “Automotive connectivity, cyber attack scenarios and automotive cyber security,” in 2017 IEEE International Conference on Electro Information Technology (EIT) . IEEE, 2017, pp. 635–639

    2017

  59. [66]

    Intrusion detection system based on the analysis of time intervals of can messages for in-vehicle network,

    H. M. Song, H. R. Kim, and H. K. Kim, “Intrusion detection system based on the analysis of time intervals of can messages for in-vehicle network,” in 2016 international conference on information networking (ICOIN). IEEE, 2016, pp. 63–68

    2016

  60. [67]

    Frequency-based anomaly detection for the automotive can bus,

    A. Taylor, N. Japkowicz, and S. Leblanc, “Frequency-based anomaly detection for the automotive can bus,” in 2015 World Congress on Industrial Control Systems Security (WCICSS) . IEEE, 2015, pp. 45– 49

    2015

  61. [68]

    A language-based intrusion detection approach for automotive embedded networks,

    I. Studnia, E. Alata, V . Nicomette, M. Ka ˆaniche, and Y . Laarouchi, “A language-based intrusion detection approach for automotive embedded networks,” 2018

    2018

  62. [69]

    Simple: Single-frame based physical layer identification for intrusion detection and prevention on in-vehicle networks,

    M. Foruhandeh, Y . Man, R. Gerdes, M. Li, and T. Chantem, “Simple: Single-frame based physical layer identification for intrusion detection and prevention on in-vehicle networks,” in Proceedings of the 35th Annual Computer Security Applications Conference , 2019, pp. 229–244

    2019

  63. [71]

    Controller Area Network (CAN) Overview,

    “Controller Area Network (CAN) Overview,” https://www.ni.com/en- us/innovations/white-papers/06/controller-area-network--can-- overview.html, 2019

    2019

  64. [72]

    Canflict: Exploiting peripheral conflicts for data-link layer attacks on automotive networks,

    A. de Faveri Tron, S. Longari, M. Carminati, M. Polino, and S. Zanero, “Canflict: Exploiting peripheral conflicts for data-link layer attacks on automotive networks,” in Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security , 2022, pp. 711– 723

    2022

  65. [73]

    Anomaly detection approach using adaptive cumulative sum algorithm for controller area network,

    H. Olufowobi, U. Ezeobi, E. Muhati, G. Robinson, C. Young, J. Zam- breno, and G. Bloom, “Anomaly detection approach using adaptive cumulative sum algorithm for controller area network,” in Proceedings of the ACM Workshop on Automotive Cybersecurity . ACM, 2019, pp. 25–30

    2019

  66. [74]

    Car hacking identification through fuzzy logic algorithms,

    F. Martinelli, F. Mercaldo, V . Nardone, and A. Santone, “Car hacking identification through fuzzy logic algorithms,” in 2017 IEEE Interna- tional Conference on Fuzzy Systems (FUZZ-IEEE) . IEEE, 2017, pp. 1–7

    2017

  67. [75]

    Otids: A novel intrusion detection system for in-vehicle network by using remote frame,

    H. Lee, S. H. Jeong, and H. K. Kim, “Otids: A novel intrusion detection system for in-vehicle network by using remote frame,” in 2017 15th Annual Conference on Privacy, Security and Trust (PST) . IEEE, 2017, pp. 57–5709

    2017

  68. [76]

    Evaluation of anomaly detection for in-vehicle networks through information-theoretic algorithms,

    M. Marchetti, D. Stabili, A. Guido, and M. Colajanni, “Evaluation of anomaly detection for in-vehicle networks through information-theoretic algorithms,” in 2016 IEEE 2nd International Forum on Research and Technologies for Society and Industry Leveraging a better tomorrow (RT...

    2016

  69. [77]

    Road vehicles–unified diagnostic services (uds)–part 1: Specification and requirements,

    “Road vehicles–unified diagnostic services (uds)–part 1: Specification and requirements,” 2013

    2013

  70. [78]

    Obd securealert: An anomaly detection system for vehicles,

    S. N. Narayanan, S. Mittal, and A. Joshi, “Obd securealert: An anomaly detection system for vehicles,” in IEEE SMARTCOMP, 2016

    2016

  71. [79]

    A fuzz testing methodology for cyber-security assurance of the automotive can bus,

    D. S. Fowler, “A fuzz testing methodology for cyber-security assurance of the automotive can bus,” Ph.D. dissertation, Coventry University, 2019

    2019

  72. [80]

    A survey on machine learning techniques for intrusion detection systems,

    J. Singh and M. J. Nene, “A survey on machine learning techniques for intrusion detection systems,” 2013

    2013

  73. [81]

    A review of anomaly based intrusion detection systems,

    V . Jyothsna, V . R. Prasad, and K. M. Prasad, “A review of anomaly based intrusion detection systems,” International Journal of Computer Applications, vol. 28, no. 7, pp. 26–35, 2011

    2011

  74. [82]

    An approach to specification-based attack detection for in-vehicle networks,

    U. E. Larson, D. K. Nilsson, and E. Jonsson, “An approach to specification-based attack detection for in-vehicle networks,” in 2008 IEEE Intelligent Vehicles Symposium . IEEE, 2008, pp. 220–225

    2008

  75. [83]

    An introduction to canopen,

    M. Farsi, K. Ratcliff, and M. Barbosa, “An introduction to canopen,” Computing & Control Engineering Journal , vol. 10, no. 4, pp. 161–168, 1999

    1999

  76. [84]

    Anomaly-based network intrusion detection: Techniques, systems and challenges,

    P. Garcia-Teodoro, J. Diaz-Verdejo, G. Maci ´a-Fern´andez, and E. V ´azquez, “Anomaly-based network intrusion detection: Techniques, systems and challenges,” computers & security , vol. 28, no. 1-2, pp. 18–28, 2009

    2009

  77. [85]

    On fast and accurate detection of unauthorized wireless access points using clock skews,

    S. Jana and S. K. Kasera, “On fast and accurate detection of unauthorized wireless access points using clock skews,” IEEE Transactions on Mobile Computing, vol. 9, no. 3, pp. 449–462, 2009

    2009

  78. [86]

    Cloaking the clock: emulating clock skew in controller area networks,

    S. U. Sagong, X. Ying, A. Clark, L. Bushnell, and R. Poovendran, “Cloaking the clock: emulating clock skew in controller area networks,” in 2018 ACM/IEEE 9th International Conference on Cyber-Physical Systems (ICCPS). IEEE, 2018, pp. 32–42

    2018

  79. [87]

    Shape of the cloak: Formal analysis of clock skew-based intrusion detection system in controller area networks,

    X. Ying, S. U. Sagong, A. Clark, L. Bushnell, and R. Poovendran, “Shape of the cloak: Formal analysis of clock skew-based intrusion detection system in controller area networks,” IEEE Transactions on Information Forensics and Security , vol. 14, no. 9, pp. 2300–2314, 2019

    2019

  80. [88]

    Source identification using signal charac- teristics in controller area networks,

    P.-S. Murvay and B. Groza, “Source identification using signal charac- teristics in controller area networks,” IEEE Signal Processing Letters , vol. 21, no. 4, pp. 395–399, 2014

    2014

  81. [89]

    Physical-fingerprinting of electronic control unit (ecu) based on machine learning algorithm for in-vehicle network communication protocol “can-bus

    O. Avatefipour, “Physical-fingerprinting of electronic control unit (ecu) based on machine learning algorithm for in-vehicle network communication protocol “can-bus”,” Ph.D. dissertation, 2017

    2017

  82. [90]

    Identifying ecus using inimitable characteristics of signals in controller area networks,

    W. Choi, H. J. Jo, S. Woo, J. Y . Chun, J. Park, and D. H. Lee, “Identifying ecus using inimitable characteristics of signals in controller area networks,” IEEE Transactions on Vehicular Technology, vol. 67, no. 6, pp. 4757–4770, 2018

    2018

  83. [91]

    V oltageids: Low- level communication characteristics for automotive intrusion detection system,

    W. Choi, K. Joo, H. J. Jo, M. C. Park, and D. H. Lee, “V oltageids: Low- level communication characteristics for automotive intrusion detection system,” IEEE Transactions on Information Forensics and Security , vol. 13, no. 8, 2018

    2018

  84. [92]

    Scission: Signal characteristic-based sender identification and intrusion detection in automotive networks,

    M. Kneib and C. Huth, “Scission: Signal characteristic-based sender identification and intrusion detection in automotive networks,” in Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security. ACM, 2018, pp. 787–800

    2018

  85. [93]

    Easi: Edge-based sender identifi- cation on resource-constrained platforms for automotive networks,

    M. Kneib, O. Schell, and C. Huth, “Easi: Edge-based sender identifi- cation on resource-constrained platforms for automotive networks,” in Proc. Netw. Distrib. Syst. Secur. Symp. , 2020, pp. 1–16

    2020

  86. [94]

    Tidal-can: Differential timing based intrusion detection and localization for controller area network,

    P.-S. Murvay and B. Groza, “Tidal-can: Differential timing based intrusion detection and localization for controller area network,” IEEE Access, vol. 8, pp. 68 895–68 912, 2020

    2020

  87. [95]

    Paret, Multiplexed networks for embedded systems: CAN, LIN, Flexray, Safe-by-Wire

    D. Paret, Multiplexed networks for embedded systems: CAN, LIN, Flexray, Safe-by-Wire... John Wiley & Sons, 2007

    2007

  88. [96]

    An algorithm for detection of malicious messages on can buses,

    C. Ling and D. Feng, “An algorithm for detection of malicious messages on can buses,” in 2012 National Conference on Information Technology and Computer Science . Atlantis Press, 2012

    2012

  89. [97]

    An intrusion detection method for securing in-vehicle can bus,

    M. Gmiden, M. H. Gmiden, and H. Trabelsi, “An intrusion detection method for securing in-vehicle can bus,” in 2016 17th International Conference on Sciences and Techniques of Automatic Control and Computer Engineering (STA) . IEEE, 2016, pp. 176–180

    2016

  90. [98]

    Modeling inter-signal arrival times for accurate detection of can bus signal injection attacks: a data-driven approach to in-vehicle intrusion detection,

    M. R. Moore, R. A. Bridges, F. L. Combs, M. S. Starr, and S. J. Prowell, “Modeling inter-signal arrival times for accurate detection of can bus signal injection attacks: a data-driven approach to in-vehicle intrusion detection,” in Proceedings of the 12th Annual Conference on ...

    2017

  91. [99]

    Detection of automotive can cyber-attacks by identifying packet timing anomalies in time windows,

    A. Tomlinson, J. Bryans, S. A. Shaikh, and H. K. Kalutarage, “Detection of automotive can cyber-attacks by identifying packet timing anomalies in time windows,” in 2018 48th Annual IEEE/IFIP International Conference on Dependable Systems and Networks Workshops (DSN-W) . IEEE, ...

    2018

  92. [100]

    Automotive intrusion detection based on constant can message frequencies across 29 vehicle driving modes,

    C. Young, H. Olufowobi, G. Bloom, and J. Zambreno, “Automotive intrusion detection based on constant can message frequencies across 29 vehicle driving modes,” in Proceedings of the ACM Workshop on Automotive Cybersecurity. ACM, 2019, pp. 9–14

    2019

  93. [101]

    Saiducant: Specification-based automotive intrusion detection using controller area network (can) timing,

    H. Olufowobi, C. Young, J. Zambreno, and G. Bloom, “Saiducant: Specification-based automotive intrusion detection using controller area network (can) timing,” IEEE Transactions on Vehicular Technology , vol. 69, no. 2, pp. 1484–1494, 2019

    2019

  94. [102]

    A mathematical theory of communication,

    C. E. Shannon, “A mathematical theory of communication,” ACM SIGMOBILE mobile computing and communications review , vol. 5, no. 1, pp. 3–55, 2001

    2001

  95. [103]

    Detecting anomalies in network traffic using maximum entropy estimation,

    Y . Gu, A. McCallum, and D. Towsley, “Detecting anomalies in network traffic using maximum entropy estimation,” in Proceedings of the 5th ACM SIGCOMM conference on Internet Measurement , 2005, pp. 32–32

    2005

  96. [104]

    Information-theoretic measures for anomaly detection,

    W. Lee and D. Xiang, “Information-theoretic measures for anomaly detection,” in Proceedings 2001 IEEE Symposium on Security and Privacy. S&P 2001 . IEEE, 2000, pp. 130–143

    2001

  97. [105]

    Intrusion detection: a brief history and overview,

    R. A. Kemmerer and G. Vigna, “Intrusion detection: a brief history and overview,” Computer, vol. 35, no. 4, pp. supl27–supl30, 2002

    2002

  98. [106]

    Entropy, relative entropy and mutual information,

    T. M. Cover and J. A. Thomas, “Entropy, relative entropy and mutual information,” Elements of information theory , vol. 2, pp. 1–55, 1991

    1991

  99. [107]

    Information theory and statistics,

    ——, “Information theory and statistics,” Elements of Information Theory, vol. 1, no. 1, pp. 279–335, 1991

    1991

  100. [108]

    Sliding window optimized information entropy analysis method for intrusion detection on in-vehicle networks,

    W. Wu, Y . Huang, R. Kurachi, G. Zeng, G. Xie, R. Li, and K. Li, “Sliding window optimized information entropy analysis method for intrusion detection on in-vehicle networks,” IEEE Access, vol. 6, pp. 45 233–45 245, 2018

    2018

  101. [109]

    Simulated annealing,

    D. Bertsimas, J. Tsitsiklis et al. , “Simulated annealing,” Statistical science, vol. 8, no. 1, pp. 10–15, 1993

    1993

  102. [110]

    Field classification, modeling and anomaly detection in unknown can bus networks,

    M. Markovitz and A. Wool, “Field classification, modeling and anomaly detection in unknown can bus networks,” Vehicular Communications, vol. 9, pp. 43–52, 2017

    2017

  103. [111]

    Anomaly detection in automobile control network data with long short-term memory networks,

    A. Taylor, S. Leblanc, and N. Japkowicz, “Anomaly detection in automobile control network data with long short-term memory networks,” in 2016 IEEE International Conference on Data Science and Advanced Analytics (DSAA). IEEE, 2016, pp. 130–139

    2016

  104. [112]

    Intrusion detection system using deep neural network for in-vehicle network security,

    M.-J. Kang and J.-W. Kang, “Intrusion detection system using deep neural network for in-vehicle network security,” PloS one, vol. 11, no. 6, p. e0155781, 2016

    2016

  105. [113]

    Robust and self-evolving ids for in- vehicle network by enabling spatiotemporal information,

    J. Xiao, H. Wu, and X. Li, “Robust and self-evolving ids for in- vehicle network by enabling spatiotemporal information,” in 2019 IEEE 21st International Conference on High Performance Computing and Communications; IEEE 17th International Conference on Smart City; IEEE 5th Int...

    2019

  106. [114]

    Convolutional lstm network: A machine learning approach for precipitation nowcasting,

    X. Shi, Z. Chen, H. Wang, D.-Y . Yeung, W.-K. Wong, and W.-c. Woo, “Convolutional lstm network: A machine learning approach for precipitation nowcasting,” Advances in neural information processing systems, vol. 28, pp. 802–810, 2015

    2015

  107. [115]

    Indra: Intrusion detection using recurrent autoencoders in automotive embedded systems,

    V . K. Kukkala, S. V . Thiruloga, and S. Pasricha, “Indra: Intrusion detection using recurrent autoencoders in automotive embedded systems,” arXiv preprint arXiv:2007.08795 , 2020

    2007 arXiv

  108. [116]

    Empirical evaluation of gated recurrent neural networks on sequence modeling,

    J. Chung, C. Gulcehre, K. Cho, and Y . Bengio, “Empirical evaluation of gated recurrent neural networks on sequence modeling,” arXiv preprint arXiv:1412.3555, 2014

    2014 arXiv

  109. [117]

    Anomaly detection for mixed transmission can messages using quantized intervals and absolute difference of payloads,

    T. Koyama, T. Shibahara, K. Hasegawa, Y . Okano, M. Tanaka, and Y . Oshima, “Anomaly detection for mixed transmission can messages using quantized intervals and absolute difference of payloads,” in Proceedings of the ACM Workshop on Automotive Cybersecurity. ACM, 2019, pp. 19–24

    2019

  110. [118]

    Gids: Gan based intrusion detection system for in-vehicle network,

    E. Seo, H. M. Song, and H. K. Kim, “Gids: Gan based intrusion detection system for in-vehicle network,” in 2018 16th Annual Conference on Privacy, Security and Trust (PST) . IEEE, 2018, pp. 1–6

    2018

  111. [119]

    Towards a can ids based on a neural network data field predictor,

    K. Pawelec, R. A. Bridges, and F. L. Combs, “Towards a can ids based on a neural network data field predictor,” in Proceedings of the ACM Workshop on Automotive Cybersecurity . ACM, 2019, pp. 31–34

    2019

  112. [120]

    Anomaly detection of can bus messages through analysis of id sequences,

    M. Marchetti and D. Stabili, “Anomaly detection of can bus messages through analysis of id sequences,” in 2017 IEEE Intelligent Vehicles Symposium (IV). IEEE, 2017, pp. 1577–1583

    2017

  113. [121]

    Graph- based intrusion detection system for controller area networks,

    R. Islam, R. U. D. Refat, S. M. Yerram, and H. Malik, “Graph- based intrusion detection system for controller area networks,” IEEE Transactions on Intelligent Transportation Systems , 2020

    2020

  114. [122]

    Normal and malicious sliding windows similarity analysis method for fast and accurate ids against dos attacks on in-vehicle networks,

    S. Ohira, A. K. Desta, I. Arai, H. Inoue, and K. Fujikawa, “Normal and malicious sliding windows similarity analysis method for fast and accurate ids against dos attacks on in-vehicle networks,” IEEE Access, vol. 8, pp. 42 422–42 435, 2020

    2020

  115. [123]

    Anomaly detection in recordings from in-vehicle net- works,

    A. Theissler, “Anomaly detection in recordings from in-vehicle net- works,” Big data and applications , vol. 23, 2014

    2014

  116. [124]

    An intrusion detection system based on machine learning for can-bus,

    D. Tian, Y . Li, Y . Wang, X. Duan, C. Wang, W. Wang, R. Hui, and P. Guo, “An intrusion detection system based on machine learning for can-bus,” in International Conference on Industrial Networks and Intelligent Systems. Springer, 2017, pp. 285–294

    2017

  117. [125]

    Embedded hybrid anomaly detection for automotive can communication,

    M. Weber, S. Klug, E. Sax, and B. Zimmer, “Embedded hybrid anomaly detection for automotive can communication,” 2018

    2018

  118. [126]

    A distributed anomaly detection system for in-vehicle network using htm,

    C. Wang, Z. Zhao, L. Gong, L. Zhu, Z. Liu, and X. Cheng, “A distributed anomaly detection system for in-vehicle network using htm,” IEEE Access, vol. 6, pp. 9091–9098, 2018

    2018

  119. [127]

    Using a one-class compound classifier to detect in-vehicle network attacks,

    A. Tomlinson, J. Bryans, and S. A. Shaikh, “Using a one-class compound classifier to detect in-vehicle network attacks,” in Proceedings of the Genetic and Evolutionary Computation Conference Companion , 2018, pp. 1926–1929

    2018

  120. [128]

    Mobile edge assisted literal multi-dimensional anomaly detection of in-vehicle network using lstm,

    K. Zhu, Z. Chen, Y . Peng, and L. Zhang, “Mobile edge assisted literal multi-dimensional anomaly detection of in-vehicle network using lstm,” IEEE Transactions on Vehicular Technology, vol. 68, no. 5, pp. 4275– 4284, 2019

    2019

  121. [129]

    Canet: An unsupervised intrusion detection system for high dimensional can bus data,

    M. Hanselmann, T. Strauss, K. Dormann, and H. Ulmer, “Canet: An unsupervised intrusion detection system for high dimensional can bus data,” IEEE Access, vol. 8, pp. 58 194–58 205, 2020

    2020

  122. [130]

    Poster: Intrusion detection system for in-vehicle networks using sensor correlation and integration,

    H. Li, L. Zhao, M. Juliato, S. Ahmed, M. R. Sastry, and L. L. Yang, “Poster: Intrusion detection system for in-vehicle networks using sensor correlation and integration,” in Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security, 2017, pp. 2531– 2533

    2017

  123. [131]

    Exploiting consistency among heterogeneous sensors for vehicle anomaly detection,

    A. Ganesan, J. Rao, and K. Shin, “Exploiting consistency among heterogeneous sensors for vehicle anomaly detection,” SAE Technical Paper, Tech. Rep., 2017

    2017

  124. [132]

    Context-aware intrusion detection in automotive control systems,

    A. Wasicek, M. D. Pese, A. Weimerskirch, Y . Burakova, and K. Singh, “Context-aware intrusion detection in automotive control systems,” in ESCAR USA Conference , 2017

    2017

  125. [133]

    Detection of injection attacks in in-vehicle networks,

    L. ben Othmane, L. Dhulipala, M. Abdelkhalek, M. Govindarasu, and N. Multari, “Detection of injection attacks in in-vehicle networks,” 2019

    2019

  126. [134]

    Embedded intrusion detection system for detecting attacks over can- bus,

    M. Casillo, S. Coppola, M. De Santo, F. Pascale, and E. Santonicola, “Embedded intrusion detection system for detecting attacks over can- bus,” in 2019 4th International Conference on System Reliability and Safety (ICSRS). IEEE, 2019, pp. 136–141

    2019

  127. [135]

    SAID: State-aware defense against injection attacks on in- vehicle network,

    L. Xue, Y . Liu, T. Li, K. Zhao, J. Li, X. L. Le Yu, Y . Zhou, and G. Gu, “SAID: State-aware defense against injection attacks on in- vehicle network,” in USENIX Security Symposium (USENIX Security) , 2022

    2022

  128. [136]

    The chi square test: an introduction,

    A. Ugoni and B. F. Walker, “The chi square test: an introduction,” COMSIG review, vol. 4, no. 3, p. 61, 1995

    1995

  129. [137]

    Bollob ´as, Modern graph theory

    B. Bollob ´as, Modern graph theory . Springer Science & Business Media, 2013, vol. 184

    2013

  130. [138]

    Faunal provinces and the simpson coefficient,

    J. J. Flynn, “Faunal provinces and the simpson coefficient,” Rocky Mountain Geology, vol. 24, no. special paper 3, pp. 317–338, 1986

    1986

  131. [139]

    Transformer-based attention network for in-vehicle intrusion detection,

    T. P. Nguyen, H. Nam, and D. Kim, “Transformer-based attention network for in-vehicle intrusion detection,” IEEE Access, 2023

    2023

  132. [140]

    Enhancing one-class support vector machines for unsupervised anomaly detection,

    M. Amer, M. Goldstein, and S. Abdennadher, “Enhancing one-class support vector machines for unsupervised anomaly detection,” in Proceedings of the ACM SIGKDD workshop on outlier detection and description, 2013, pp. 8–15

    2013

  133. [141]

    Decision tree regression for soft classification of remote sensing data,

    M. Xu, P. Watanachaturaporn, P. K. Varshney, and M. K. Arora, “Decision tree regression for soft classification of remote sensing data,” Remote Sensing of Environment , vol. 97, no. 3, pp. 322–336, 2005

    2005

  134. [142]

    Greedy function approximation: a gradient boosting machine,

    J. H. Friedman, “Greedy function approximation: a gradient boosting machine,” Annals of statistics , pp. 1189–1232, 2001

    2001

  135. [143]

    A hierarchical bayesian model of invariant pattern recognition in the visual cortex,

    D. George and J. Hawkins, “A hierarchical bayesian model of invariant pattern recognition in the visual cortex,” in Proceedings. 2005 IEEE International Joint Conference on Neural Networks, 2005., vol. 3. IEEE, 2005, pp. 1812–1817

    2005

  136. [144]

    Performance of a hierarchical temporal memory network in noisy sequence learning,

    D. E. Padilla, R. Brinkworth, and M. D. McDonnell, “Performance of a hierarchical temporal memory network in noisy sequence learning,” in 2013 IEEE International Conference on Computational Intelligence and Cybernetics (CYBERNETICSCOM) . IEEE, 2013, pp. 45–51

    2013

  137. [145]

    Classification and data analysis in vector spaces,

    B. G. Batchelor, “Classification and data analysis in vector spaces,” in Pattern Recognition. Springer, 1978, pp. 65–116

    1978

  138. [146]

    Springer, 2012

    ——, Machine Vision Handbook. Springer, 2012

    2012

  139. [147]

    A structured approach to anomaly detection for in-vehicle networks,

    M. M ¨uter, A. Groll, and F. C. Freiling, “A structured approach to anomaly detection for in-vehicle networks,” in IEEE IAS, 2010

    2010

  140. [148]

    Loda: Lightweight on-line detector of anomalies,

    T. Pevn`y, “Loda: Lightweight on-line detector of anomalies,” Machine Learning, vol. 102, no. 2, pp. 275–304, 2016

    2016

  141. [149]

    Efficient resource allocation for on-demand mobile-edge cloud computing,

    X. Chen, W. Li, S. Lu, Z. Zhou, and X. Fu, “Efficient resource allocation for on-demand mobile-edge cloud computing,” IEEE Transactions on Vehicular Technology, vol. 67, no. 9, pp. 8769–8780, 2018. 30

    2018

  142. [150]

    Road vehicles—diagnostics on controller area networks (can)—requirements for emissions-related systems,

    I. O. for Standardization, “Road vehicles—diagnostics on controller area networks (can)—requirements for emissions-related systems,” ISO Standard 15765-4:2005(E)

    2005

  143. [151]

    M. H. Hassoun et al., Fundamentals of artificial neural networks . MIT press, 1995

    1995

  144. [152]

    Analyzing time series gene expression data,

    Z. Bar-Joseph, “Analyzing time series gene expression data,” Bioinfor- matics, vol. 20, no. 16, pp. 2493–2503, 2004

    2004

  145. [153]

    Bayesian network classifiers,

    N. Friedman, D. Geiger, and M. Goldszmidt, “Bayesian network classifiers,” Machine learning, vol. 29, no. 2-3, pp. 131–163, 1997

    1997

  146. [154]

    In-vehicle network intrusion detection using deep convolutional neural network,

    H. M. Song, J. Woo, and H. K. Kim, “In-vehicle network intrusion detection using deep convolutional neural network,” Vehicular Commu- nications, vol. 21, p. 100198, 2020

    2020

  147. [155]

    X-431 pad,

    LAUNCH, “X-431 pad,” http://en.cnlaunch.com/prod view.aspx? TypeId=12&Id=317&FId=t3:12:3, 2019

    2019

  148. [156]

    You can’t see me: physical removal attacks on lidar-based autonomous vehicles driving frameworks,

    Y . Cao, S. H. Bhupathiraju, P. Naghavi, T. Sugawara, Z. M. Mao, and S. Rampazzi, “You can’t see me: physical removal attacks on lidar-based autonomous vehicles driving frameworks,” arXiv eprint archive , 2022

    2022

  149. [157]

    Pla- lidar: Physical laser attacks against lidar-based 3d object detection in autonomous vehicle,

    Z. Jin, J. Xiaoyu, Y . Cheng, B. Yang, C. Yan, and W. Xu, “Pla- lidar: Physical laser attacks against lidar-based 3d object detection in autonomous vehicle,” in 2023 IEEE Symposium on Security and Privacy (SP). IEEE Computer Society, 2022, pp. 710–727

    2023

  150. [158]

    Failure-scenario maker for rule-based agent using multi- agent adversarial reinforcement learning and its application to au- tonomous driving,

    A. Wachi, “Failure-scenario maker for rule-based agent using multi- agent adversarial reinforcement learning and its application to au- tonomous driving,” arXiv preprint arXiv:1903.10654 , 2019

    1903 arXiv

  151. [159]

    Distributed collaborative intrusion detection system for vehicular ad hoc networks based on invariant,

    M. Zhou, L. Han, H. Lu, and C. Fu, “Distributed collaborative intrusion detection system for vehicular ad hoc networks based on invariant,” Computer Networks, vol. 172, p. 107174, 2020

    2020

  152. [160]

    Ai-empowered secure data communication in v2x environment with 6g network,

    A. R. Nair, N. K. Jadav, R. Gupta, and S. Tanwar, “Ai-empowered secure data communication in v2x environment with 6g network,” in IEEE INFOCOM 2022-IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS). IEEE, 2022, pp. 1–6

    2022

  153. [161]

    {SAID}: State-aware defense against injection attacks on in-vehicle network,

    L. Xue, Y . Liu, T. Li, K. Zhao, J. Li, L. Yu, X. Luo, Y . Zhou, and G. Gu, “{SAID}: State-aware defense against injection attacks on in-vehicle network,” in 31st USENIX Security Symposium (USENIX Security 22) , 2022, pp. 1921–1938

    2022

  154. [162]

    Control system level intrusion detection on j1939 heavy-duty vehicle buses,

    C. Jichici, A. Berdich, A. Musuroi, and B. Groza, “Control system level intrusion detection on j1939 heavy-duty vehicle buses,” IEEE Transactions on Industrial Informatics , 2023

    2023

  155. [163]

    Using machine learning to detect anomalies in embedded networks in heavy vehicles,

    H. Shirazi, I. Ray, and C. Anderson, “Using machine learning to detect anomalies in embedded networks in heavy vehicles,” in Foundations and Practice of Security: 12th International Symposium, FPS 2019, Toulouse, France, November 5–7, 2019, Revised Selected Papers 12 . Springe...

    2019

  156. [164]

    A precedence graph- based approach to detect message injection attacks in j1939 based networks,

    S. Mukherjee, J. Walkery, I. Rayz, and J. Daily, “A precedence graph- based approach to detect message injection attacks in j1939 based networks,” in 2017 15th Annual Conference on Privacy, Security and Trust (PST). IEEE, 2017, pp. 67–6709

    2017

  157. [165]

    Effective intrusion detection and prevention for the commercial vehicle sae j1939 can bus,

    C. Jichici, B. Groza, R. Ragobete, P.-S. Murvay, and T. Andreica, “Effective intrusion detection and prevention for the commercial vehicle sae j1939 can bus,” IEEE Transactions on Intelligent Transportation Systems, vol. 23, no. 10, pp. 17 425–17 439, 2022

    2022

  158. [166]

    Detecting can attacks on j1939 and nmea 2000 networks,

    M. Rogers, P. Weigand, J. Happa, and K. Rasmussen, “Detecting can attacks on j1939 and nmea 2000 networks,” IEEE Transactions on Dependable and Secure Computing , 2022

    2000

  159. [167]

    Ecuprint—physical fingerprinting electronic control units on can buses inside cars and sae j1939 compliant vehicles,

    L. Popa, B. Groza, C. Jichici, and P.-S. Murvay, “Ecuprint—physical fingerprinting electronic control units on can buses inside cars and sae j1939 compliant vehicles,” IEEE Transactions on Information Forensics and Security, vol. 17, pp. 1185–1200, 2022

    2022

  160. [168]

    A review: Efficient transportation—future aspects of iov,

    A. Dureja and S. Sangwan, “A review: Efficient transportation—future aspects of iov,” Evolving Technologies for Computing, Communication and Smart World: Proceedings of ETCCS 2020 , pp. 97–108, 2020

    2020

  161. [169]

    Security threats & attacks in iov environment: Open research issues and challenges,

    A. Garg, A. Chauhan, and P. G. Shambharkar, “Security threats & attacks in iov environment: Open research issues and challenges,” in 2022 Third International Conference on Intelligent Computing Instrumentation and Control Technologies (ICICICT). IEEE, 2022, pp. 803–810

    2022

  162. [170]

    Ignore: A policy server to prevent cyber-attacks from propagating to the physical domain,

    Y . Wadhawan, C. Neuman, and A. AlMajali, “Ignore: A policy server to prevent cyber-attacks from propagating to the physical domain,” Applied Sciences, vol. 10, no. 18, p. 6236, 2020

    2020

  163. [171]

    Development of a mems-based iov system for augmenting road traffic survey,

    C. Spandonidis, F. Giannopoulos, E. Sedikos, D. Reppas, and P. Theodor- opoulos, “Development of a mems-based iov system for augmenting road traffic survey,” IEEE Transactions on Instrumentation and Mea- surement, vol. 71, pp. 1–8, 2022

    2022

  164. [172]

    A smart road side unit in a microeolic box to provide edge computing for vehicular applications,

    F. Busacca, C. Grasso, S. Palazzo, and G. Schembra, “A smart road side unit in a microeolic box to provide edge computing for vehicular applications,” IEEE Transactions on Green Communications and Networking, vol. 7, no. 1, pp. 194–210, 2022

    2022

  165. [173]

    Edge computing enabled video segmentation for real-time traffic monitoring in internet of vehicles,

    S. Wan, S. Ding, and C. Chen, “Edge computing enabled video segmentation for real-time traffic monitoring in internet of vehicles,” Pattern Recognition, vol. 121, p. 108146, 2022

    2022

  166. [174]

    Cloud-based cyber-physical intrusion detection for vehicles using deep learning,

    G. Loukas, T. Vuong, R. Heartfield, G. Sakellari, Y . Yoon, and D. Gan, “Cloud-based cyber-physical intrusion detection for vehicles using deep learning,” IEEE Access, vol. 6, pp. 3491–3508, 2017

    2017

  167. [175]

    6g: Opening new horizons for integration of comfort, security, and intelligence,

    G. Gui, M. Liu, F. Tang, N. Kato, and F. Adachi, “6g: Opening new horizons for integration of comfort, security, and intelligence,” IEEE Wireless Communications, vol. 27, no. 5, pp. 126–132, 2020

    2020

  168. [176]

    Deep neural networks for securing iot enabled vehicular ad-hoc networks,

    T. Alladi, A. Agrawal, B. Gera, V . Chamola, B. Sikdar, and M. Guizani, “Deep neural networks for securing iot enabled vehicular ad-hoc networks,” in ICC 2021-IEEE International Conference on Communi- cations. IEEE, 2021, pp. 1–6

    2021

  169. [177]

    Federated ai-enabled in-vehicle network intrusion detection for internet of vehicles,

    J. Yang, J. Hu, and T. Yu, “Federated ai-enabled in-vehicle network intrusion detection for internet of vehicles,” Electronics, vol. 11, no. 22, p. 3658, 2022

    2022

  170. [178]

    Transfer learning based intrusion detection scheme for internet of vehicles,

    X. Li, Z. Hu, M. Xu, Y . Wang, and J. Ma, “Transfer learning based intrusion detection scheme for internet of vehicles,” Information Sciences, vol. 547, pp. 119–135, 2021

    2021

  171. [179]

    A deep learning approach to network intrusion detection,

    N. Shone, T. N. Ngoc, V . D. Phai, and Q. Shi, “A deep learning approach to network intrusion detection,” IEEE transactions on emerging topics in computational intelligence , vol. 2, no. 1, pp. 41–50, 2018

    2018

  172. [180]

    Toward effective intrusion detection using log-cosh conditional variational autoencoder,

    X. Xu, J. Li, Y . Yang, and F. Shen, “Toward effective intrusion detection using log-cosh conditional variational autoencoder,” IEEE Internet of Things Journal, vol. 8, no. 8, pp. 6187–6196, 2020

    2020

  173. [181]

    A novel wireless network intrusion detection method based on adaptive synthetic sampling and an improved convolutional neural network,

    Z. Hu, L. Wang, L. Qi, Y . Li, and W. Yang, “A novel wireless network intrusion detection method based on adaptive synthetic sampling and an improved convolutional neural network,” IEEE Access, vol. 8, pp. 195 741–195 751, 2020

    2020

  174. [182]

    Host-based intrusion detection model using siamese network,

    D. Park, S. Kim, H. Kwon, D. Shin, and D. Shin, “Host-based intrusion detection model using siamese network,” IEEE Access , vol. 9, pp. 76 614–76 623, 2021

    2021

  175. [183]

    An intrusion detection approach based on incremental long short-term memory,

    H. Zhou, L. Kang, H. Pan, G. Wei, and Y . Feng, “An intrusion detection approach based on incremental long short-term memory,” International Journal of Information Security , vol. 22, no. 2, pp. 433–446, 2023

    2023

  176. [184]

    Novel deep learning-enabled lstm autoencoder architec- ture for discovering anomalous events from intelligent transportation systems,

    J. Ashraf, A. D. Bakhshi, N. Moustafa, H. Khurshid, A. Javed, and A. Beheshti, “Novel deep learning-enabled lstm autoencoder architec- ture for discovering anomalous events from intelligent transportation systems,” IEEE Transactions on Intelligent Transportation Systems , vol....

    2020

  177. [185]

    Hast-ids: Learning hierarchical spatial-temporal features using deep neural networks to improve intrusion detection,

    W. Wang, Y . Sheng, J. Wang, X. Zeng, X. Ye, Y . Huang, and M. Zhu, “Hast-ids: Learning hierarchical spatial-temporal features using deep neural networks to improve intrusion detection,” IEEE access, vol. 6, pp. 1792–1806, 2017

    2017

  178. [186]

    Stidm: A spatial and temporal aware intrusion detection model,

    X. Han, R. Yin, Z. Lu, B. Jiang, Y . Liu, S. Liu, C. Wang, and N. Li, “Stidm: A spatial and temporal aware intrusion detection model,” in 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) . IEEE, 2020, pp. 370–377

    2020

  179. [187]

    Flow-based intrusion detection system in vehicular ad hoc network using context-aware feature extraction,

    E. A. Shams, A. Rizaner, and A. H. Ulusoy, “Flow-based intrusion detection system in vehicular ad hoc network using context-aware feature extraction,” Vehicular Communications, vol. 41, p. 100585, 2023

    2023

  180. [188]

    Toward verified artificial intelligence,

    S. A. Seshia, D. Sadigh, and S. S. Sastry, “Toward verified artificial intelligence,” Communications of the ACM , vol. 65, no. 7, pp. 46–55, 2022

    2022

  181. [189]

    Are formal methods applicable to machine learning and artificial intelligence?

    M. Krichen, A. Mihoub, M. Y . Alzahrani, W. Y . H. Adoni, and T. Nahhal, “Are formal methods applicable to machine learning and artificial intelligence?” in 2022 2nd International Conference of Smart Systems and Emerging Technologies (SMARTTECH) . IEEE, 2022, pp. 48–53. XI. B ...

    2022

Pith tools

Reviewed August 7, 2026 · model on record in the stance chip above.