Research on Intrusion Detection Technology Based on Embedded Ethernet

With the development of intelligent connected vehicles, in-vehicle Ethernet technologies are more and more commonly applied in automotive industry, such that cybersecurity related problems of in-vehicle Ethernet are becoming more and more obvious and should not be ignored. This paper studies an embedded intrusion detection technology for in-vehicle Ethernet. Based on rule matching a new binary rule format is designed, which can be converted with the current mainstream Snort/Suricata rule set. This technology is applied to our intrusion detection system ETH-IDS, which is a vehicle-oriented embedded Ethernet intrusion detection system and completely compliant with related AUTOSAR specifications. A multi-level comprehensive evaluation model is also proposed in the embedded environment to take the quantitative evaluation for intrusion detection systems. Related experiments are carried out in an automotive embedded environment, and the performance advantages of ETH-IDS are verified compared with Suricata. Meanwhile, the validity of the evaluation model is also verified.