Vehicular Multilevel Data Arrangement-Based Intrusion Detection System for In-Vehicle CAN

<table class="algorithm-group"><tr><td><table class="algorithm" id="alg1"><tr><td>(1)</td><td><b>Input</b>:</td></tr><tr><td> </td><td> cas_map: the data arrangement order for MLDA compression.</td></tr><tr><td> </td><td> threshold: maximum value of the degree of variation in normal state.</td></tr><tr><td> </td><td> limit_changes: maximum acceptable limit of abnormal data frames in normal state.</td></tr><tr><td>(2)</td><td><b>Initialize</b>:</td></tr><tr><td> </td><td> prev_msg ← 0</td></tr><tr><td> </td><td> attack_cnt ← 0</td></tr><tr><td>(3)</td><td><b>while</b> message with ID arrives <b>do</b></td></tr><tr><td>(4)</td><td> xor_msg ← prev_msg ^ message</td></tr><tr><td>(5)</td><td> comp_msg ← compress_with_v_mlda(xor_msg, cas_map)</td></tr><tr><td>(6)</td><td> degree ← (bit_length(comp_msg)/bit_length(message)) ∗ 100.</td></tr><tr><td>(7)</td><td> <b>if</b> degree &gt; threshold <b>then</b></td></tr><tr><td>(8)</td><td>  attack_cnt ← attack_cnt +1</td></tr><tr><td>(9)</td><td> <b>else</b></td></tr><tr><td>(10)</td><td>  attack_cnt ← 0</td></tr><tr><td>(11)</td><td> <b>if</b> attack_cnt &gt; limit_changes <b>then</b></td></tr><tr><td>(12)</td><td>  notify_attack()</td></tr><tr><td>(13)</td><td> prev_msg ← message</td></tr></table></td></tr></table>

<div> Algorithm for intrusion detection.</div>

Security and Communication Networks

alg1

Algorithm 1

Algorithm 1: Vehicular Multilevel Data Arrangement-Based Intrusion Detection System for In-Vehicle CAN 