41 results
Now showing1 - 10 of 41
- Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: Embargo , Investigating BiLSTM-based intrusion detection for CAN: cross-vehicles and unknown attacks(2026-06-23); ML-based intrusion detection systems (IDS) have been increasingly used for the security of in-vehicle Controller Area Network (CAN). These IDSs are generally evaluated in familiar settings of vehicles or attack types in simulated or lab environments. We propose a modular IDS based on bidirectional long short-term memory (BiLSTM) with two modules: a detector for anomaly detection and a classifier for attack type classification, trained on a dataset collected live on-the-road. The proposed IDS uses fixed-length sliding windowed inputs to learn temporal dependencies in CAN traffic to detect and classify intrusions. We present a systematic experimentation on the proposed IDS based on vehicle familiarity (known/unknown during training) and attack familiarity for structured assessment. The output conflict between detector and classifier can be used for identifying unseen attacks during training. Results show reliable performance when familiarity in vehicle and attack exists, but near-random behavior when unfamiliarity in both vehicle and attack exists.Publicationtype: Conference Paper14 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , A framework for demonstrating and mitigating CAN injection attacks in vector CANoe: a case study using ABSModern vehicles rely heavily on the Controller Area Network (CAN) for communication between electronic control units, yet CAN lacks inherent security features like authentication, making it susceptible to attacks, such as message injection. In this paper, we develop a means of simulating and visualizing the effect of an attack on the communication traffic and the actual system and the effect of a countermeasure. Our tool is based on Vector CANoe simulation and demonstrates a CAN message injection attack and a simple rule-based Intrusion Detection System (IDS). The setup includes a custom Graphical User Interface (GUI) for interactive demonstration. This framework serves as an educational tool and a foundation for future research into more advanced attack and defense scenarios. This work takes a step towards developing simulation platforms or frameworks for security of in-vehicle networks that are flexible and based on industry suitable toolchains.Publicationtype: Conference Paper64 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Integrating the technical level into a model-based safety and security analysis : why it's necessary and how it can be done(2025-09-05)We motivate why it is necessary to integrate the technical level into a model-based safety and security analysis on the dynamical system level, and show how this can be done.Publicationtype: Conference Paper46 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Integrating the Technical Level into a Model-based Safety and Security Analysis: Why it is Necessary and How it Can be DoneToday’s safety-critical systems are both networked to the environment and highly defined by software. Hence, they have become vulnerable to cyber attacks. On the positive side, the great progress in data-centric methods has led to increasingly sophisticated attack detection systems. These typically work and are evaluated at the dynamical system level, decoupled from the technical level. In this paper, we motivate why it is necessary to integrate the technical level into a model-based safety and security analysis at the dynamical system level, and show how this can be donePublicationtype: Conference Paper38 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: with files , A Model-Based Safety and Security Analysis for Energy SystemsRegenerative energy systems such as wind farms are typically operated by SCADA (Supervisory Control and Data Acquisition) systems. These comprise several layers of networks and control units for data acquisition, (remote) monitoring, and (remote) control. It goes without saying that these systems must be protected against increasingly sophisticated cyber attacks to ensure that the power grid remains stable. The great progress in data-centric methods has led to increasingly sophisticated anomaly detection systems that work on the dynamical system level. In recent research we have addressed the following question: how to integrate such measures into a systematic safety and security process? This has remained a gap since so far security processes have mainly focussed on the aspect of assigning classic security controls such as access control and cryptographic measures to the system under consideration. In this contribution we present a new approach that allows us to assess such measures at the dynamical system level by means of a hybrid system model while tying the model closely to the underlying technical level, where attacks actually take place.Publicationtype: Conference Poster50 13 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: with files , Three taps for secure machine-to-machine communication : towards high assurance yet fully local machine pairingIn this short paper we explore if and how we can securely pair up two machines for secure machine-to-machine communication by means of an NFC system subject to two conditions: firstly, the machine pairing method must be truly local in that we cannot rely on long-term secrets or a public-key infrastructure; secondly, the machine pairing method must be verifiable and certifiable to a high assurance level. We address this question motivated by a demand for this in the aerospace domain, where there is currently a drive to introduce machine-to-machine communication over wireless networks to improve ground processes such as refuelling and air conditioning. In this paper we present preliminary results towards a positive answer to this question.Publicationtype: Conference Paper101 9 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , CAN Message Collision Avoidance Filter For In-Vehicle NetworksModern Vehicles are architecturally very complex with a large number of Electronic Control Units (ECUs) connected to each other by network buses such as Controller Area Network (CAN). When two messages with the same ID but different contents appear on the bus simultaneously, it results in a message collision. This can result in loss or delay of critical information. If done deliberately by malicious actors, it can lead to unsafe conditions. In this paper, the goal is to motivate the need for a solution against message collisions and propose a concept of a one time programmable CAN message collision avoidance filter that needs no updates or secure storage.Publicationtype: Conference Paper145 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Key Establishment for Maintenance with Machine to Machine Communication in Transportation : Security Process and Mitigation MeasuresMachine to machine communication over wireless networks is increasingly adopted to improve service and maintenance processes in transportation, e.g. at airports, ports, and automotive service stations. This brings with it the challenge of how to set up a session key so that the communication can be cryptographically secured. While there is a vast design space of key establishment methods available, there is a lack of process of how to engineer a solution while considering both security and safety: how to assess the threats and risks that come with a particular key establishment method? And how to iteratively refine a key establishment method under development such that risk is mitigated to an acceptable level? In this paper, we put forward an approach that addresses these questions. We also devise several cyber-physical measures that can be added to mitigate risk. We illustrate our approach by means of a real-world use case: TAGA - a Touch and Go Assistant in the Aerospace Domain. Finally, we highlight the crucial role that simulation has to play in this security process for safety.Publicationtype: Journal Article85 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Enabling Secure Communication for Cyber-Physical Processes in Critical Infrastructures(2023-10); Machine-to-machine communication over wireless networks is increasingly adopted to improve service and maintenance processes at airports, ports, and manufacturing plants. This brings with it the challenge of how to bootstrap a secure communication channel between the machines involved. Building on the idea of secure device pairing we research novel schemes for key establishment that exploit the proximity of the machines, the physical presence of a human or robotic operator, and/or the physical characteristics of the process. This approach allows us to engineer for post-quantum resistance as well as resilience against multi-instance attacks. To meet current safety and security norms we also provide the methodology to formally capture and verify the corresponding requirements.Publicationtype: Conference Poster80 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Security Process for Adopting Machine to Machine Communication for Maintenance in Transportation with a Focus on Key Establishment(2023-09); Machine to machine communication over wireless networks is increasingly adopted to improve service and maintenance processes in transportation, e.g. at airports, ports, and automotive service stations. This brings with it the challenge of how to set up a session key so that the communication can be cryptographically secured. While there is a vast design space of key establishment methods available, there is a lack of process of how to engineer a solution while considering both security and safety: how to assess the threats and risks that come with a particular key establishment method? And how to iteratively refine a key establishment method under development such that risk is mitigated to an acceptable level? In this paper, we put forward an approach that addresses these questions. Moreover, we illustrate our approach by means of a real-world use case: TAGA - a Touch and Go Assistant in the Aerospace Domain. Finally, we highlight the crucial role that simulation has to play in this security process for safety.Publicationtype: Conference Paper33