Dakic Pavle, Zivkovic Miodrag, Jovanovic Luka, Bacanin Nebojsa, Antonijevic Milos, Kaljevic Jelena, Simic Vladimir
Faculty of Informatics and Computing, Singidunum University, Belgrade, 11000, Serbia.
Faculty of Informatics and Information Technologies, Institute of Informatics, Information Systems and Software Engineering, Slovak University of Technology in Bratislava, 84 216, Bratislava, Slovakia.
Sci Rep. 2024 Oct 2;14(1):22884. doi: 10.1038/s41598-024-73932-5.
The integration of IoT systems into automotive vehicles has raised concerns associated with intrusion detection within these systems. Vehicles equipped with a controller area network (CAN) control several systems within a vehicle where disruptions in function can lead to significant malfunctions, injuries, and even loss of life. Detecting disruption is a primary concern as vehicles move to higher degrees of autonomy and the possibility of self-driving is explored. Tackling cyber-security challenges within CAN is essential to improve vehicle and road safety. Standard differences between different manufacturers make the implementation of a discreet system difficult; therefore, data-driven techniques are needed to tackle the ever-evolving landscape of cyber security within the automotive field. This paper examines the possibility of using machine learning classifiers to identify cyber assaults in CAN systems. To achieve applicability, we cover two classifiers: extreme gradient boost and K-nearest neighbor algorithms. However, as their performance hinges on proper parameter selection, a modified metaheuristic optimizer is introduced as well to tackle parameter optimization. The proposed approach is tested on a publicly available dataset with the best-performing models exceeding 89% accuracy. Optimizer outcomes have undergone rigorous statistical analysis, and the best-performing models were subjected to analysis using explainable artificial intelligence techniques to determine feature impacts on the best-performing model.
将物联网系统集成到汽车中引发了与这些系统内入侵检测相关的担忧。配备控制器局域网(CAN)的车辆控制着车辆内的多个系统,功能中断可能导致严重故障、人员受伤甚至生命损失。随着车辆向更高程度的自主性发展并探索自动驾驶的可能性,检测功能中断成为首要关注点。应对CAN内的网络安全挑战对于提高车辆和道路安全至关重要。不同制造商之间的标准差异使得实施一个谨慎的系统变得困难;因此,需要数据驱动技术来应对汽车领域不断演变的网络安全形势。本文研究了使用机器学习分类器识别CAN系统中网络攻击的可能性。为实现适用性,我们涵盖了两种分类器:极端梯度提升和K近邻算法。然而,由于它们的性能取决于正确的参数选择,还引入了一种改进的元启发式优化器来处理参数优化问题。所提出的方法在一个公开可用的数据集上进行了测试,性能最佳的模型准确率超过89%。优化器结果经过了严格的统计分析,性能最佳的模型使用可解释人工智能技术进行了分析,以确定特征对性能最佳模型的影响。