초경량 Convolutional Neural Network를 이용한차량용 Intrusion Detection System의 설계 및 구현
Design and Implementation of Automotive Intrusion Detection System Using Ultra-Lightweight Convolutional Neural Network
2
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
본 논문에서는 경량화된 CNN(Convolutional Neural Network)을 사용하여 CAN(Controller Area Network) 버스 상의 공격을 탐지하는 효율적인 알고리즘을 제안하고, 이를 기반으로 하는 IDS(Intrusion Detection System)를 FPGA로 설계, 구현 및 검증하였다. 제안한 IDS는 기존의 CNN 기반 IDS에 비해 CAN 버스 상의 공격을 프레임 단위로 탐지할 수 있어서 정확하고 신속한대응이 가능하다. 또한 제안한 IDS는 기존의 CNN 기반 IDS에 비해 컨볼루션 레이어를 하나만 사용하기 때문에 하드웨어를 크게줄일 수 있다. 시뮬레이션 및 구현 결과는 제안된 IDS가 CAN 버스 상의 다양한 공격을 효과적으로 탐지한다는 것을 보여준다.
Abstract
This paper proposes an efficient algorithm to detect CAN (Controller Area Network) bus attack based on a lightweight CNN (Convolutional Neural Network), and an IDS(Intrusion Detection System) was designed, implemented, and verified with FPGA. Compared to conventional CNN-based IDS, the proposed IDS detects CAN bus attack on a frame-by-frame basis, enabling accurate and rapid response. Furthermore, the proposed IDS can significantly reduce hardware since it exploits only one convolutional layer, compared to conventional CNN-based IDS. Simulation and implementation results show that the proposed IDS effectively detects various attacks on the CAN bus.
참고문헌 (11)
- "ISO 11898-1:2015, Road Vehicles-Controller Area Network (CAN)-Part 1: Data Link Layer and Physical Signaling"[URL]
- "ISO 9141-3:1998, Road Vehicles-Diagnostic Systems-Part 3: Verification of the Communication between Vehicle and OBD II Scan Tool"[URL]
- K. Koscher, "Experimental Security Analysis of a Modern Automobile", Proceedings of IEEE Symposium on Security and Privacy, pp.447~462 (2010)
- Samuel Woo, "A Practical Wireless Attack on the Connected Car and Security Protocol for In-Vehicle CAN", IEEE Transactions on Intelligent Transportation Systems, 16(2), pp.1~14 (2014), Institute of Electrical and Electronics Engineers (IEEE)[DOI]
- C. Lin, "Cyber-Security for the Controller Area Network (CAN)Communication Protocol", Proceedings of International Conference on Cyber Security, pp.1~7 (2012)
- S. Khandelwal, "A Lightweight FPGA-based IDS-ECU Architecture for Automotive CAN", Proceedings of International Conference on Field Programmable Technology, pp.1~6 (2019)
- E. Seo, "GIDS: GAN Based Intrusion Detection System for In-Vehicle Network", Proceedings of Annual Conference on Privacy, Security, and Trust, pp.1~6 (2018)
- 임형철, "공격 횟수와 공격 유형을 고려하여 탐지 성능을 개선한차량 내 네트워크의 침입 탐지 시스템", 전기전자학회논문지, 26(4), pp.622~627 (2022), 한국전기전자학회
- Hyun Min Song, "In-vehicle network intrusion detection using deep convolutional neural network", Vehicular Communications, 21, pp.100198~ (2020), Elsevier BV[DOI]
- "Car-Hacking Dataset"[URL]
- Y. Wu, "Efficient Dynamic Fixed-Point Quantization of CNN Inference Accelerators for Edge Devices", Proceedings of International Symposium on VLSI Design, Automation and Test, pp.1~4 (2019)