Intrusion Detection System을 회피하고 Physical Attack을 하기 위한 GAN 기반 적대적 CAN 프레임 생성방법
GAN Based Adversarial CAN Frame Generation Method for Physical Attack Evading Intrusion Detection System
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
차량 기술이 성장하면서 운전자의 개입이 필요 없는 자율주행까지 발전하였고, 이에 따라 차량 내부 네트워크인 CAN 보안도 중요해졌다. CAN은 해킹 공격에 취약점을 보이는데, 이러한 공격을 탐지하기 위해 기계학습 기반 IDS가 도입된다. 하지만 기계학습은 높은 정확도에도 불구하고 적대적 예제에 취약한 모습을 보여주었다. 본 논문에서는 IDS를 회피할 수 있도록 feature에 잡음을 추가하고 또한 실제 차량의 physical attack을 위한 feature 선택 및 패킷화를 진행하여 IDS를 회피하고 실제 차량에도 공격할 수 있도록 적대적 CAN frame 생성방법을 제안한다. 모든 feature 변조 실험부터 feature 선택 후 변조 실험, 패킷화 이후 전처리하여 IDS 회피실험을 진행하여 생성한 적대적 CAN frame이 IDS를 얼마나 회피하는지 확인한다.
Abstract
As vehicle technology has grown, autonomous driving that does not require driver intervention has developed. Accordingly, CAN security, an network of in-vehicles, has also become important. CAN shows vulnerabilities in hacking attacks, and machine learning-based IDS is introduced to detect these attacks. However, despite its high accuracy, machine learning showed vulnerability against adversarial examples. In this paper, we propose a adversarial CAN frame generation method to avoid IDS by adding noise to feature and proceeding with feature selection and re-packet for physical attack of the vehicle. We check how well the adversarial CAN frame avoids IDS through experiments for each case that adversarial CAN frame generated by all feature modulation, modulation after feature selection, preprocessing after re-packet.
참고문헌 (23)
- "Taxonomy and definitions for term related to driving automation systems for on-road motor vehicles", SAE International in United States, ~ (2021)
- R.B. GmbH, "CAN specification version 2.0", ~ (1991)
- Jian Wang, "A survey of vehicle to everything(V2X) testing", Sensors, 19(2) (2019)
- S.H. Kim, "Control area network security technology trends", The Magazine of the IEIE, 42(8), pp.46~53 (2015)
- H.M. Song, "In-vehicle network intrusion detection using deep convolutional neural network", Vehicular Communications, 21, pp.1~13 (2020)
- Eunbi Seo, "GIDS: GAN based Intrusion detection system for in-vehicle network", Annual Conference on Privacy, Security and Trust(PST), 1, pp.1~6 (2018)
- Christian Szegedy, "Intriguing properties of neural networks", arXiv preprint, ~ (2013)
- Dowan Kim, "based adversarial CAN packet generation method for evading IDS", Conference on Information Security and Cryptography Summer 2021, pp.74~77 (2021)
- R.S. Pressman, "Software engineering a practitioner’s approach" (2019), McGraw Hill
- M.J. Kang, "Intrusion detection system using deep neural network for in-vehicle network security", PloS one, 11(6) (2016)
- Geoffrey Hinton, "Deep neural networks for acoustic modeling in speech recognition: the shared views of four research groups", IEEE Signal Processing Magazine, 29(6), pp.82~97 (2012)
- G.E. Hinton, "A fast learning algorithm for deep belief nets", Neural Computation, 18(7), pp.1527~1554 (2006)
- I.J. Goodfellow, "Generative adversarial nets", Advances in Neural Information Processing Systems, 2, pp.2672~2680 (2014)
- A. R. Javed, "CANintelliIDS : detecting in-vehicle intrusion attacks on a controller area network using CNN and attention-Based GRU", 2021 3rd International Cyber Resilience Conference(CRC), 8(2), pp.1456~1466 (2021)
- Alex Krizhevsky, "ImageNet classification with deep convolutional neural networks", Advances in Neural Information Processing Systems, 1, pp.1097~1105 (2012)
- Zhewen Niu, "Wind power forecasting using attention-based gated recurrent unit network", Energy, 196 (2020)
- T. K. Ho, "Random decision forest", Proceeding of 3rd International Conference on Document Analysis and Recognition, 1, pp.278~282 (1995)
- Hyunjae Kang, "Car hacking and defense competition on in-vehicle network", Workshop on Automotive and Autonomous Vehicle Security, pp.1~6 (2021)
- I.J. Goodfellow, "Explaining and Harnessing Adversarial Examples", arXiv preprint, ~ (2014)
- Nicholas Carlini, "Towards evaluating the robustness of neural networks", 2017 IEEE Symposium Security and Privacy, 1, pp.39~57 (2017)
- Zilong Lin, "IDSGAN: generative adversarial networks for attack generation against intrusion detection", arXiv preprint, ~ (2018)
- "K-CyberSecuri tyChal lenge2020, “K-cyber security challenge,”" (2021)[URL]
- Martin Arjovsky, "Wasserstein generative adversarial networks", Proceedings of the 34th International Conference on Machine Learning, 70, pp.214~223 (2017)