arXiv 2109.045652021-09-09cs.LGcs.AIcs.CR

TENET: Temporal CNN with Attention for Anomaly Detection in Automotive Cyber-Physical Systems

Colorado State University（科罗拉多州立大学）

S. V. Thiruloga, V. K. Kukkala, S. Pasricha

英文摘要：

Modern vehicles have multiple electronic control units (ECUs) that are connected together as part of a complex distributed cyber-physical system (CPS). The ever-increasing communication between ECUs and external electronic systems has made these vehicles particularly susceptible to a variety of cyber-attacks. In this work, we present a novel anomaly detection framework called TENET to detect anomalies induced by cyber-attacks on vehicles. TENET uses temporal convolutional neural networks with an integrated attention mechanism to detect anomalous attack patterns. TENET is able to achieve an improvement of 32.70% in False Negative Rate, 19.14% in the Mathews Correlation Coefficient, and 17.25% in the ROC-AUC metric, with 94.62% fewer model parameters, 86.95% decrease in memory footprint, and 48.14% lower inference time when compared to the best performing prior work on automotive anomaly detection.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

阅读原文

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

本文内容

英文摘要相关论文

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

继续探索

相关论文

Deep-RBF Networks for Anomaly Detection in Automotive Cyber-Physical Systems

Microsoft Corporation（微软公司）；Vanderbilt University（范德堡大学）

Deep Neural Networks (DNNs) are popularly used for implementing autonomy related tasks in automotive Cyber-Physical Systems (CPSs). However, these networks have been shown to make erroneous predictions to anomalous inputs, which manifests either due to Out-of-Distribution (OOD) data or adversarial attacks. To detect these anomalies, a separate DNN called assurance monitor is often trained and used in parallel to the controller DNN, increasing the resource burden and latency. We hypothesize that a single network that can perform controller predictions and anomaly detection is necessary to reduc…

2021-08-23cs.AIcs.LG

LATTE: LSTM Self-Attention based Anomaly Detection in Embedded Automotive Platforms

Colorado State University（科罗拉多州立大学）

Modern vehicles can be thought of as complex distributed embedded systems that run a variety of automotive applications with real-time constraints. Recent advances in the automotive industry towards greater autonomy are driving vehicles to be increasingly connected with various external systems (e.g., roadside beacons, other vehicles), which makes emerging vehicles highly vulnerable to cyber-attacks. Additionally, the increased complexity of automotive applications and the in-vehicle networks results in poor attack visibility, which makes detecting such attacks particularly challenging in auto…

2021-07-12cs.DCcs.LGcs.SY

Unsupervised Network Intrusion Detection System for AVTP in Automotive Ethernet Networks

Télécom Paris, IP Paris（巴黎电信学院，巴黎理工学院）

Network Intrusion Detection Systems (NIDSs) are widely regarded as efficient tools for securing in-vehicle networks against diverse cyberattacks. However, since cyberattacks are always evolving, signature-based intrusion detection systems are no longer adopted. An alternative solution can be the deployment of deep learning based intrusion detection system which play an important role in detecting unknown attack patterns in network traffic. Hence, in this paper, we compare the performance of different unsupervised deep and machine learning based anomaly detection algorithms, for real-time detec…

2022-04-25cs.CRcs.LGcs.NI

Roadmap for Cybersecurity in Autonomous Vehicles

Colorado State University（科罗拉多州立大学）

Autonomous vehicles are on the horizon and will be transforming transportation safety and comfort. These vehicles will be connected to various external systems and utilize advanced embedded systems to perceive their environment and make intelligent decisions. However, this increased connectivity makes these vehicles vulnerable to various cyber-attacks that can have catastrophic effects. Attacks on automotive systems are already on the rise in today's vehicles and are expected to become more commonplace in future autonomous vehicles. Thus, there is a need to strengthen cybersecurity in future a…

2022-01-19cs.AIcs.CRcs.LG

Robust Perception Architecture Design for Automotive Cyber-Physical Systems

Colorado State University（科罗拉多州立大学）

In emerging automotive cyber-physical systems (CPS), accurate environmental perception is critical to achieving safety and performance goals. Enabling robust perception for vehicles requires solving multiple complex problems related to sensor selection/ placement, object detection, and sensor fusion. Current methods address these problems in isolation, which leads to inefficient solutions. We present PASTA, a novel framework for global co-optimization of deep learning and sensing for dependable vehicle perception. Experimental results with the Audi-TT and BMW-Minicooper vehicles show how PASTA…

2022-05-17cs.LGcs.ROcs.SY

Anomaly Detection in Intra-Vehicle Networks

Western University（西部大学）

The progression of innovation and technology and ease of inter-connectivity among networks has allowed us to evolve towards one of the promising areas, the Internet of Vehicles. Nowadays, modern vehicles are connected to a range of networks, including intra-vehicle networks and external networks. However, a primary challenge in the automotive industry is to make the vehicle safe and reliable; particularly with the loopholes in the existing traditional protocols, cyber-attacks on the vehicle network are rising drastically. Practically every vehicle uses the universal Controller Area Network (CA…

2022-05-07cs.AIcs.CRcs.LG

更多相关论文收起更多论文

一种基于生成式分类器的控制器局域网络异常检测系统

An Anomaly Detection System Based on Generative Classifiers for Controller Area Network

Clemson University（克莱姆森大学）；Politecnico di Milano（米兰理工大学）

本文提出一种基于生成式分类器的CAN网络入侵检测系统，利用变分贝叶斯和自编码器构建因果图与条件概率估计，在Car-hacking数据集上以有限训练数据超越现有模型，提升检测准确率与F1分数。

2024-12-28cs.CRcs.LG

Accelerating deep neural networks for efficient scene understanding in automotive cyber-physical systems

Industrial Systems Institute, Athena Research Center（雅典娜研究中心工业系统研究所）；University of Patras（帕特雷大学）

Automotive Cyber-Physical Systems (ACPS) have attracted a significant amount of interest in the past few decades, while one of the most critical operations in these systems is the perception of the environment. Deep learning and, especially, the use of Deep Neural Networks (DNNs) provides impressive results in analyzing and understanding complex and dynamic scenes from visual data. The prediction horizons for those perception systems are very short and inference must often be performed in real time, stressing the need of transforming the original large pre-trained networks into new smaller mod…

2021-07-19cs.CVcs.LG

CAN-BERT do it? Controller Area Network Intrusion Detection System based on BERT Language Model

Télécom Paris（巴黎电信学院）；IP Paris（巴黎理工学院）

Due to the rising number of sophisticated customer functionalities, electronic control units (ECUs) are increasingly integrated into modern automotive systems. However, the high connectivity between the in-vehicle and the external networks paves the way for hackers who could exploit in-vehicle network protocols' vulnerabilities. Among these protocols, the Controller Area Network (CAN), known as the most widely used in-vehicle networking technology, lacks encryption and authentication mechanisms, making the communications delivered by distributed ECUs insecure. Inspired by the outstanding perfo…

2022-10-17cs.CRcs.LGcs.NI

SOME/IP Intrusion Detection using Deep Learning-based Sequential Models in Automotive Ethernet Networks

LTCI Telecom Paris, IP Paris（巴黎电信学院LTCI（LTCI Telecom Paris, IP Paris））

Intrusion Detection Systems are widely used to detect cyberattacks, especially on protocols vulnerable to hacking attacks such as SOME/IP. In this paper, we present a deep learning-based sequential model for offline intrusion detection on SOME/IP application layer protocol. To assess our intrusion detection system, we have generated and labeled a dataset with several classes representing realistic intrusions, and a normal class - a significant contribution due to the absence of such publicly available datasets. Furthermore, we also propose a recurrent neural network (RNN), as an instance of de…

2021-10-10cs.CRcs.LG

多阶段知识蒸馏VGAE与GAT用于鲁棒的控制器局域网入侵检测

Multi-Stage Knowledge-Distilled VGAE and GAT for Robust Controller-Area-Network Intrusion Detection

提出结合VGAE异常检测与知识蒸馏GAT分类的多阶段CAN入侵检测框架，通过选择性欠采样处理不平衡数据，实现96%参数缩减，在六个数据集上F1平均提升16.2%。

2025-08-06cs.AIcs.LG

ChronosAD：利用时间序列基础模型进行精确异常检测

ChronosAD: Leveraging Time Series Foundation Models for Accurate Anomaly Detection

PR Veneto FESR 2021-2027（普罗文托地区FESR 2021-2027项目）；Action 1.1.1（行动1.1.1）；DGR 792；CUP D19J24000810007

提出ChronosAD架构，通过时间序列基础模型提取特征并结合BiLSTM与多头注意力机制，实现跨域鲁棒的异常检测，在11个基准上平均AUC提升4.72%，AP提升6.60%。

2026-05-31cs.AIcs.LG

评估汽车入侵检测系统对抗对抗性操纵的鲁棒性

Assessing the Resilience of Automotive Intrusion Detection Systems to Adversarial Manipulation

Politecnico di Milano（米兰理工大学）

该研究针对汽车入侵检测系统（IDS）的安全漏洞，探究了不同知识程度下基于梯度的对抗性规避攻击的可行性与影响，通过公开数据集实验验证了攻击有效性受数据集质量、目标IDS及攻击者知识程度的强关联影响。

2025-06-12cs.CRcs.LG

包含机器学习组件的网络物理系统组合性验证

Compositional Falsification of Cyber-Physical Systems with Machine Learning Components

University of California, Berkeley（加州大学伯克利分校）；Decyphir, Inc.（Decyphir公司）

本文研究了包含机器学习组件的网络物理系统（CPS）的正确性问题，提出了一种组合性验证框架，通过时间逻辑 falsifier 和机器学习分析器合作寻找违反规范的执行，以验证 CPS 的正确性。

2018-12-16cs.LGcs.SEcs.SY

Efficient Out-of-Distribution Detection Using Latent Space of $β$-VAE for Cyber-Physical Systems

Vanderbilt University（范德堡大学）；Nanyang Technological University（南洋理工大学）

Deep Neural Networks are actively being used in the design of autonomous Cyber-Physical Systems (CPSs). The advantage of these models is their ability to handle high-dimensional state-space and learn compact surrogate representations of the operational state spaces. However, the problem is that the sampled observations used for training the model may never cover the entire state space of the physical environment, and as a result, the system will likely operate in conditions that do not belong to the training distribution. These conditions that do not belong to training distribution are referre…

2021-08-26cs.AIcs.LG

SISSA：利用车载SOME/IP以太网流量对硬件功能安全与网络安全的实时监控

SISSA: Real-time Monitoring of Hardware Functional Safety and Cybersecurity with In-vehicle SOME/IP Ethernet Traffic

School of Computer Engineering and Science, Shanghai University（上海大学计算机工程与科学学院）；Purple Mountain Laboratories（紫金山实验室）

本文提出SISSA方法，通过分析车载SOME/IP以太网流量，结合Weibull分布建模硬件故障和深度学习模型检测网络攻击，实现对ECU功能安全与网络安全的实时监控。

2024-02-21cs.CRcs.LGcs.NI