Abnormal intrusion detection method and device for Internet of Vehicles CAN bus

Abstract

The invention discloses an abnormal intrusion detection method for an Internet of Vehicles CAN bus. The method comprises the following steps: collecting temperature clock deviation data of each ECU ofan automobile in a normal state; constructing a temperature clock fingerprint model of each ECU; obtaining a current message of an in-vehicle CAN bus and the temperature of an ECU corresponding to the current vehicle state, and calculating a temperature clock deviation and a standard deviation corresponding to the clock deviation through the model according to the temperature of the ECU corresponding to the message; obtaining an absolute value of a difference value between the average clock skew and the temperature clock skew of the message, and comparing the absolute value with a standard deviation; if the absolute value is greater than the standard deviation, judging that an abnormal intrusion event occurs; if an intrusion event occurs, the attack temperature of each ECU is obtained through the average clock skew of the model and the intrusion message, if the attack temperature is within the temperature range of the ECU in the current automobile state, the ECU is an intrusion source, the problem that an existing intrusion detection method is affected by the temperature to cause detection failure is solved, and the intrusion source ECU can be identified.

Description

technical field [0001] The present application relates to the technical field of Internet of Vehicles security, in particular to a method for detecting abnormal intrusion of a CAN bus of the Internet of Vehicles, and at the same time relates to a device for detecting abnormal intrusion of the CAN bus of the Internet of Vehicles. Background technique [0002] With the intelligent development of automobile control systems, multifunctional electronic control units (ECUs) on automobiles have been widely developed and installed to provide various convenience and safety guarantee functions for automobiles. For example, the pre-collision system in the car is controlled by the electronic control unit ECU, which can make corresponding actions according to the state of objects in front of the car. Typically, the in-vehicle Controller Area Network (CAN) provides an economical and reliable wired connection between electronic control units (ECUs). However, due to the need for convenienc...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the deficiencies of the prior art, this application provides an abnormal intrusion detection method for the CAN bus of the Internet of Vehicles, which is used to solve the problem that the existing intrusion detection method is affected by the temperature and causes detection failure

Images