Vehicle-mounted network intrusion detection method and device based on fast Fourier transform, equipment and storage medium

Abstract

The invention discloses an in-vehicle network intrusion detection method and device based on fast Fourier transform, equipment and a storage medium. The method comprises the following steps: setting an alarm frequency threshold value and a maximum tolerance value; collecting kernel operation load data and bus load rate data in a unit time period; performing fast Fourier transform on the operation load data and the bus load rate data to obtain frequency domain features; the calculation result is compared with an alarm frequency threshold value, whether the calculation result is within the range of the alarm frequency threshold value or not is judged, and if yes, the step S20 is executed again; if not, recording the event as a suspicious event, and executing the next step; accumulating the occurrence time of the suspicious event, judging whether the occurrence time exceeds the maximum tolerance value, and if so, returning to execute the next step; if not, returning to execute S20; and the system gives an alarm and starts safety protection measures. According to the invention, intrusion detection can be carried out on the vehicle-mounted network, the health degree of the system is macroscopically identified, and intrusion detection with a low false alarm rate is realized.

Description

technical field [0001] The present invention relates to the technical field of network intrusion detection, in particular to a method, device, device and storage medium for vehicle network intrusion detection based on fast Fourier transform. Background technique [0002] The in-vehicle network consists of an electronic control unit (ECU) and a bus, which integrates automatic control, communication, and computer. In recent years, the concept of Internet of Vehicles, smart cars, unmanned driving, and intelligent transportation has been proposed, which makes the information exchange between external networks and cars more and more frequent. [0003] With the increase of multi-network integration applications, there are more and more information exchanges between in-vehicle electronic equipment and electronic control units and the outside world, and the types of attack threats and risks faced by the in-vehicle network are always the same. A common type of attack, denial of serv...

AI Technical Summary

Problems solved by technology

[0003] With the increase of multi-network integration applications, there are more and more information interactions between vehicle-mounted electronic devices, electronic control units and the outside world, and the threat and risk types of attacks faced by vehicle-mounted networks are also constant. Among them, denial of service or blocking attacks are the most Common attack types, denial-of-service attacks physically connect through bus monitoring devices, send a large amount of invalid data, occupy bus bandwidth, block the bus, and directly affect the real-time transmission of legitimate data

Images