Intrusion Detection for SOME/IP: Challenges and Opportunities
Tobias Gehrmann, Paul Duplys
Abstract
Due to ever increasing complexity and the introduction of more and more connectivity, modern cars have an ever growing attack surface. To cope with this, intrusion detection should be used as an additional layer of defense complementing dedicated security measures. There is, however, very little published work on intrusion detection in cars, in particular for service-oriented communication. In this short paper, we first discuss selected challenges and opportunities for intrusion detection in SOME/IP, a standard protocol for service-oriented communication in cars. We then propose an architecture for a SOME/IP intrusion detection system, discuss its security properties and report preliminary experimental results.
Topics & Concepts
Intrusion detection systemComputer scienceIntrusion prevention systemIntrusionComputer securityProtocol (science)Communications protocolService (business)Application layerComputer networkHost-based intrusion detection systemNetwork securityOperating systemSoftwareAlternative medicineEconomyMedicineGeologyGeochemistryPathologyEconomicsNetwork Security and Intrusion DetectionVehicular Ad Hoc Networks (VANETs)Advanced Malware Detection Techniques