The rapid proliferation of Intelligent Connected Vehicles (ICVs) presents escalating cybersecurity challenges, particularly within Controller Area Networks (CAN), where traditional Intrusion Detection Systems (IDS) often fail to meet the stringent requirements for real-time and fine-grained anomaly detection under limited computational resources. This study introduces a novel lightweight dual-tier anomaly detection framework, termed Enhanced LSTM-CNN (ELC), which synergistically integrates temporal and spatial deep learning paradigms to address these limitations. The first tier employs an optimized hybrid architecture combining Long Short-Term Memory (LSTM) networks for temporal dependency modeling and Convolutional Neural Networks (CNNs) for spatial feature extraction, enabling rapid and accurate preliminary anomaly screening. The second tier utilizes an enhanced CNN classifier to perform refined multi-class identification of four prevalent attack types, including Denial of Service (DoS), Fuzzy, and RPM/GEAR spoofing, achieving an F1-score of 99.8 %. Comprehensive evaluations on real-world vehicular CAN datasets demonstrate that ELC attains an average per-message detection of 0.153 ms and sustains a processing throughput of 7000 messages per second, all within a power envelope of 7.3 W making it well suited for deployment in resource-constrained Electronic Control Units (ECUs). In addition, we validate ELC on the public 4TU CAN Bus Intrusion Dataset v2 and Survival Analysis Dataset maintaining comparable performance under cross-dataset settings and underscoring generalization and reproducibility. Unlike conventional batch-based approaches, ELC provides message-level granularity and sub-millisecond responsiveness, thereby ensuring timely threat mitigation within the 10 ms message interval constraints of CAN systems. These results indicate that the proposed framework holds strong potential as a practical and effective solution for real-time, embedded intrusion detection in resource-constrained vehicular environments.
扫码关注我们
求助内容:
应助结果提醒方式:
