automobile intrusion detection - conference.hitb.org - jun... · •cellular connection •cloud...
TRANSCRIPT
![Page 1: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/1.jpg)
Jun LiTwitter:@bravo_fighterUnicornTeam
Qihoo360
Automobile Intrusion Detection
![Page 2: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/2.jpg)
Outline
• Quick recap of the status quo of connected vehicle security research
• Little bit about automobile working principle
• CAN bus anomaly detection
![Page 3: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/3.jpg)
3From the highest viewpoint
![Page 4: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/4.jpg)
PerformanceTuning by modifying firmware
ImmobilizerCracking(Hitag,Keeloq)
DARPA&UW OBDinterface attack,etc.Karl et al.
Remote attack via wirelessOBD interface
TelsaQihoo360
BMW ConnectedDrive
vuln
Mbrace Jeep UconnectCharlie&Chris
GM OnstarVuln,Sammy
More tocome ?Sure!
Car hacking development
![Page 5: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/5.jpg)
Jeep Uconnect Vulnerability
WiFifemotocellSprintInternet CAN
Remote Attack Example
![Page 6: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/6.jpg)
Sensor security
![Page 7: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/7.jpg)
Outline
• Quick recap of the status quo of connected vehicle security research
• Little bit about automotive principles
• CAN bus anomaly detection
![Page 8: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/8.jpg)
Car explained
![Page 9: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/9.jpg)
TransmissionEngine
Steering
Gas Tank
Exhaust
Intake
Components of an Automobile
Brake System
![Page 10: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/10.jpg)
In automotive electronics, Electronic
Control Unit (ECU) is a generic term for
any secret system that controls one or
more of the electrical system or
subsystems in a transport vehicle
Types of ECU include Electronic/engine
Control Module (ECM), Powertrain Control
Module (PCM), Transmission Control
Module (TCM), Brake Control Module
(BCM or EBCM), Central Control Module
(CCM), Central Timing Module (CTM),
General Electronic Module (GEM), Body
Control Module (BCM), Suspension
Control Module (SCM), control unit, or
control module
ECU (Electronic Control Unit)
![Page 11: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/11.jpg)
Electronic Control Module Example11
![Page 12: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/12.jpg)
Automotive Mechatronics12
![Page 13: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/13.jpg)
Non-hackable hackable
13
Throttle position sensor
Drive-by-wire system
![Page 14: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/14.jpg)
14
Steering-by-wire system
Universal joint
Steer-by –wire (with mechanical fallback clutch)
![Page 15: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/15.jpg)
Automotive Control System Architecture
![Page 16: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/16.jpg)
Vehicle Communication System
OBDII
MOSTLINCANFlexRayBluetoothWifiSubGHz
InfotainmentSystem
Gateway
![Page 17: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/17.jpg)
Vehicle CAN BUS System
![Page 18: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/18.jpg)
ESP TCU ACC
ESP(electronic stability program)
TCU(transmission control unit)
ACC(adaptive cruise control)
… CAN-C
Gateway
Speedometer
CAN-B
InfotainmentSystem
Music Player
INS(Inertial navigation system)
INS
EMU
EMU(engine management system)
Seat Controller
Vehicle Communication System example
![Page 19: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/19.jpg)
CAN BUS Signaling
![Page 20: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/20.jpg)
CAN Frame Structure
![Page 21: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/21.jpg)
0 dominant1 recessive
1 1 1
1
01
1
1
1 0
0
0
1
1
1 0 0
0 0
0 0
CAN Bus Access Arbitration
![Page 22: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/22.jpg)
①Real time requirements②Hard to trace back to sender③High cost of false positive④…
Difficulties of CAN bus defense
![Page 23: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/23.jpg)
Packets injectionParameter spoofing
CAN BUS Attack
![Page 24: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/24.jpg)
Outline
• Quick recap of the status quo of connected vehicle security research
• Little bit about automobile working principle
• Related Research• CAN bus anomaly detection
![Page 25: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/25.jpg)
![Page 26: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/26.jpg)
![Page 27: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/27.jpg)
Distributed CAN bus defence architecture
![Page 28: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/28.jpg)
IDS IDS(Intrusion Detection System)
Distributed CAN bus defence architecture
![Page 29: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/29.jpg)
CAN bus defence
IDSWireless Gataway
![Page 30: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/30.jpg)
CAN security architecture
Bluetooth WiFi Cellular V2X
IDS
![Page 31: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/31.jpg)
Automotive intrusion detection researches
![Page 32: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/32.jpg)
Automotive intrusion detection researches
Not consideringTemporal feature
![Page 33: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/33.jpg)
Why don’t we build a model to describe the normal behavior of the car Take the relationship of RPM ,speed and gear as an example
My method(build a mathematical model)
? C*Gear*RPMSpeed
C is a constant
Is it that simple ?just a linear equation?
You have clutches Not linear
![Page 34: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/34.jpg)
System model requirements(We included temporal features)
Continuous VariableAcceleration/Deceleration Limit
![Page 35: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/35.jpg)
The parameters are related
![Page 36: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/36.jpg)
Anomaly detection system
Realtime datastream
CrossPrediction
Parameter extraction
Use all the parameters at time t-n to t-1,to predict the value at time t (We Choose this)
Calculate one parameter using the remaining parameters
MSE=Mean Square Error
![Page 37: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/37.jpg)
Build a Model Using Deep Learing
http://playground.tensorflow.org/
![Page 38: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/38.jpg)
Experiment Car
• Cellular Connection• Cloud Service• Bluetooth Key
• Hybrid • Electronic Brake• Electric Power
Steering• Electronic Throttle
![Page 39: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/39.jpg)
Remotely control the car
![Page 40: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/40.jpg)
Experiment car’s CAN network
Data Acquisition Here
![Page 41: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/41.jpg)
The CAN database
![Page 42: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/42.jpg)
Realtime can data stream
![Page 43: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/43.jpg)
Build the system model
Data Acquisition
Data preprocess
Data analysis
FeatureSelection
ModelTraining &Testing
![Page 44: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/44.jpg)
Data Acquisition Setup
![Page 45: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/45.jpg)
Data Analysis CAN database is kept highly confidential
![Page 46: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/46.jpg)
Data Preprocessing
![Page 47: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/47.jpg)
Data Preprocessing
Interpolation
Sampling
Normalization
![Page 48: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/48.jpg)
Normalization
Must make sure the maximum and minimum values are notcalculated from the training data
![Page 49: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/49.jpg)
Interpolation
Observation
Interpolation
![Page 50: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/50.jpg)
Sub-SamplingTime_
msRPM Speed MAP MAF AccPedal Throttle
138973 0.2879838 0.1342592 0.0590551 0.1675675 0.6971070 0.1377952
138974 0.2873125 0.1342592 0.0551181 0.1675675 0.6971070 0.1377952
138975 0.2873125 0.1342592 0.0511811 0.1675675 0.6971070 0.1377952
138976 0.285970 0.1342592 0.0472440 0.1675675 0.6971070 0.1377952
138977 0.285970 0.134259 0.0511811 0.1675675 0.6971070 0.1377952
![Page 51: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/51.jpg)
The Training Data
![Page 52: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/52.jpg)
Model training
I will publish the code,the CAN traffic datalater
![Page 53: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/53.jpg)
Results
![Page 54: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/54.jpg)
Result
![Page 55: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/55.jpg)
Model testing
![Page 56: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/56.jpg)
Model testing
![Page 57: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/57.jpg)
CAN Anomaly Detection McAfee&Intel
![Page 58: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/58.jpg)
Acknowledgements
Professor Shuicheng Yan @360 Institute of Artificial IntelligenceDoctor Ming Lin @360 Institute of Artificial IntelligenceDoctor Zhanyi Wang @360 Skyeye labDoctor Lin Huang @ 360 UnicornTeam
![Page 59: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/59.jpg)
References
![Page 60: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/60.jpg)
1. Karl Koscher, Alexei Czeskis, Experimental Security Analysis of a ModernAutomobile, 2010
2. Stephen Checkoway,Damon McCoy,Brian Kantor, Comprehensive ExperimentalAnalyses of Automotive Attack Surfaces,2011.
3. Charlie Miller,Chris Valasek,Adventures in Automotive Networks and ControlUnits,2013.
4. Charlie Miller,Chris Valasek,Remote Exploitation of an Unaltered PassengerVehicle,2015
5. Dieter Spaar,Sicherheitslücken bei BMWs ConnectedDrive/ Beemer, OpenThyself! – Security vulnerabilities in BMW's ConnectedDrive,2015.
6. Iamthecarvalry.org , Five Star Automotive Cyber Safety Framework,2015.7. Pierre Kleberger,Security Aspects of the In-Vehicle Network in the Connected
Car,IEEE Intelligent Vehicles Symposium,20118. Jeff Moser,The First Few Milliseconds of an HTTPS Connection,2009.9. 安天实验室,乌克兰电力系统遭受攻击事件综述分析报告,201610. Stamatis Karnouskos, Stuxnet Worm Impact on Industrial Cyber-Physical System
Security,201111. Marc Rogers,Kevin Mahaffey,How to Hack a Tesla Model S,DEF CON
23,2015
![Page 61: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/61.jpg)
1. Nobuyasu Kanekawa,X-by-Wire Systems,Hitachi Research Lab.20112. Paul Yih, Steer-by-Wire: Implication For Vehicle Handling and Safety,Stanford
PHD Dissertation,20053. Luigi Coppolion,Dependability aspects of automotive x-by-wire technologies,
2008.4. NPR,Sniffs out vulnerability in Bluetooth devices,20055. Jonas Zaddach,Andrei Costin,Embedded Devices Security and Firmware Reverse
Engineering,Blackhat Workshop,2013.6. Andrei costin, Jonas Zaddach,A large-Scale Analysis of the Security of
Embedded Firmwares,EURECOM,2014.7. Samy Kamkar,Drive It Like You hacked It,DEF CON23,20158. David A Brown, Geoffrey Cooper, Automotive Security Best Practices, White
Paper by Intel & McAfee,2014.9. OpenGarages, Car Hacker’s Handbook,openGarage.org,2014.10. Henning Olsson, OptimumG,Vehicle Data Acquisition Using CAN,201011. Varun Chandola,Arindam Banerjee,Vipin Kumar,Anomaly Detection :A
Survey,2009
![Page 62: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/62.jpg)
1. Park, Ming Kuang, Neural learning of driving environment prediction for vehiclepower management, Joint Conf. on Neural Networks, 2008.
2. Taylor, P., Adamu-Fika, F., Anand, S., Dunoyer, A., Griffiths, N., and Popham, T.Road type classification through data mining,2012.
3. Michael Muter, Naim Asaj,Entropy-based anomaly detection for in-vehiclenetworks", IEEE Intelligent Vehicles Symposium (IV), 2011.
4. Ulf E. Larson, Dennis K. Nilsson,An Approach to Specification-based AttackDetection for In-Vehicle Networks, IEEE Intelligent Vehicles Symposium,2008.
5. Y. L. Murphey, Zhi Hang Chen, L. Kiliaris, Jungme ,I. Tang and T. P. Breckon,Automatic road environment classication, IEEE Trans. on IntelligentTransportation Systems, 2011.
6. Salima Omar, Asri Ngadi, Hamid H.Jebur, Machine Learning Techniques forAnomaly Detection: An Overview.
7. Jiawei Han, Micheline Kamber, Data mining: concepts and techniques, 2011.8. Perter Harrington,Machine Learning In Action,2013.9. Jurgen Schmidhuber, Deep learning in neural networks: An overview, 2015.10. Kaiserslautern,Comparison of Unsupervised Anomaly Detection Techniques,
German Research Center for Artificial Intelligence, 2011
![Page 63: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/63.jpg)
1. Sepp Hochreiter, Jurgen Schmidhuber, Long short-term memory,Neuralcomputation, 1997.
2. Michael Husken, Peter Stagge,Recurrent neural networks for time seriesclassifcation, Neurocomputing, 2003.
3. Felix A Gers, Jurgen Schmidhuber, Fred Cummins, Learning to forget:Continualprediction with LSTM, Neural computation, 2000.
4. David E Rumelhart, Geo_rey E Hinton, and Ronald J Williams.,Learninginternal representations by error propagation,1985.
5. Christopher M Bishop,Pattern recognition and machine learning, springer, 2006.6. Simon Haykin and Neural Network. A comprehensive foundation. Neural
Networks, 2004.7. Eleazar Eskin,Andrew Arnold,Michael Prerau, A Geometric Framework for
Unsupervised Anomaly Detection-Detecting Intrusions in Unlabeled Datatection-Detecting Intrusions in Unlabeled Data,2002.
8. Kingsly Leung, Christopher Leckie, Unsupervised Anomaly Detection inNetwork Intrusion Detection Using Clusters, 2005
9. Ronan Collobert, Clement Farabet, Koray Kavukcuoglu, and Soumith ChintalaTorch,Scientic computing for lua,2015.
![Page 64: Automobile Intrusion Detection - conference.hitb.org - Jun... · •Cellular Connection •Cloud Service ... Simon Haykin and Neural Network. ... PowerPoint 演示文稿 Author: 李均](https://reader031.vdocuments.net/reader031/viewer/2022022002/5a8081357f8b9a0c748c6b2a/html5/thumbnails/64.jpg)
Thank You!
Q&A