首页 > 最新文献

Vehicular Communications最新文献

英文 中文
Anonymous lattice-based authentication protocol for vehicular communications 基于网格的匿名车载通信认证协议
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-29 DOI: 10.1016/j.vehcom.2024.100803
Ali Shahidinejad, Jemal Abawajy, Shamsul Huda

Quantum-proof authentication is essential for vehicular communications as the threat of quantum computing attacks on traditional encryption methods grows. Several lattice-based authentication protocols have recently been developed to help with this issue, but they come with hefty storage and communication overheads. Most of them also fail to provide strong anonymity for vehicles and edge nodes and can not support authentication for vehicles from multiple domains. This study presents a new lattice-based authentication protocol for vehicular communications that addresses limitations of previous methods and offers advanced security features such as anonymity, and unlinkability. The protocol utilizes a distributed ledger to store public keys, making the system more secure, tamper-proof, and efficient for key revocation in large networks. Additionally, it allows for a multi-domain authentication system for vehicular communication with improved security and flexibility. The proposed protocol's security is evaluated both formally and informally to demonstrate its resistance against the well-known attacks. Additionally, the performance analysis indicates that the proposed protocol surpasses current protocols and is suitable for vehicular communications.

随着量子计算攻击对传统加密方法的威胁日益增大,防量子认证对车载通信至关重要。最近开发出了几种基于网格的认证协议来帮助解决这个问题,但这些协议的存储和通信开销很大。它们中的大多数还无法为车辆和边缘节点提供强大的匿名性,也无法支持对来自多个域的车辆进行身份验证。本研究提出了一种新的基于网格的车辆通信认证协议,它解决了以往方法的局限性,并提供了先进的安全功能,如匿名性和不可链接性。该协议利用分布式分类账来存储公钥,使系统更加安全、防篡改,并能在大型网络中有效地撤销密钥。此外,它还能为车辆通信提供多域认证系统,提高安全性和灵活性。我们对所提出协议的安全性进行了正式和非正式评估,以证明它能抵御众所周知的攻击。此外,性能分析表明,提议的协议超越了当前的协议,适用于车辆通信。
{"title":"Anonymous lattice-based authentication protocol for vehicular communications","authors":"Ali Shahidinejad,&nbsp;Jemal Abawajy,&nbsp;Shamsul Huda","doi":"10.1016/j.vehcom.2024.100803","DOIUrl":"https://doi.org/10.1016/j.vehcom.2024.100803","url":null,"abstract":"<div><p>Quantum-proof authentication is essential for vehicular communications as the threat of quantum computing attacks on traditional encryption methods grows. Several lattice-based authentication protocols have recently been developed to help with this issue, but they come with hefty storage and communication overheads. Most of them also fail to provide strong anonymity for vehicles and edge nodes and can not support authentication for vehicles from multiple domains. This study presents a new lattice-based authentication protocol for vehicular communications that addresses limitations of previous methods and offers advanced security features such as anonymity, and unlinkability. The protocol utilizes a distributed ledger to store public keys, making the system more secure, tamper-proof, and efficient for key revocation in large networks. Additionally, it allows for a multi-domain authentication system for vehicular communication with improved security and flexibility. The proposed protocol's security is evaluated both formally and informally to demonstrate its resistance against the well-known attacks. Additionally, the performance analysis indicates that the proposed protocol surpasses current protocols and is suitable for vehicular communications.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"48 ","pages":"Article 100803"},"PeriodicalIF":6.7,"publicationDate":"2024-05-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141251056","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Subchannel assignment for social-assisted UAV cellular networks using dynamic hypergraph coloring 利用动态超图着色为社交辅助无人机蜂窝网络分配子信道
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-29 DOI: 10.1016/j.vehcom.2024.100808
Kanhu Charan Gouda, Sangya Shrivastava, Rahul Thakur

Device-to-Device (D2D) communication when used in conjugation with Unmanned Aerial Vehicle (UAV) Femtocell and unlicensed spectrum can effectively tackle the ever-increasing mobile data demands. However, D2D communication raises security and privacy concerns among users due to the absence of a centralized entity such as a base station. Therefore, exploring social connections among users becomes imperative to enable secure and trustworthy D2D communication. This paper seeks to improve the performance of a social-assisted UAV cellular network augmented by D2D communication by proposing a novel subchannel assignment technique employing hypergraph coloring. Considering the real-world scenario, we incorporate the user/UAV mobility by using dynamic hypergraph coloring for subchannel assignment instead of the static one. Our proposed technique shifts a set of cellular users from the licensed to the unlicensed band based on their social connection with other co-channel D2D users. Additionally, we assign subchannels to different users to optimize the throughput while minimizing overall interference. Our proposed technique demonstrates significant improvements in system throughput, energy efficiency, and interference efficiency compared to conventional techniques. For our proposed technique, we observed improvements of 69%, 42%, and 15% in the per user system throughput when compared with the conventional techniques (graph, hypergraph, and dynamic-hypergraph, respectively). Moreover, our technique achieves higher per user energy efficiency by 120%, 70%, and 25%, and higher per user interference efficiency by 92%, 43%, and 22%, respectively, compared to graph, hypergraph, and dynamic-hypergraph techniques.

设备到设备(D2D)通信与无人飞行器(UAV)Femtocell 和非授权频谱结合使用,可有效解决日益增长的移动数据需求。然而,由于没有基站等集中实体,D2D 通信会引发用户对安全和隐私的担忧。因此,探索用户之间的社会联系对于实现安全、可信的 D2D 通信势在必行。本文试图通过提出一种采用超图着色的新型子信道分配技术,提高由 D2D 通信增强的社交辅助无人机蜂窝网络的性能。考虑到现实世界中的场景,我们通过使用动态超图着色进行子信道分配而不是静态子信道分配,将用户/无人机的移动性纳入其中。我们提出的技术根据一组蜂窝用户与其他同信道 D2D 用户的社交关系,将其从许可频段转移到非许可频段。此外,我们还为不同用户分配子信道,以优化吞吐量,同时最大限度地减少整体干扰。与传统技术相比,我们提出的技术在系统吞吐量、能效和干扰效率方面都有显著提高。与传统技术(图、超图和动态超图)相比,我们所提出的技术在每用户系统吞吐量方面分别提高了 69%、42% 和 15%。此外,与图技术、超图技术和动态超图技术相比,我们的技术使每个用户的能效分别提高了 120%、70% 和 25%,使每个用户的干扰效率分别提高了 92%、43% 和 22%。
{"title":"Subchannel assignment for social-assisted UAV cellular networks using dynamic hypergraph coloring","authors":"Kanhu Charan Gouda,&nbsp;Sangya Shrivastava,&nbsp;Rahul Thakur","doi":"10.1016/j.vehcom.2024.100808","DOIUrl":"https://doi.org/10.1016/j.vehcom.2024.100808","url":null,"abstract":"<div><p>Device-to-Device (D2D) communication when used in conjugation with Unmanned Aerial Vehicle (UAV) Femtocell and unlicensed spectrum can effectively tackle the ever-increasing mobile data demands. However, D2D communication raises security and privacy concerns among users due to the absence of a centralized entity such as a base station. Therefore, exploring social connections among users becomes imperative to enable secure and trustworthy D2D communication. This paper seeks to improve the performance of a social-assisted UAV cellular network augmented by D2D communication by proposing a novel subchannel assignment technique employing hypergraph coloring. Considering the real-world scenario, we incorporate the user/UAV mobility by using dynamic hypergraph coloring for subchannel assignment instead of the static one. Our proposed technique shifts a set of cellular users from the licensed to the unlicensed band based on their social connection with other co-channel D2D users. Additionally, we assign subchannels to different users to optimize the throughput while minimizing overall interference. Our proposed technique demonstrates significant improvements in system throughput, energy efficiency, and interference efficiency compared to conventional techniques. For our proposed technique, we observed improvements of 69%, 42%, and 15% in the per user system throughput when compared with the conventional techniques (graph, hypergraph, and dynamic-hypergraph, respectively). Moreover, our technique achieves higher per user energy efficiency by 120%, 70%, and 25%, and higher per user interference efficiency by 92%, 43%, and 22%, respectively, compared to graph, hypergraph, and dynamic-hypergraph techniques.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"49 ","pages":"Article 100808"},"PeriodicalIF":6.7,"publicationDate":"2024-05-29","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141286019","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Hybrid cryptography-based scheme with conditional privacy-preserving authentication and memory-based DOS resilience in V2X V2X 中基于密码学的混合方案,具有条件隐私保护认证和基于内存的 DOS 复原能力
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-27 DOI: 10.1016/j.vehcom.2024.100810
Abdelkrim Imghoure, Fouzia Omary, Ahmed El-Yahyaoui

To secure Vehicle-to-everything (V2X) communications, many Conditional Privacy-Preserving Authentication schemes (CPPA) use symmetric and asymmetric encryption during the authentication process. However, several existing schemes have some security limitations regarding VANET requirements. In many symmetric cryptography-based schemes, the participants are required to share the same keys which could compromise the security of the network in case the key of one participant is compromised, while many asymmetric cryptography-based schemes take much time during the authentication process, and don't address the denial-of-service attack. In this paper, we propose a certificateless scheme that does not require a certificate and prevents the escrow problem. Plus, it uses the elliptic curve cryptography and avoids bilinear pairing and Map-to-Hash functions. We call our scheme Hybrid Cryptography-Based Scheme with a Conditional Privacy-Preserving Authentication (HCBS-CPPA), as it uses both symmetric and asymmetric cryptography during the authentication process. Our scheme combines the strength of an asymmetric encryption that satisfies non-repudiation, and the strength of a symmetric encryption that allows to perform a lightweight authentication. In addition, we show that our scheme is resilient to memory-based Denial of Service (DOS) attack which occurs when an attacker floods the memory of a receiver with invalid messages. A security proof shows that HCBS-CPPA is secure in the random oracle. Regarding the simulation of our scheme, it turns out that HCBS-CPPA has the best performance when compared with several existing certificateless schemes. Additionally, it requires less execution time during the signing and verification process, as well as less communication overhead when compared to the existing schemes.

为了保证车对物(V2X)通信的安全,许多有条件隐私保护认证方案(CPPA)在认证过程中使用对称和非对称加密。然而,现有的一些方案在满足 VANET 要求方面存在一些安全限制。在许多基于对称加密技术的方案中,参与者必须共享相同的密钥,一旦其中一个参与者的密钥泄露,网络的安全性就会受到影响;而许多基于非对称加密技术的方案在认证过程中需要耗费大量时间,而且无法解决拒绝服务攻击问题。在本文中,我们提出了一种无证书方案,它不需要证书,并能防止托管问题。此外,它还使用了椭圆曲线加密技术,避免了双线性配对和 Map-to-Hash 函数。由于我们的方案在认证过程中同时使用了对称和非对称加密技术,因此我们称其为基于条件隐私保护认证的混合加密方案(HCBS-CPPA)。我们的方案结合了非对称加密和对称加密的优势,前者可满足不可抵赖性,后者则允许执行轻量级身份验证。此外,我们还证明了我们的方案能够抵御基于内存的拒绝服务(DOS)攻击,当攻击者用无效信息淹没接收者的内存时,这种攻击就会发生。安全证明表明,HCBS-CPPA 在随机甲骨文中是安全的。在对我们的方案进行仿真后发现,与现有的几种无证书方案相比,HCBS-CPPA 的性能最好。此外,与现有方案相比,HCBS-CPPA 在签名和验证过程中所需的执行时间更短,通信开销更少。
{"title":"Hybrid cryptography-based scheme with conditional privacy-preserving authentication and memory-based DOS resilience in V2X","authors":"Abdelkrim Imghoure,&nbsp;Fouzia Omary,&nbsp;Ahmed El-Yahyaoui","doi":"10.1016/j.vehcom.2024.100810","DOIUrl":"https://doi.org/10.1016/j.vehcom.2024.100810","url":null,"abstract":"<div><p>To secure Vehicle-to-everything (V2X) communications, many Conditional Privacy-Preserving Authentication schemes (CPPA) use symmetric and asymmetric encryption during the authentication process. However, several existing schemes have some security limitations regarding VANET requirements. In many symmetric cryptography-based schemes, the participants are required to share the same keys which could compromise the security of the network in case the key of one participant is compromised, while many asymmetric cryptography-based schemes take much time during the authentication process, and don't address the denial-of-service attack. In this paper, we propose a certificateless scheme that does not require a certificate and prevents the escrow problem. Plus, it uses the elliptic curve cryptography and avoids bilinear pairing and Map-to-Hash functions. We call our scheme Hybrid Cryptography-Based Scheme with a Conditional Privacy-Preserving Authentication (HCBS-CPPA), as it uses both symmetric and asymmetric cryptography during the authentication process. Our scheme combines the strength of an asymmetric encryption that satisfies non-repudiation, and the strength of a symmetric encryption that allows to perform a lightweight authentication. In addition, we show that our scheme is resilient to memory-based Denial of Service (DOS) attack which occurs when an attacker floods the memory of a receiver with invalid messages. A security proof shows that HCBS-CPPA is secure in the random oracle. Regarding the simulation of our scheme, it turns out that HCBS-CPPA has the best performance when compared with several existing certificateless schemes. Additionally, it requires less execution time during the signing and verification process, as well as less communication overhead when compared to the existing schemes.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"49 ","pages":"Article 100810"},"PeriodicalIF":6.7,"publicationDate":"2024-05-27","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141294128","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
SFL-TUM: Energy efficient SFRL method for large scale AI model's task offloading in UAV-assisted MEC networks SFL-TUM:用于无人机辅助 MEC 网络中大规模人工智能模型任务卸载的高能效 SFRL 方法
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-10 DOI: 10.1016/j.vehcom.2024.100790
Prakhar Consul , Ishan Budhiraja , Deepak Garg , Sahil Garg , Georges Kaddoum , Mohammad Mehedi Hassan

The convergence of mobile edge computing (MEC) network with unmanned aerial vehicles (UAVs) presents an auspicious opportunity to revolutionize wireless communication and facilitate high-speed internet access in remote regions for mobile devices (MDs) as well as large scale artificial intelligence (AI) models. However, the substantial amount of data produced by the UAVs-assisted MEC network necessitates the integration of efficient distributed learning techniques in AI models. In recent times, distributed learning algorithms, including federated reinforcement learning (FRL) and split learning (SL), have been explored for the purpose of learning machine learning (ML) models that are distributed by sharing model parameters, as opposed to large raw data-sets as seen in traditional centralized learning algorithms. To implement the hybrid method, the model is first trained locally on each UAV-assisted MEC network using SL. Subsequently, the model parameters that have been encrypted are sent to a central server for federated averaging. Finally, after the model has been updated, it is distributed to each UAV-assisted MEC network for local fine-tuning. Our simulations indicate that the proposed split and federated reinforcement learning (SFRL) framework yields comparable high-test accuracy performance while consuming less energy compared to extant distributed learning algorithms. Furthermore, the SFRL algorithm efficiently realizes energy-efficient selection between the SL and FRL methods under different distributions. Numerical results shows that the proposed scheme improves the accuracy by 29.31% and reduced the energy consumption by around 67.34% and time delay by about 7.37%. as compared to the existing baseline schemes.

移动边缘计算(MEC)网络与无人飞行器(UAV)的融合为无线通信带来了革命性的机遇,促进了偏远地区移动设备(MD)和大型人工智能(AI)模型的高速互联网接入。然而,无人机辅助 MEC 网络产生的大量数据要求在人工智能模型中集成高效的分布式学习技术。近来,人们探索了分布式学习算法,包括联合强化学习(FRL)和分裂学习(SL),用于学习机器学习(ML)模型,这些模型通过共享模型参数进行分布式学习,而非传统集中式学习算法中的大型原始数据集。为了实现混合方法,首先使用 SL 在每个无人机辅助 MEC 网络上对模型进行本地训练。随后,经过加密的模型参数被发送到中央服务器进行联合平均。最后,在模型更新后,将其分发到每个无人机辅助 MEC 网络,进行本地微调。我们的模拟结果表明,与现有的分布式学习算法相比,我们提出的分离式联合强化学习(SFRL)框架在消耗更少能量的同时,还能获得相当高的测试精度。此外,SFRL 算法还能在不同分布条件下有效实现 SL 和 FRL 方法之间的节能选择。数值结果表明,与现有的基线方案相比,所提出的方案提高了 29.31% 的准确率,减少了约 67.34% 的能耗和约 7.37% 的时间延迟。
{"title":"SFL-TUM: Energy efficient SFRL method for large scale AI model's task offloading in UAV-assisted MEC networks","authors":"Prakhar Consul ,&nbsp;Ishan Budhiraja ,&nbsp;Deepak Garg ,&nbsp;Sahil Garg ,&nbsp;Georges Kaddoum ,&nbsp;Mohammad Mehedi Hassan","doi":"10.1016/j.vehcom.2024.100790","DOIUrl":"10.1016/j.vehcom.2024.100790","url":null,"abstract":"<div><p>The convergence of mobile edge computing (MEC) network with unmanned aerial vehicles (UAVs) presents an auspicious opportunity to revolutionize wireless communication and facilitate high-speed internet access in remote regions for mobile devices (MDs) as well as large scale artificial intelligence (AI) models. However, the substantial amount of data produced by the UAVs-assisted MEC network necessitates the integration of efficient distributed learning techniques in AI models. In recent times, distributed learning algorithms, including federated reinforcement learning (FRL) and split learning (SL), have been explored for the purpose of learning machine learning (ML) models that are distributed by sharing model parameters, as opposed to large raw data-sets as seen in traditional centralized learning algorithms. To implement the hybrid method, the model is first trained locally on each UAV-assisted MEC network using SL. Subsequently, the model parameters that have been encrypted are sent to a central server for federated averaging. Finally, after the model has been updated, it is distributed to each UAV-assisted MEC network for local fine-tuning. Our simulations indicate that the proposed split and federated reinforcement learning (SFRL) framework yields comparable high-test accuracy performance while consuming less energy compared to extant distributed learning algorithms. Furthermore, the SFRL algorithm efficiently realizes energy-efficient selection between the SL and FRL methods under different distributions. Numerical results shows that the proposed scheme improves the accuracy by 29.31% and reduced the energy consumption by around 67.34% and time delay by about 7.37%. as compared to the existing baseline schemes.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"48 ","pages":"Article 100790"},"PeriodicalIF":6.7,"publicationDate":"2024-05-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141038950","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
VAIDANSHH: Adaptive DDoS detection for heterogeneous hosts in vehicular environments VAIDANSHH:车载环境中异构主机的自适应 DDoS 检测
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-10 DOI: 10.1016/j.vehcom.2024.100787
Amandeep Verma , Rahul Saha , Gulshan Kumar , Mauro Conti , Joel J.P.C. Rodrigues

Vehicular networks are vulnerable to Distributed Denial of Service (DDoS), an extension of a Denial of Service (DoS) attack. The existing solutions for DDoS detection in vehicular networks use various Machine Learning (ML) algorithms. However, these algorithms are applicable only in a single layer in a vehicular network environment and are incapable of detecting DDoS dynamics for different layers of the network infrastructure. The recently reported attacks on transport networks reveal the fact that a research gap exists between the existing solutions and the multi-layer DDoS detection strategy requirements. Additionally, the majority of the current detection methods fail in the consideration of traffic heterogeneity and are not rate-adaptive, where both the mentioned parameters are important for an effective detection system.

In this paper, we introduce a comprehensive ML-based Network Intrusion Detection System (NIDS) against DDoS attacks in vehicular networks. Our proposed NIDS combines a three-tier security model, traffic adaptivity, and heterogeneity traffic provisions. We call our model Vehicular Adaptive Intrusion Detection And Novel System for Heterogeneous Hosts (VAIDANSHH). As mentioned earlier, VAIDANSHH has a three-tier security system: at RSU's hardware, communication channel, and RSU application level. VAIDANSHH combines the Adaptive Alarming Module (AAM) and the Detection Module (DM) for data generation, collection of generated data, flow monitoring, pre-processing, and classification. We use the NS3 simulation tool for our experiments to generate synthetic data and apply ML with WEKA. We run a thorough set of experiments, which show that VAIDANSHH detects UDP flooding, a form of DDoS attack, with 99.9% accuracy within a very short time. We compare VAIDANSHH with other state-of-the-art models; the comparative analysis shows that VAIDANSHH is superior in terms of accuracy and its multi-tier workflow.

车载网络很容易受到分布式拒绝服务(DDoS)攻击,这是拒绝服务(DoS)攻击的延伸。现有的车载网络 DDoS 检测解决方案使用各种机器学习 (ML) 算法。然而,这些算法仅适用于车载网络环境中的单层,无法检测网络基础设施不同层的 DDoS 动态。最近报道的对传输网络的攻击表明,现有解决方案与多层 DDoS 检测策略要求之间存在研究差距。此外,目前的大多数检测方法都没有考虑流量异构性,也不具备速率自适应能力,而上述两个参数对于有效的检测系统都非常重要。我们提出的 NIDS 结合了三层安全模型、流量适应性和异构流量规定。我们将这一模型称为 "面向异构主机的车载自适应入侵检测和新型系统(VAIDANSHH)"。如前所述,VAIDANSHH 具有三层安全系统:RSU 硬件层、通信信道层和 RSU 应用层。VAIDANSHH 结合了自适应报警模块(AAM)和检测模块(DM),用于数据生成、生成数据的收集、流量监控、预处理和分类。我们在实验中使用 NS3 仿真工具生成合成数据,并使用 WEKA 应用 ML。我们进行了一系列全面的实验,结果表明 VAIDANSHH 能在很短的时间内以 99.9% 的准确率检测到 UDP 泛洪(一种 DDoS 攻击形式)。我们将 VAIDANSHH 与其他最先进的模型进行了比较;比较分析表明,VAIDANSHH 在准确性和多层工作流程方面更胜一筹。
{"title":"VAIDANSHH: Adaptive DDoS detection for heterogeneous hosts in vehicular environments","authors":"Amandeep Verma ,&nbsp;Rahul Saha ,&nbsp;Gulshan Kumar ,&nbsp;Mauro Conti ,&nbsp;Joel J.P.C. Rodrigues","doi":"10.1016/j.vehcom.2024.100787","DOIUrl":"10.1016/j.vehcom.2024.100787","url":null,"abstract":"<div><p>Vehicular networks are vulnerable to Distributed Denial of Service (DDoS), an extension of a Denial of Service (DoS) attack. The existing solutions for DDoS detection in vehicular networks use various Machine Learning (ML) algorithms. However, these algorithms are applicable only in a single layer in a vehicular network environment and are incapable of detecting DDoS dynamics for different layers of the network infrastructure. The recently reported attacks on transport networks reveal the fact that a research gap exists between the existing solutions and the multi-layer DDoS detection strategy requirements. Additionally, the majority of the current detection methods fail in the consideration of traffic heterogeneity and are not rate-adaptive, where both the mentioned parameters are important for an effective detection system.</p><p>In this paper, we introduce a comprehensive ML-based Network Intrusion Detection System (NIDS) against DDoS attacks in vehicular networks. Our proposed NIDS combines a three-tier security model, traffic adaptivity, and heterogeneity traffic provisions. We call our model <em>Vehicular Adaptive Intrusion Detection And Novel System for Heterogeneous Hosts (VAIDANSHH)</em>. As mentioned earlier, VAIDANSHH has a three-tier security system: at RSU's hardware, communication channel, and RSU application level. VAIDANSHH combines the Adaptive Alarming Module (AAM) and the Detection Module (DM) for data generation, collection of generated data, flow monitoring, pre-processing, and classification. We use the NS3 simulation tool for our experiments to generate synthetic data and apply ML with WEKA. We run a thorough set of experiments, which show that VAIDANSHH detects UDP flooding, a form of DDoS attack, with 99.9% accuracy within a very short time. We compare VAIDANSHH with other state-of-the-art models; the comparative analysis shows that VAIDANSHH is superior in terms of accuracy and its multi-tier workflow.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"48 ","pages":"Article 100787"},"PeriodicalIF":6.7,"publicationDate":"2024-05-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141036218","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Measurement-based V2V propagation modeling in highway, suburban, and urban environments 高速公路、郊区和城市环境中基于测量的 V2V 传播建模
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-10 DOI: 10.1016/j.vehcom.2024.100791
Zeynep Hasırcı Tuğcu , Kenan Kuzulugil , İsmail Hakkı Çavdar

Vehicle-to-vehicle (V2V) communication is one of the promising communication applications designed to optimize traffic conditions and has played a crucial role in the improvement of intelligent transportation technologies. Since there is still some uncertainty regarding generalized models that provide a more accurate representation of propagation environments, the existing literature emphasizes the need for additional experimental studies in various countries and propagation environments. This study aims to investigate the low-density and high-density characteristics of V2V channels for highway, suburban, and urban propagation environments in Türkiye. Thus, first, channel measurements were conducted for all propagation scenarios. Then, after the estimation of path loss parameters, the best-fitted path loss model was determined for each propagation scenario by comparing log-distance, two-ray, and log-ray models. It was observed that the log-ray model offered remarkably better performance than the two-ray model, especially in the majority of scenarios with two-ray characteristics. In addition, small-scale modeling and shadowing were also examined, and the outcomes were compared to relevant literature. Last, generalized path loss models were developed for six propagation scenarios and compared with previous studies. Providing additional experimental data on the impact of traffic and road environments that vary across countries on the V2V channel, this study not only validated and compared existing propagation models but also improved the representing accuracy and generalizability of the newly proposed propagation models. Here, all findings were presented in detail to support the motivation of the research.

车对车(V2V)通信是旨在优化交通状况的前景广阔的通信应用之一,在改进智能交通技术方面发挥着至关重要的作用。由于能更准确地反映传播环境的通用模型仍存在一些不确定性,现有文献强调需要在不同国家和传播环境中开展更多实验研究。本研究旨在调查图尔基耶高速公路、郊区和城市传播环境中 V2V 信道的低密度和高密度特性。因此,首先对所有传播场景进行了信道测量。然后,在估算路径损耗参数后,通过比较对数距离模型、双射线模型和对数射线模型,为每种传播场景确定最佳拟合路径损耗模型。结果表明,对数射线模型的性能明显优于双射线模型,尤其是在大多数具有双射线特性的情况下。此外,还研究了小尺度建模和阴影问题,并将结果与相关文献进行了比较。最后,针对六种传播情况建立了广义路径损耗模型,并与之前的研究进行了比较。这项研究提供了关于不同国家的交通和道路环境对 V2V 信道影响的额外实验数据,不仅验证和比较了现有的传播模型,还提高了新提出的传播模型的表示精度和通用性。在此,我们详细介绍了所有研究结果,以支持研究的动机。
{"title":"Measurement-based V2V propagation modeling in highway, suburban, and urban environments","authors":"Zeynep Hasırcı Tuğcu ,&nbsp;Kenan Kuzulugil ,&nbsp;İsmail Hakkı Çavdar","doi":"10.1016/j.vehcom.2024.100791","DOIUrl":"10.1016/j.vehcom.2024.100791","url":null,"abstract":"<div><p>Vehicle-to-vehicle (V2V) communication is one of the promising communication applications designed to optimize traffic conditions and has played a crucial role in the improvement of intelligent transportation technologies. Since there is still some uncertainty regarding generalized models that provide a more accurate representation of propagation environments, the existing literature emphasizes the need for additional experimental studies in various countries and propagation environments. This study aims to investigate the low-density and high-density characteristics of V2V channels for highway, suburban, and urban propagation environments in Türkiye. Thus, first, channel measurements were conducted for all propagation scenarios. Then, after the estimation of path loss parameters, the best-fitted path loss model was determined for each propagation scenario by comparing log-distance, two-ray, and log-ray models. It was observed that the log-ray model offered remarkably better performance than the two-ray model, especially in the majority of scenarios with two-ray characteristics. In addition, small-scale modeling and shadowing were also examined, and the outcomes were compared to relevant literature. Last, generalized path loss models were developed for six propagation scenarios and compared with previous studies. Providing additional experimental data on the impact of traffic and road environments that vary across countries on the V2V channel, this study not only validated and compared existing propagation models but also improved the representing accuracy and generalizability of the newly proposed propagation models. Here, all findings were presented in detail to support the motivation of the research.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"48 ","pages":"Article 100791"},"PeriodicalIF":6.7,"publicationDate":"2024-05-10","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141047583","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
A security-enhanced authentication scheme for quantum-key-distribution (QKD) enabled Internet of vehicles in multi-cloud environment 多云环境下支持量子密钥分发(QKD)的车联网安全增强认证方案
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-08 DOI: 10.1016/j.vehcom.2024.100789
Ze Yang , Qin Shi , Teng Cheng , Xunji Wang , Rutong Zhang , Lin Yu

The Internet of vehicles (IoV) is an essential part of modern intelligent transportation systems (ITS). In the ITS, intelligent connected vehicle can access a variety of latency-sensitive cloud services through the vulnerable wireless communication channel, which could lead to security and privacy issues. To prevent access by malicious nodes, a large number of authentication schemes have been proposed. However, with the diversification of cloud services and the rapid development of quantum computing, there are many drawbacks remain, including timeliness of authentication and resisting quantum computing. In light of this, we propose a lattice-based secure and efficient multi-cloud authentication and key agreement scheme for quantum key distribution (QKD) enabled IoV. Its features are as follows: i) Security-enhanced and Efficient Authentication: We combine the lattice-based lightweight signatures and quantum authentication keys to guarantee security-enhanced authentication. Meanwhile, we propose the quantum security service cloud (QSC) to manage the authentication of all vehicles and cloud server providers (CSPs) to reduce the authentication rounds and improve efficiency. ii) Extended Quantum Key Distribution (eQKD): In wireless networks, quantum key agreement is achieved through the pre-filled quantum keys. In wired networks, quantum key is accomplished by QKD with Bennett-Brassard 1984 (BB84) protocol. Furthermore, formal and informal security demonstrates that the scheme could resist potential security attacks. The performance comparison illustrates that our scheme could decrease the computational overhead by 27.23%-81.78% and authentication rounds by 81.34%-93.10%.

车联网(IoV)是现代智能交通系统(ITS)的重要组成部分。在智能交通系统中,智能互联车辆可以通过脆弱的无线通信信道访问各种对延迟敏感的云服务,这可能会导致安全和隐私问题。为了防止恶意节点访问,人们提出了大量的认证方案。然而,随着云服务的多样化和量子计算的快速发展,认证的及时性和抵御量子计算等诸多弊端依然存在。有鉴于此,我们为支持量子密钥分发(QKD)的物联网提出了一种基于网格的安全高效的多云身份验证和密钥协议方案。其特点如下: i) 安全高效的认证:我们将基于网格的轻量级签名和量子认证密钥结合起来,保证了认证的安全性。同时,我们提出了量子安全服务云(QSC)来管理所有车辆和云服务器提供商(CSP)的认证,以减少认证轮次,提高效率:在无线网络中,量子密钥协议是通过预先填充的量子密钥实现的。在有线网络中,量子密钥是通过 Bennett-Brassard 1984(BB84)协议的 QKD 实现的。此外,正式和非正式的安全性表明,该方案可以抵御潜在的安全攻击。性能比较表明,我们的方案可以减少 27.23% 到 81.78% 的计算开销和 81.34% 到 93.10% 的认证轮数。
{"title":"A security-enhanced authentication scheme for quantum-key-distribution (QKD) enabled Internet of vehicles in multi-cloud environment","authors":"Ze Yang ,&nbsp;Qin Shi ,&nbsp;Teng Cheng ,&nbsp;Xunji Wang ,&nbsp;Rutong Zhang ,&nbsp;Lin Yu","doi":"10.1016/j.vehcom.2024.100789","DOIUrl":"https://doi.org/10.1016/j.vehcom.2024.100789","url":null,"abstract":"<div><p>The Internet of vehicles (IoV) is an essential part of modern intelligent transportation systems (ITS). In the ITS, intelligent connected vehicle can access a variety of latency-sensitive cloud services through the vulnerable wireless communication channel, which could lead to security and privacy issues. To prevent access by malicious nodes, a large number of authentication schemes have been proposed. However, with the diversification of cloud services and the rapid development of quantum computing, there are many drawbacks remain, including timeliness of authentication and resisting quantum computing. In light of this, we propose a lattice-based secure and efficient multi-cloud authentication and key agreement scheme for quantum key distribution (QKD) enabled IoV. Its features are as follows: i) <em>Security-enhanced and Efficient Authentication</em>: We combine the lattice-based lightweight signatures and quantum authentication keys to guarantee security-enhanced authentication. Meanwhile, we propose the quantum security service cloud (QSC) to manage the authentication of all vehicles and cloud server providers (CSPs) to reduce the authentication rounds and improve efficiency. ii) <em>Extended Quantum Key Distribution (eQKD)</em>: In wireless networks, quantum key agreement is achieved through the pre-filled quantum keys. In wired networks, quantum key is accomplished by QKD with Bennett-Brassard 1984 (BB84) protocol. Furthermore, formal and informal security demonstrates that the scheme could resist potential security attacks. The performance comparison illustrates that our scheme could decrease the computational overhead by 27.23%-81.78% and authentication rounds by 81.34%-93.10%.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"48 ","pages":"Article 100789"},"PeriodicalIF":6.7,"publicationDate":"2024-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140948281","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Reinforcement learning vs rule-based dynamic movement strategies in UAV assisted networks 无人机辅助网络中的强化学习与基于规则的动态运动策略对比
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-08 DOI: 10.1016/j.vehcom.2024.100788
Adel Mounir Said , Michel Marot , Chérifa Boucetta , Hossam Afifi , Hassine Moungla , Gatien Roujanski

Since resource allocation of cellular networks is not dynamic, some cells may experience unplanned high traffic demands due to unexpected events. Unmanned aerial vehicles (UAV) can be used to provide the additional bandwidth required for data offloading.

Considering real-time and non-real-time traffic classes, our work is dedicated to optimize the placement of UAVs in cellular networks by two approaches. A first rule-based, low complexity method, that can be embedded in the UAV, while the other approach uses Reinforcement Learning (RL). It is based on Markov Decision Processes (MDP) for providing optimal results. The energy of the UAV battery and charging time constraints have been taken into account to cover a typical cellular environment consisting of many cells.

We used an open dataset for the Milan cellular network provided by Telecom Italia to evaluate the performance of both proposed models. Considering this dataset, the MDP model outperforms the rule-based algorithm. Nevertheless, the rule-based one requires less processing complexity and can be used immediately without any prior data. This work makes a notable contribution to developing practical and optimal solutions for UAV deployment in modern cellular networks.

由于蜂窝网络的资源分配不是动态的,一些小区可能会因突发事件而出现计划外的高流量需求。考虑到实时和非实时流量等级,我们的工作致力于通过两种方法优化蜂窝网络中无人机的位置。第一种是基于规则的低复杂度方法,可嵌入无人机中;另一种方法则使用强化学习(RL)。它基于马尔可夫决策过程(MDP),可提供最佳结果。我们使用意大利电信公司提供的米兰蜂窝网络开放数据集来评估这两种模型的性能。考虑到该数据集,MDP 模型优于基于规则的算法。不过,基于规则的算法所需的处理复杂度较低,无需任何先验数据即可立即使用。这项工作为在现代蜂窝网络中部署无人机开发实用的最佳解决方案做出了显著贡献。
{"title":"Reinforcement learning vs rule-based dynamic movement strategies in UAV assisted networks","authors":"Adel Mounir Said ,&nbsp;Michel Marot ,&nbsp;Chérifa Boucetta ,&nbsp;Hossam Afifi ,&nbsp;Hassine Moungla ,&nbsp;Gatien Roujanski","doi":"10.1016/j.vehcom.2024.100788","DOIUrl":"10.1016/j.vehcom.2024.100788","url":null,"abstract":"<div><p>Since resource allocation of cellular networks is not dynamic, some cells may experience unplanned high traffic demands due to unexpected events. Unmanned aerial vehicles (UAV) can be used to provide the additional bandwidth required for data offloading.</p><p>Considering real-time and non-real-time traffic classes, our work is dedicated to optimize the placement of UAVs in cellular networks by two approaches. A first rule-based, low complexity method, that can be embedded in the UAV, while the other approach uses Reinforcement Learning (RL). It is based on Markov Decision Processes (MDP) for providing optimal results. The energy of the UAV battery and charging time constraints have been taken into account to cover a typical cellular environment consisting of many cells.</p><p>We used an open dataset for the Milan cellular network provided by Telecom Italia to evaluate the performance of both proposed models. Considering this dataset, the MDP model outperforms the rule-based algorithm. Nevertheless, the rule-based one requires less processing complexity and can be used immediately without any prior data. This work makes a notable contribution to developing practical and optimal solutions for UAV deployment in modern cellular networks.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"48 ","pages":"Article 100788"},"PeriodicalIF":6.7,"publicationDate":"2024-05-08","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"141039448","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Multi-TA model-based conditional privacy-preserving authentication protocol for fog-enabled VANET 基于多 TA 模型的雾化 VANET 条件隐私保护认证协议
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-07 DOI: 10.1016/j.vehcom.2024.100785
Pankaj Kumar , Hari Om

The rapid growth of Vehicular Ad-hoc Networks (VANET), fueled by advancements in the Internet-of-Things, cloud computing, Intelligent Transportation Systems, and fog computing, has led to the introduction of fog node-based VANET to serve resource-constrained devices. In the traditional security models of VANET, due to the use of a centralized trusted authority, there is a chance of single-point-of-failure and service unavailable with the increased service access requests. Also, there was one-to-one communication between each roadside unit and trusted authority. This may increase the system complexity and increase the traffic load. To address these issues, a novel authentication protocol for fog-enabled VANET based on multiple trusted authority model is discussed which reduces the chance of service unavailability and single-point-of-failure as the entire traffic load is distributed among multiple sub-trusted authority. Due to the incorporation of fog node, a group of roadside units can be controlled centrally, where trusted authority does not need to perform individual authentication for each roadside unit. The proposed protocol's security is rigorously examined through both informal and formal security analysis. Additionally, the protocol exhibits enhanced security features, as demonstrated in a performance comparison section, showcasing its ability to meet the security and privacy requirements while incurring relatively low communication and computation and storage costs. Thus, the proposed protocol offers a secure and efficient authentication protocol for fog-enabled VANET.

在物联网、云计算、智能交通系统和雾计算等技术进步的推动下,车载无线网络(VANET)迅速发展,这促使人们引入基于雾节点的 VANET,为资源有限的设备提供服务。在传统的 VANET 安全模型中,由于使用了集中式可信机构,随着服务访问请求的增加,有可能出现单点故障和服务不可用的情况。此外,每个路边单元与可信机构之间都是一对一的通信。这可能会增加系统的复杂性和流量负荷。为解决这些问题,本文讨论了一种基于多重受信机构模型的新型雾化 VANET 验证协议,由于整个流量负载分布在多个子受信机构之间,该协议降低了服务不可用和单点故障的几率。由于结合了雾节点,一组路边装置可以集中控制,受托机构无需对每个路边装置进行单独认证。通过非正式和正式的安全分析,对所提出协议的安全性进行了严格检验。此外,正如性能比较部分所展示的那样,该协议具有增强的安全功能,能够满足安全和隐私要求,同时通信、计算和存储成本相对较低。因此,所提出的协议为雾化 VANET 提供了一种安全、高效的身份验证协议。
{"title":"Multi-TA model-based conditional privacy-preserving authentication protocol for fog-enabled VANET","authors":"Pankaj Kumar ,&nbsp;Hari Om","doi":"10.1016/j.vehcom.2024.100785","DOIUrl":"https://doi.org/10.1016/j.vehcom.2024.100785","url":null,"abstract":"<div><p>The rapid growth of Vehicular Ad-hoc Networks (VANET), fueled by advancements in the Internet-of-Things, cloud computing, Intelligent Transportation Systems, and fog computing, has led to the introduction of fog node-based VANET to serve resource-constrained devices. In the traditional security models of VANET, due to the use of a centralized trusted authority, there is a chance of single-point-of-failure and service unavailable with the increased service access requests. Also, there was one-to-one communication between each roadside unit and trusted authority. This may increase the system complexity and increase the traffic load. To address these issues, a novel authentication protocol for fog-enabled VANET based on multiple trusted authority model is discussed which reduces the chance of service unavailability and single-point-of-failure as the entire traffic load is distributed among multiple sub-trusted authority. Due to the incorporation of fog node, a group of roadside units can be controlled centrally, where trusted authority does not need to perform individual authentication for each roadside unit. The proposed protocol's security is rigorously examined through both informal and formal security analysis. Additionally, the protocol exhibits enhanced security features, as demonstrated in a performance comparison section, showcasing its ability to meet the security and privacy requirements while incurring relatively low communication and computation and storage costs. Thus, the proposed protocol offers a secure and efficient authentication protocol for fog-enabled VANET.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"47 ","pages":"Article 100785"},"PeriodicalIF":6.7,"publicationDate":"2024-05-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140906357","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
Fast and efficient context-aware embedding generation using fuzzy hashing for in-vehicle network intrusion detection 利用模糊散列生成快速高效的上下文感知嵌入,用于车载网络入侵检测
IF 6.7 2区 计算机科学 Q1 TELECOMMUNICATIONS Pub Date : 2024-05-07 DOI: 10.1016/j.vehcom.2024.100786
Moon Jeong Choi , Ik Rae Jeong , Hyun Min Song

In the rapidly advancing field of automotive cybersecurity, the protection of In-Vehicle Networks (IVNs) against cyber threats is crucial. Current deep learning solutions offer robustness but at the cost of high computational demand and potential privacy breaches due to the extensive IVN data required for model training. Our study proposes a novel intrusion detection system (IDS) specifically designed for IVNs that prioritizes computational efficiency and data privacy. Utilizing fuzzy hashing techniques, we generate context-aware embeddings that effectively preserve the privacy of IVN data. Among the machine learning algorithms evaluated, the Support Vector Machine (SVM) emerged as the most effective, particularly when paired with TLSH hash embeddings. This combination achieved notable detection performance, as substantiated by T-SNE visualizations that demonstrate a distinct segregation of normal and attack traffic within the vector space. To validate the effectiveness and practicality of our proposed IDS, we conducted exhaustive experiments on the well-known car-hacking dataset and the more complex ROAD dataset, which includes diverse and sophisticated attack scenarios. Our findings reveal that the proposed lightweight IDS not only demonstrates high detection accuracy but also maintains this performance within the computational constraints of current IVN systems. The system's capability to operate effectively in real-time environments makes it a viable solution for modern automotive cybersecurity needs.

在快速发展的汽车网络安全领域,保护车载网络(IVN)免受网络威胁至关重要。当前的深度学习解决方案具有鲁棒性,但代价是高计算需求和潜在的隐私泄露,因为模型训练需要大量的 IVN 数据。我们的研究提出了一种专为 IVN 设计的新型入侵检测系统(IDS),该系统优先考虑计算效率和数据隐私。利用模糊散列技术,我们生成了能有效保护 IVN 数据隐私的上下文感知嵌入。在所评估的机器学习算法中,支持向量机(SVM)是最有效的,尤其是与 TLSH 散列嵌入相结合时。这一组合取得了显著的检测性能,T-SNE 可视化效果证明了这一点,该效果显示了向量空间内正常流量和攻击流量的明显区分。为了验证我们提出的 IDS 的有效性和实用性,我们在著名的汽车黑客数据集和更复杂的 ROAD 数据集上进行了详尽的实验。我们的研究结果表明,所提出的轻量级 IDS 不仅具有很高的检测准确性,而且还能在当前 IVN 系统的计算限制条件下保持这种性能。该系统能在实时环境中有效运行,因此是满足现代汽车网络安全需求的可行解决方案。
{"title":"Fast and efficient context-aware embedding generation using fuzzy hashing for in-vehicle network intrusion detection","authors":"Moon Jeong Choi ,&nbsp;Ik Rae Jeong ,&nbsp;Hyun Min Song","doi":"10.1016/j.vehcom.2024.100786","DOIUrl":"https://doi.org/10.1016/j.vehcom.2024.100786","url":null,"abstract":"<div><p>In the rapidly advancing field of automotive cybersecurity, the protection of In-Vehicle Networks (IVNs) against cyber threats is crucial. Current deep learning solutions offer robustness but at the cost of high computational demand and potential privacy breaches due to the extensive IVN data required for model training. Our study proposes a novel intrusion detection system (IDS) specifically designed for IVNs that prioritizes computational efficiency and data privacy. Utilizing fuzzy hashing techniques, we generate context-aware embeddings that effectively preserve the privacy of IVN data. Among the machine learning algorithms evaluated, the Support Vector Machine (SVM) emerged as the most effective, particularly when paired with TLSH hash embeddings. This combination achieved notable detection performance, as substantiated by T-SNE visualizations that demonstrate a distinct segregation of normal and attack traffic within the vector space. To validate the effectiveness and practicality of our proposed IDS, we conducted exhaustive experiments on the well-known car-hacking dataset and the more complex ROAD dataset, which includes diverse and sophisticated attack scenarios. Our findings reveal that the proposed lightweight IDS not only demonstrates high detection accuracy but also maintains this performance within the computational constraints of current IVN systems. The system's capability to operate effectively in real-time environments makes it a viable solution for modern automotive cybersecurity needs.</p></div>","PeriodicalId":54346,"journal":{"name":"Vehicular Communications","volume":"47 ","pages":"Article 100786"},"PeriodicalIF":6.7,"publicationDate":"2024-05-07","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"140906358","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":2,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
期刊
Vehicular Communications
全部 Acc. Chem. Res. ACS Applied Bio Materials ACS Appl. Electron. Mater. ACS Appl. Energy Mater. ACS Appl. Mater. Interfaces ACS Appl. Nano Mater. ACS Appl. Polym. Mater. ACS BIOMATER-SCI ENG ACS Catal. ACS Cent. Sci. ACS Chem. Biol. ACS Chemical Health & Safety ACS Chem. Neurosci. ACS Comb. Sci. ACS Earth Space Chem. ACS Energy Lett. ACS Infect. Dis. ACS Macro Lett. ACS Mater. Lett. ACS Med. Chem. Lett. ACS Nano ACS Omega ACS Photonics ACS Sens. ACS Sustainable Chem. Eng. ACS Synth. Biol. Anal. Chem. BIOCHEMISTRY-US Bioconjugate Chem. BIOMACROMOLECULES Chem. Res. Toxicol. Chem. Rev. Chem. Mater. CRYST GROWTH DES ENERG FUEL Environ. Sci. Technol. Environ. Sci. Technol. Lett. Eur. J. Inorg. Chem. IND ENG CHEM RES Inorg. Chem. J. Agric. Food. Chem. J. Chem. Eng. Data J. Chem. Educ. J. Chem. Inf. Model. J. Chem. Theory Comput. J. Med. Chem. J. Nat. Prod. J PROTEOME RES J. Am. Chem. Soc. LANGMUIR MACROMOLECULES Mol. Pharmaceutics Nano Lett. Org. Lett. ORG PROCESS RES DEV ORGANOMETALLICS J. Org. Chem. J. Phys. Chem. J. Phys. Chem. A J. Phys. Chem. B J. Phys. Chem. C J. Phys. Chem. Lett. Analyst Anal. Methods Biomater. Sci. Catal. Sci. Technol. Chem. Commun. Chem. Soc. Rev. CHEM EDUC RES PRACT CRYSTENGCOMM Dalton Trans. Energy Environ. Sci. ENVIRON SCI-NANO ENVIRON SCI-PROC IMP ENVIRON SCI-WAT RES Faraday Discuss. Food Funct. Green Chem. Inorg. Chem. Front. Integr. Biol. J. Anal. At. Spectrom. J. Mater. Chem. A J. Mater. Chem. B J. Mater. Chem. C Lab Chip Mater. Chem. Front. Mater. Horiz. MEDCHEMCOMM Metallomics Mol. Biosyst. Mol. Syst. Des. Eng. Nanoscale Nanoscale Horiz. Nat. Prod. Rep. New J. Chem. Org. Biomol. Chem. Org. Chem. Front. PHOTOCH PHOTOBIO SCI PCCP Polym. Chem.
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
0
微信
客服QQ
Book学术公众号 扫码关注我们
反馈
×
意见反馈
请填写您的意见或建议
请填写您的手机或邮箱
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
现在去查看 取消
×
提示
确定
Book学术官方微信
Book学术文献互助
Book学术文献互助群
群 号:481959085
Book学术
文献互助 智能选刊 最新文献 互助须知 联系我们:info@booksci.cn
Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。
Copyright © 2023 Book学术 All rights reserved.
ghs 京公网安备 11010802042870号 京ICP备2023020795号-1