journal article·2023Open access

A Comprehensive Analysis of Datasets for Automotive Intrusion Detection Systems

Seyoung Lee, Wonsuk Choi, Insup Kim, Ganggyu Lee, Dong Hoon Lee

Computers, Materials & Continua· Volume 76· Issue 3

Abstract

Recently, automotive intrusion detection systems (IDSs) have emerged as promising defense approaches to counter attacks on in-vehicle networks (IVNs). However, the effectiveness of IDSs relies heavily on the quality of the datasets used for training and evaluation. Despite the availability of several datasets for automotive IDSs, there has been a lack of comprehensive analysis focusing on assessing these datasets. This paper aims to address the need for dataset assessment in the context of automotive IDSs. It proposes qualitative and quantitative metrics that are independent of specific automotive IDSs, to evaluate the quality of datasets. These metrics take into consideration various aspects such as dataset description, collection environment, and attack complexity. This paper evaluates eight commonly used datasets for automotive IDSs using the proposed metrics. The evaluation reveals biases in the datasets, particularly in terms of limited contexts and lack of diversity. Additionally, it highlights that the attacks in the datasets were mostly injected without considering normal behaviors, which poses challenges for training and evaluating machine learning-based IDSs. This paper emphasizes the importance of addressing the identified limitations in existing datasets to improve the performance and adaptability of automotive IDSs. The proposed metrics can serve as valuable guidelines for researchers and practitioners in selecting and constructing high-quality datasets for automotive security applications. Finally, this paper presents the requirements for high-quality datasets, including the need for representativeness, diversity, and balance.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Anomaly Detection Techniques and Applications · Vehicular Ad Hoc Networks (VANETs)

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (57)

Show source-provided references
1. Voltageids: Low-level communication characteristics for automotive intrusion detection system10.1109/TIFS.2018.2812149 ↗
2. Experimental security analysis of a modern automobile
3. Comprehensive experimental analyses of automotive attack surfaces
4. Remote exploitation of an unaltered passenger vehicle
5. LeiA: A lightweight authentication protocol for CAN
6. Libra-CAN: A lightweight broadcast authentication protocol for controller area networks
7. A survey of attacks on controller area networks and corresponding countermeasures10.1109/TITS.2021.3078740 ↗
8. Intrusion detection system for automotive controller area network (CAN) bus system: A review10.1186/s13638-019-1484-3 ↗
9. A survey of intrusion detection for in-vehicle networks10.1109/TITS.2019.2908074 ↗
10. Towards minimizing MAC utilization for controller area network
11. Controller area network intrusion prevention system leveraging fault recovery
12. N. Salman, “Design and implementation of an intrusion detection system (IDS) for in-vehicle networks,” M.S. Dissertation, Chalmers University of Technology, University of Gothenburg, Gothenburg, Sweden, 2017.
13. An approach to specification-based attack detection for in-vehicle networks
14. A structured approach to anomaly detection for in-vehicle networks
15. Intrusion detection system based on the analysis of time intervals of CAN messages for in-vehicle network
16. Entropy-based anomaly detection for in-vehicle networks
17. Indra: Intrusion detection using recurrent autoencoders in automotive embedded systems10.1109/TCAD.2020.3012749 ↗
18. In-vehicle network intrusion detection using deep convolutional neural network10.1016/j.vehcom.2019.100198 ↗
19. Intrusion detection system using deep neural network for in-vehicle network security
20. Context-aware intrusion detection in automotive control systems
21. GIDS: GAN based intrusion detection system for in-vehicle network
22. A detailed analysis of CICIDS2017 dataset for designing intrusion detection systems
23. Why anomaly-based intrusion detection systems have not yet conquered the industrial market?
24. OTIDS: A novel intrusion detection system for in-vehicle network by using remote frame
25. Anomaly intrusion detection method for vehicular networks based on survival analysis10.1016/j.vehcom.2018.09.004 ↗
26. Dupont · Automotive Controller Area Network (CAN) Bus Intrusion Dataset v2 · 201910.4121/uuid:b74b4928-c377-4585-9432-2004dfa20a5d ↗
27. CANet: An unsupervised intrusion detection system for high dimensional CAN bus data10.1109/ACCESS.2020.2982544 ↗
28. Kim · Car Hacking: Attack & Defense Challenge 2020 Dataset · 202110.21227/qvr7-n418 ↗
29. M. E. Verma, M. D. Iannacone, R. A. Bridges, S. C. Hollifield, P. Moriano et al., “Addressing the lack of comparability & testing in CAN intrusion detection research: A comprehensive guide to CAN IDS data & introduction of the ROAD dataset,” arXiv preprint arXiv: 2012.14600, 2020.
30. TTIDS: Transmission-resuming time-based intrusion detection system for controller area network (CAN)10.1109/ACCESS.2022.3174356 ↗
31. A comparative review of security threats datasets for vehicular networks
32. Systematic evaluation of automotive intrusion detection datasets
33. Machine learning-based intrusion detection system for controller area networks
34. CANflict: Exploiting peripheral conflicts for data-link layer attacks on automotive networks
35. Adventures in automotive networks and control units
36. Exemplary automotive attack scenarios: Trojan horses for electronic throttle control system (ETC) and replay attacks on the power window system
37. ISO 14229-1:2020, Road Vehicles–Unified Diagnostic Services (UDS)—Part 1: Application Layer · 2020
38. A practical wireless attack on the connected car and security protocol for in-vehicle can
39. Error handling of in-vehicle networks makes them vulnerable
40. Exposing New vulnerabilities of error handling mechanism in CAN
41. CANvas: Fast and inexpensive automotive network mapping
42. Intrusion detection system for CAN bus in-vehicle network based on machine learning algorithms
43. Frequency-based anomaly detection for the automotive CAN bus
44. CANtropy: Time series feature extraction-based intrusion detection systems for controller area networks
45. IDS for CAN: A practical intrusion detection system for CAN bus security
46. N. D. Lawrence, “Data readiness levels,” arXiv preprint arXiv:1705.02245, 2017.
47. Keep the moving vehicle secure: Context-aware intrusion detection system for in-vehicle CAN bus security
48. Comparing visual-interactive labeling with active learning: An experimental study
49. Towards a reliable intrusion detection benchmark dataset10.13052/jsn2445-9739.2017.009 ↗
50. Editorial: Special issue on learning from imbalanced data sets10.1145/1007730.1007733 ↗
51. Intrusion detection with segmented federated learning for large-scale multiple lans
52. SMOTE for learning from imbalanced data: Progress and challenges, marking the 15-year anniversary10.1613/jair.1.11192 ↗
53. A mathematical theory of communication10.1145/584091.584093 ↗
54. An enhanced method for reverse engineering CAN data payload10.1109/TVT.2021.3063261 ↗
55. Novel deep learning-enabled lstm autoencoder architecture for discovering anomalous events from intelligent transportation systems10.1109/TITS.2020.3017882 ↗
56. LSTM-based intrusion detection system for in-vehicle can bus communications10.1109/ACCESS.2020.3029307 ↗
57. MTH-IDS: A multitiered hybrid intrusion detection system for internet of vehicles10.1109/JIOT.2021.3084796 ↗