{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T03:58:57Z","timestamp":1776139137776,"version":"3.50.1"},"reference-count":54,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T00:00:00Z","timestamp":1777593600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,3,13]],"date-time":"2026-03-13T00:00:00Z","timestamp":1773360000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,5]]},"DOI":"10.1016\/j.comnet.2026.112176","type":"journal-article","created":{"date-parts":[[2026,3,14]],"date-time":"2026-03-14T16:14:28Z","timestamp":1773504868000},"page":"112176","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Efficient voltage-based intrusion detection for in-vehicle networks: From density clustering to centroid classification"],"prefix":"10.1016","volume":"281","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0829-5467","authenticated-orcid":false,"given":"Patricia","family":"Iosif","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5357-7776","authenticated-orcid":false,"given":"Lucian","family":"Popa","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3078-3635","authenticated-orcid":false,"given":"Bogdan","family":"Groza","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"78","reference":[{"issue":"1","key":"10.1016\/j.comnet.2026.112176_bib0001","first-page":"16","article-title":"Free-fall: hacking tesla from wireless to can bus","volume":"25","author":"Nie","year":"2017","journal-title":"Brief., Black Hat USA"},{"key":"10.1016\/j.comnet.2026.112176_bib0002","series-title":"Symposium on Vehicles Security and Privacy (VehicleSec)","first-page":"1","article-title":"Commercial vehicle electronic logging device security: unmasking the risk of truck-to-truck cyber worms","volume":"2024","author":"Jepson","year":"2024"},{"key":"10.1016\/j.comnet.2026.112176_bib0003","series-title":"2024 IEEE Symposium on Security and Privacy (SP)","first-page":"2366","article-title":"From virtual touch to tesla command: unlocking unauthenticated control chains from smart glasses for vehicle takeover","author":"Zhang","year":"2024"},{"key":"10.1016\/j.comnet.2026.112176_bib0004","unstructured":"ISO, ISO11898-1. Road vehicles - Controller Area Network (CAN) - Part 1: Data link layer and physical coding sublayer, Standard, 3rd edition, International Organization for Standardization, 2024."},{"key":"10.1016\/j.comnet.2026.112176_bib0005","doi-asserted-by":"crossref","first-page":"1185","DOI":"10.1109\/TIFS.2022.3158055","article-title":"ECUPrint-Physical fingerprinting electronic control units on CAN buses inside cars and SAE J1939 compliant vehicles","volume":"17","author":"Popa","year":"2022","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.comnet.2026.112176_bib0006","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104017","article-title":"Voltage inspector: sender identification for in-vehicle CAN bus using voltage slice","volume":"145","author":"Zhang","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112176_bib0007","unstructured":"ISO, ISO11898-2. Road vehicles - Controller Area Network (CAN) - Part 2: High-speed physical medium attachment (PMA) sublayer, Standard, 2nd edition, International Organization for Standardization, 2024."},{"key":"10.1016\/j.comnet.2026.112176_bib0008","unstructured":"SAE, High-Speed CAN (HSC) for Vehicle Applications at 500\u202fKBPS, Standard, SAE International, 2022."},{"key":"10.1016\/j.comnet.2026.112176_bib0009","article-title":"In-vehicle network intrusion detection using deep convolutional neural network","volume":"21","author":"Song","year":"2020","journal-title":"Veh. Commun."},{"key":"10.1016\/j.comnet.2026.112176_bib0010","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2025.111157","article-title":"UGL: A comprehensive hybrid model integrating GCN and LSTM for enhanced intrusion detection in UAV controller area networks","volume":"262","author":"Du","year":"2025","journal-title":"Comput. Networks"},{"key":"10.1016\/j.comnet.2026.112176_bib0011","doi-asserted-by":"crossref","DOI":"10.1109\/ACCESS.2025.3561628","article-title":"Design and test of an embedded real-Time & compact voltage fingerprinting algorithm for enhanced automotive cybersecurity","author":"Dini","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112176_bib0012","doi-asserted-by":"crossref","DOI":"10.1109\/ACCESS.2025.3545245","article-title":"Embedded machine learning-based voltage fingerprinting for automotive cybersecurity","author":"Dini","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112176_bib0013","series-title":"2024 10th International Conference on Systems and Informatics (ICSAI)","first-page":"1","article-title":"FPGA Implementation for bayesian gaussian mixture model-Based ECU identification on CAN buses","author":"Liu","year":"2024"},{"key":"10.1016\/j.comnet.2026.112176_bib0014","doi-asserted-by":"crossref","first-page":"661","DOI":"10.1109\/TIFS.2023.3327026","article-title":"IdentifierIDS: a practical voltage-based intrusion detection system for real in-vehicle networks","volume":"19","author":"Deng","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.comnet.2026.112176_bib0015","series-title":"2021 Design, Automation & Test in Europe Conference & Exhibition (DATE)","first-page":"1142","article-title":"Vprofile: voltage-based anomaly detection in controller area networks","author":"Liu","year":"2021"},{"key":"10.1016\/j.comnet.2026.112176_bib0016","article-title":"IDS-DEC: A novel intrusion detection for CAN bus traffic based on deep embedded clustering","volume":"49","author":"Shi","year":"2024","journal-title":"Veh. Commun."},{"key":"10.1016\/j.comnet.2026.112176_bib0017","doi-asserted-by":"crossref","DOI":"10.1016\/j.sysarc.2025.103567","article-title":"LUFT-CAN: A lightweight unsupervised learning based intrusion detection system with frequency-time analysis for vehicular CAN bus","author":"Xin","year":"2025","journal-title":"J. Syst. Archit."},{"issue":"4","key":"10.1016\/j.comnet.2026.112176_bib0018","doi-asserted-by":"crossref","first-page":"395","DOI":"10.1109\/LSP.2014.2304139","article-title":"Source identification using signal characteristics in controller area networks","volume":"21","author":"Murvay","year":"2014","journal-title":"IEEE Signal Process. Lett."},{"key":"10.1016\/j.comnet.2026.112176_bib0019","series-title":"2023 International Conference on Networking and Network Applications (NaNA)","first-page":"545","article-title":"A light-weighted machine learning based ECU identification for automotive CAN security","author":"Li","year":"2023"},{"issue":"1","key":"10.1016\/j.comnet.2026.112176_bib0020","doi-asserted-by":"crossref","first-page":"199","DOI":"10.3390\/electronics12010199","article-title":"Voltage based electronic control unit (ECU) identification with convolutional neural networks and walsh\u2013Hadamard transform","volume":"12","author":"Baldini","year":"2022","journal-title":"Electronics"},{"key":"10.1016\/j.comnet.2026.112176_bib0021","series-title":"Proceedings of the 2024 Workshop on Attacks and Solutions in Hardware Security","first-page":"36","article-title":"PHIDIAS: Power signature host-based intrusion detection in automotive microcontrollers","author":"Gehrer","year":"2024"},{"key":"10.1016\/j.comnet.2026.112176_bib0022","series-title":"Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security","first-page":"1109","article-title":"Viden: attacker identification on in-vehicle networks","author":"Cho","year":"2017"},{"issue":"8","key":"10.1016\/j.comnet.2026.112176_bib0023","doi-asserted-by":"crossref","first-page":"2114","DOI":"10.1109\/TIFS.2018.2812149","article-title":"VoltageIDS: low-level communication characteristics for automotive intrusion detection system","volume":"13","author":"Choi","year":"2018","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"6","key":"10.1016\/j.comnet.2026.112176_bib0024","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3362034","article-title":"Btmonitor: bit-time-based intrusion detection and attacker identification in controller area network","volume":"18","author":"Zhou","year":"2019","journal-title":"ACM Trans. Embedded Comput. Syst. (TECS)"},{"issue":"6","key":"10.1016\/j.comnet.2026.112176_bib0025","doi-asserted-by":"crossref","first-page":"4607","DOI":"10.1109\/TDSC.2022.3230501","article-title":"OFIDS: Online learning-enabled and fingerprint-based intrusion detection system in controller area networks","volume":"20","author":"Wei","year":"2022","journal-title":"IEEE Trans. Depend. Secure Comput."},{"issue":"3","key":"10.1016\/j.comnet.2026.112176_bib0026","doi-asserted-by":"crossref","first-page":"2479","DOI":"10.1109\/TITS.2023.3321896","article-title":"Automotive security: threat forewarning and ECU source mapping derived from physical features of network signals","volume":"25","author":"Wei","year":"2023","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"10.1016\/j.comnet.2026.112176_bib0027","article-title":"A lightweight voltage-based ECU fingerprint intrusion detection system for in-vehicle CAN bus","author":"Zhang","year":"2025","journal-title":"IEEE Trans. Veh. Technol."},{"key":"10.1016\/j.comnet.2026.112176_bib0028","series-title":"Proceedings of the 40th ACM\/SIGAPP Symposium on Applied Computing","first-page":"1886","article-title":"Towards a comprehensive evaluation of voltage-Based fingerprinting for the CAN bus","author":"McEntarffer","year":"2025"},{"issue":"6","key":"10.1016\/j.comnet.2026.112176_bib0029","doi-asserted-by":"crossref","first-page":"4757","DOI":"10.1109\/TVT.2018.2810232","article-title":"Identifying ecus using inimitable characteristics of signals in controller area networks","volume":"67","author":"Choi","year":"2018","journal-title":"IEEE Trans. Veh. Technol."},{"key":"10.1016\/j.comnet.2026.112176_bib0030","series-title":"Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security","first-page":"787","article-title":"Scission: signal characteristic-based sender identification and intrusion detection in automotive networks","author":"Kneib","year":"2018"},{"key":"10.1016\/j.comnet.2026.112176_bib0031","unstructured":"M. Kneib, O. Schell, C. Huth, On the robustness of signal characteristic-based sender identification, (2019). arXiv preprint arXiv:1911.09881."},{"key":"10.1016\/j.comnet.2026.112176_bib0032","series-title":"NDSS","first-page":"1","article-title":"EASI: Edge-Based sender identification on resource-Constrained platforms for automotive networks","author":"Kneib","year":"2020"},{"key":"10.1016\/j.comnet.2026.112176_bib0033","series-title":"ICC 2019-2019 IEEE International Conference on Communications (ICC)","first-page":"1","article-title":"Voltage based authentication for controller area networks with reinforcement learning","author":"Xu","year":"2019"},{"key":"10.1016\/j.comnet.2026.112176_bib0034","doi-asserted-by":"crossref","first-page":"2535","DOI":"10.1109\/TIFS.2021.3056206","article-title":"Reinforcement learning-based physical-layer authentication for controller area networks","volume":"16","author":"Xiao","year":"2021","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.comnet.2026.112176_bib0035","series-title":"2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","first-page":"225","article-title":"VALID: Voltage-based lightweight intrusion detection for the controller area network","author":"Schell","year":"2020"},{"issue":"3","key":"10.1016\/j.comnet.2026.112176_bib0036","first-page":"2406","article-title":"Detecting CAN attacks on J1939 and NMEA 2000 networks","volume":"20","author":"Rogers","year":"2022","journal-title":"IEEE Trans. Depend. Secure Comput."},{"issue":"6","key":"10.1016\/j.comnet.2026.112176_bib0037","doi-asserted-by":"crossref","first-page":"7240","DOI":"10.1109\/TVT.2023.3236820","article-title":"Side channel analysis: a novel intrusion detection system based on vehicle voltage signals","volume":"72","author":"Xun","year":"2023","journal-title":"IEEE Trans. Veh. Technol."},{"issue":"3","key":"10.1016\/j.comnet.2026.112176_bib0038","doi-asserted-by":"crossref","first-page":"2124","DOI":"10.1109\/JIOT.2021.3090397","article-title":"VehicleEIDS: a novel external intrusion detection system based on vehicle voltage signals","volume":"9","author":"Xun","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.comnet.2026.112176_bib0039","doi-asserted-by":"crossref","DOI":"10.1016\/j.sysarc.2023.102957","article-title":"Detecting CAN overlapped voltage attacks with an improved voltage-based in-vehicle intrusion detection system","volume":"143","author":"Yin","year":"2023","journal-title":"J. Syst. Archit."},{"key":"10.1016\/j.comnet.2026.112176_bib0040","series-title":"Proceedings of the 35th Annual Computer Security Applications Conference","first-page":"229","article-title":"SIMPLE: Single-frame based physical layer identification for intrusion detection and prevention on in-vehicle networks","author":"Foruhandeh","year":"2019"},{"key":"10.1016\/j.comnet.2026.112176_bib0041","series-title":"Advances in Knowledge Discovery and Data Mining","first-page":"160","article-title":"Density-Based clustering based on hierarchical density estimates","author":"Campello","year":"2013"},{"key":"10.1016\/j.comnet.2026.112176_bib0042","series-title":"Proceedings of the Second International Conference on Knowledge Discovery and Data Mining","first-page":"226-231","article-title":"A density-Based algorithm for discovering clusters in large spatial databases with noise","author":"Ester","year":"1996"},{"issue":"6","key":"10.1016\/j.comnet.2026.112176_bib0043","doi-asserted-by":"crossref","first-page":"1389","DOI":"10.1002\/j.1538-7305.1957.tb01515.x","article-title":"Shortest connection networks and some generalizations","volume":"36","author":"Prim","year":"1957","journal-title":"Bell Syst. Tech. J."},{"key":"10.1016\/j.comnet.2026.112176_bib0044","unstructured":"comma.ai, OpenDBC: Open-source vehicle database, 2025, (GitHub repository). Accessed: 2025-12-07, https:\/\/github.com\/commaai\/opendbc."},{"key":"10.1016\/j.comnet.2026.112176_bib0045","unstructured":"D. Murzinov, awesome-automotive-CAN-ID, 2025, (GitHub repository). Accessed: 2025-12-07, https:\/\/github.com\/iDoka\/awesome-automotive-can-id."},{"issue":"4","key":"10.1016\/j.comnet.2026.112176_bib0046","doi-asserted-by":"crossref","first-page":"267","DOI":"10.1007\/BF02289263","article-title":"Who belongs in the family?","volume":"18","author":"Thorndike","year":"1953","journal-title":"Psychometrika"},{"key":"10.1016\/j.comnet.2026.112176_bib0047","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3068335","article-title":"DBSCAN Revisited, revisited","volume":"42","author":"Schubert","year":"2017","journal-title":"ACM Trans. Database Syst. (TODS)"},{"issue":"383","key":"10.1016\/j.comnet.2026.112176_bib0048","doi-asserted-by":"crossref","first-page":"553","DOI":"10.1080\/01621459.1983.10478008","article-title":"A method for comparing two hierarchical clusterings","volume":"78","author":"Fowlkes","year":"1983","journal-title":"J. Am. Stat. Assoc."},{"key":"10.1016\/j.comnet.2026.112176_bib0049","unstructured":"D. Company, Operator\u2019s Manual OMPFP13250: CANBUS Theory of Operation, 2013, (http:\/\/manuals.deere.com\/omview\/OMPFP13250_19\/RW00482,000018D_19_20130516.html). Accessed: 2026-01-26."},{"key":"10.1016\/j.comnet.2026.112176_bib0050","unstructured":"FixMyCarInfo.com, Hyundai Tucson \/ ix35 2 (LM) (2012) \u2013 Wiring Diagrams, 2025, https:\/\/fixmycarinfo.com\/hyundai\/tucson-ix35\/hyundai-tucson-ix35-2-lm-2012-wiring-diagrams\/."},{"key":"10.1016\/j.comnet.2026.112176_bib0051","series-title":"The SMART Retrieval System: Experiments in Automatic Document Processing","article-title":"Relevance feedback in information retrieval","author":"Rocchio","year":"1971"},{"key":"10.1016\/j.comnet.2026.112176_bib0052","series-title":"NDSS","first-page":"1","article-title":"Evading voltage-Based intrusion detection on automotive CAN","author":"Bhatia","year":"2021"},{"key":"10.1016\/j.comnet.2026.112176_bib0053","doi-asserted-by":"crossref","first-page":"15521","DOI":"10.1109\/ACCESS.2019.2892961","article-title":"Can id shuffling technique (cist): moving target defense strategy for protecting in-vehicle can","volume":"7","author":"Woo","year":"2019","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112176_bib0054","unstructured":"N. Semiconductors, TJA1042: High-speed CAN Transceiver with Standby Mode, rev. 11 edition, 2023. Product data sheet, 16 January 2023, https:\/\/www.nxp.com\/docs\/en\/data-sheet\/TJA1042.pdf."}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S138912862600188X?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S138912862600188X?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,4,14]],"date-time":"2026-04-14T03:20:10Z","timestamp":1776136810000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S138912862600188X"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5]]},"references-count":54,"alternative-id":["S138912862600188X"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112176","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,5]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Efficient voltage-based intrusion detection for in-vehicle networks: From density clustering to centroid classification","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112176","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Author(s). Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"112176"}}