CAN-BERT do it? Controller Area Network Intrusion Detection System based on BERT Language Model
Due to the rising number of sophisticated customer functionalities, electronic control units (ECUs) are increasingly integrated into modern automotive systems. However, the high connectivity between the in-vehicle and the external networks paves the way for hackers who could exploit in-vehicle network protocols' vulnerabilities. Among these protocols, the Controller Area Network (CAN), known as the most widely used in-vehicle networking technology, lacks encryption and authentication mechanisms, making the communications delivered by distributed ECUs insecure. Inspired by the outstanding performance of bidirectional encoder representations from transformers (BERT) for improving many natural language processing tasks, we propose in this paper `CAN-BERT", a deep learning based network intrusion detection system, to detect cyber attacks on CAN bus protocol. We show that the BERT model can learn the sequence of arbitration identifiers (IDs) in the CAN bus for anomaly detection using the masked language model" unsupervised training objective. The experimental results on the Car Hacking: Attack \& Defense Challenge 2020" dataset show that `CAN-BERT" outperforms state-of-the-art approaches. In addition to being able to identify in-vehicle intrusions in real-time within 0.8 ms to 3 ms w.r.t CAN ID sequence length, it can also detect a wide variety of cyberattacks with an F1-score of between 0.81 and 0.99.
Code (0)
등록된 구현이 없습니다.
Tasks
Anomaly DetectionIntrusion DetectionLanguage ModelingLanguage ModellingNetwork Intrusion DetectionMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
CANShield: Deep Learning-Based Intrusion Detection Framework for Controller Area Networks at the Signal-Level
Modern vehicles rely on a fleet of electronic control units (ECUs) connected through controller area network (CAN) buses for critical vehicular control. With the expansion of advanced connectivity features in automobiles…
Intrusion DetectionTime SeriesTime Series AnalysisGraph-Based Intrusion Detection System for Controller Area Networks
The controller area network (CAN) is the most widely used intra-vehicular communication network in the automotive industry. Because of its simplicity in design, it lacks most of the requirements needed for a security-pro…
Intrusion DetectionSecureBERT and LLAMA 2 Empowered Control Area Network Intrusion Detection and Classification
Numerous studies have proved their effective strength in detecting Control Area Network (CAN) attacks. In the realm of understanding the human semantic space, transformer-based models have demonstrated remarkable effecti…
Intrusion DetectionLanguage ModelingLanguage ModellingLarge Language Model+1ECU Identification using Neural Network Classification and Hyperparameter Tuning
Intrusion detection for Controller Area Network (CAN) protocol requires modern methods in order to compete with other electrical architectures. Fingerprint Intrusion Detection Systems (IDS) provide a promising new approa…
ClassificationIntrusion DetectionAn Anomaly Detection System Based on Generative Classifiers for Controller Area Network
As electronic systems become increasingly complex and prevalent in modern vehicles, securing onboard networks is crucial, particularly as many of these systems are safety-critical. Researchers have demonstrated that mode…
Anomaly DetectionBayesian InferenceIntrusion Detection