{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,27]],"date-time":"2026-09-27T22:12:28Z","timestamp":1790547148743,"version":"4.1.0"},"reference-count":46,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2024,4,8]],"date-time":"2024-04-08T00:00:00Z","timestamp":1712534400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"},{"start":{"date-parts":[[2024,4,8]],"date-time":"2024-04-08T00:00:00Z","timestamp":1712534400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci Rep"],"abstract":"<jats:title>Abstract<\/jats:title><jats:p>The development of Intrusion Detection Systems (IDS) for in-vehicle buses has gained a lot of momentum in recent years as the number of reported vulnerabilities and the degree of interconnectivity for modern vehicles are on the rise. Since intrusion detection is resource consuming, it can be performed on computationally capable Android head units that are now present inside vehicles. Moreover, these units are connected to the internet, which enables the use of more complex algorithms that run in cloud environments. In this work we develop one such approach: an IDS that consists of a locally installed copy, running on head units, and a centralized instance of it that runs in the cloud and monitors traffic for groups of similar vehicles. Additionally, the centralized instance is part of a cloud service for intrusion detection which is continuously updated with the most recent types of attacks. The classification results of the cloud-based service are further analyzed by an incident response team which confirms the presence of known attacks, analyzes new types of attacks and assesses their impact. The output of this activity is stored on the Blockchain as ISO\/SAE 21434 compliant reports, ensuring the transparency and traceability of the reported incidents.<\/jats:p>","DOI":"10.1038\/s41598-024-58694-4","type":"journal-article","created":{"date-parts":[[2024,4,8]],"date-time":"2024-04-08T09:01:43Z","timestamp":1712566903000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO\/SAE 21434 compliant reporting"],"prefix":"10.1038","volume":"14","author":[{"given":"Tudor","family":"Andreica","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Adrian","family":"Musuroi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alfred","family":"Anistoroaei","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Camil","family":"Jichici","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bogdan","family":"Groza","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,4,8]]},"reference":[{"key":"58694_CR1","unstructured":"ISO\/SAE 21434:2021 Road vehicles\u2014Cybersecurity engineering. Standard, 1st edition, International Organization for Standardization (2021)."},{"key":"58694_CR2","unstructured":"AUTOSAR. Specification of Secure Onboard Communication (2020)."},{"key":"58694_CR3","unstructured":"AUTOSAR. Specification of Intrusion Detection System Protocol (2020)."},{"key":"58694_CR4","unstructured":"Nie, S., Liu, L. & Du, Y. Free-fall: Hacking tesla from wireless to can bus. Black Hat USA 25, 1\u201316 (2017)."},{"key":"58694_CR5","unstructured":"Nie, S., Liu, L. & Zhang, W. Over-the-air: How we remotely compromised the gateway, bcm, and autopilot ecus of tesla cars. Black Hat USA (2018)."},{"key":"58694_CR6","unstructured":"Checkoway, S. et al. Comprehensive experimental analyses of automotive attack surfaces. In USENIX Security Symposium (San Francisco, 2011)."},{"key":"58694_CR7","unstructured":"Miller, C. & Valasek, C. A survey of remote automotive attack surfaces. Black Hat USA (2014)."},{"key":"58694_CR8","unstructured":"Aliwa, E., Rana, O., Perera, C. & Burnap, P. Cyberattacks and Countermeasures For In-Vehicle Networks. arXiv e-prints arXiv:2004.10781 (2020). 2004.10781."},{"key":"58694_CR9","doi-asserted-by":"publisher","DOI":"10.1145\/3056506","author":"B Groza","year":"2017","unstructured":"Groza, B., Murvay, S., Herrewege, A. V. & Verbauwhede, I. Libra-can: Lightweight broadcast authentication for controller area networks. ACM Trans. Embed. Comput. Syst. https:\/\/doi.org\/10.1145\/3056506 (2017).","journal-title":"ACM Trans. Embed. Comput. Syst."},{"key":"58694_CR10","doi-asserted-by":"publisher","unstructured":"Farag, W. A. Cantrack: Enhancing automotive can bus security using intuitive encryption algorithms. In 2017 7th International Conference on Modeling, Simulation, and Applied Optimization (ICMSAO), 1\u20135. https:\/\/doi.org\/10.1109\/ICMSAO. 2017.7934878 (2017).","DOI":"10.1109\/ICMSAO"},{"key":"58694_CR11","doi-asserted-by":"crossref","unstructured":"Macher, G., Schmittner, C., Veledar, O. & Brenner, E. ISO\/SAE DIS 21434 automotive cybersecurity standard-in a nutshell. In International Conference on Computer Safety, Reliability, and Security, 123\u2013135 (Springer, 2020).","DOI":"10.1007\/978-3-030-55583-2_9"},{"key":"58694_CR12","doi-asserted-by":"crossref","unstructured":"Schmittner, C., Schrammel, B. & K\u00f6nig, S. Asset driven ISO\/SAE 21434 compliant automotive cybersecurity analysis with threatget. In European Conference on Software Process Improvement, 548\u2013563 (Springer, 2021).","DOI":"10.1007\/978-3-030-85521-5_36"},{"key":"58694_CR13","doi-asserted-by":"crossref","unstructured":"P\u00fcllen, D., Liske, J. & Katzenbeisser, S. ISO\/SAE 21434-based risk assessment of security incidents in automated road vehicles. In International Conference on Computer Safety, Reliability, and Security, 82\u201397 (Springer, 2021).","DOI":"10.1007\/978-3-030-83903-1_6"},{"key":"58694_CR14","doi-asserted-by":"crossref","unstructured":"Plappert, C. et al. Attack surface assessment for cybersecurity engineering in the automotive domain. In 2021 29th Euromicro International Conference on Parallel, Distributed and Network-Based Processing (PDP), 266\u2013275 (IEEE, 2021).","DOI":"10.1109\/PDP52278.2021.00050"},{"key":"58694_CR15","doi-asserted-by":"crossref","unstructured":"Narayanan, S. N., Mittal, S. & Joshi, A. Obd_securealert: An anomaly detection system for vehicles. In Smart Computing (SMARTCOMP), 2016 IEEE International Conference on, 1\u20136 (IEEE, 2016).","DOI":"10.1109\/SMARTCOMP.2016.7501710"},{"key":"58694_CR16","doi-asserted-by":"publisher","first-page":"1037","DOI":"10.1109\/TIFS.2018.2869351","volume":"14","author":"B Groza","year":"2019","unstructured":"Groza, B. & Murvay, P. Efficient intrusion detection with bloom filtering in controller area networks. IEEE Trans. Inf. Forensics Secur. 14, 1037\u20131051 (2019).","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"58694_CR17","doi-asserted-by":"crossref","unstructured":"M\u00fcter, M. & Asaj, N. Entropy-based anomaly detection for in-vehicle networks. In Intelligent Vehicles Symposium (IV), 2011 IEEE, 1110\u20131115 (IEEE, 2011).","DOI":"10.1109\/IVS.2011.5940552"},{"key":"58694_CR18","doi-asserted-by":"crossref","unstructured":"Marchetti, M., Stabili, D., Guido, A. & Colajanni, M. Evaluation of anomaly detection for in-vehicle networks through information-theoretic algorithms. In 2016 IEEE 2nd International Forum on Research and Technologies for Society and Industry Leveraging a better tomorrow (RTSI), 1\u20136 (IEEE, 2016).","DOI":"10.1109\/RTSI.2016.7740627"},{"key":"58694_CR19","doi-asserted-by":"crossref","unstructured":"Lee, H., Jeong, S. H. & Kim, H. K. Otids: A novel intrusion detection system for in-vehicle network by using remote frame. In 2017 15th Annual Conference on Privacy, Security and Trust (PST), 57\u20135709 (IEEE, 2017).","DOI":"10.1109\/PST.2017.00017"},{"key":"58694_CR20","doi-asserted-by":"publisher","first-page":"14721","DOI":"10.1007\/s10586-018-2385-7","volume":"22","author":"L Gao","year":"2019","unstructured":"Gao, L., Li, F., Xu, X. & Liu, Y. Intrusion detection system using soeks and deep learning for in-vehicle security. Clust. Comput. 22, 14721\u201314729 (2019).","journal-title":"Clust. Comput."},{"key":"58694_CR21","doi-asserted-by":"publisher","first-page":"6295","DOI":"10.1038\/s41598-022-10200-4","volume":"12","author":"R Hu","year":"2022","unstructured":"Hu, R., Wu, Z., Xu, Y. & Lai, T. Multi-attack and multi-classification intrusion detection for vehicle-mounted networks based on mosaic-coded convolutional neural network. Sci. Rep. 12, 6295. https:\/\/doi.org\/10.1038\/s41598-022-10200-4 (2022).","journal-title":"Sci. Rep."},{"key":"58694_CR22","doi-asserted-by":"crossref","unstructured":"Berger, I., Rieke, R., Kolomeets, M., Chechulin, A. & Kotenko, I. Comparative study of machine learning methods for in-vehicle intrusion detection. In CyberICPS\/SECPRE@ESORICS (2018).","DOI":"10.1007\/978-3-030-12786-2_6"},{"key":"58694_CR23","doi-asserted-by":"publisher","first-page":"119","DOI":"10.1016\/j.ins.2020.05.130","volume":"547","author":"X Li","year":"2021","unstructured":"Li, X., Hu, Z., Xu, M., Wang, Y. & Ma, J. Transfer learning based intrusion detection scheme for internet of vehicles. Inf. Sci. 547, 119\u2013135. https:\/\/doi.org\/10.1016\/j.ins.2020.05.130 (2021).","journal-title":"Inf. Sci."},{"key":"58694_CR24","doi-asserted-by":"publisher","first-page":"1913","DOI":"10.1109\/TNSM.2020.3038991","volume":"18","author":"S Longari","year":"2021","unstructured":"Longari, S., Nova Valcarcel, D. H., Zago, M., Carminati, M. & Zanero, S. Cannolo: An anomaly detection system based on lstm autoencoders for controller area network. IEEE Trans. Netw. Serv. Manag. 18, 1913\u20131924. https:\/\/doi.org\/10.1109\/TNSM.2020.3038991 (2021).","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"58694_CR25","doi-asserted-by":"publisher","DOI":"10.1109\/TIA.2020.3005062","author":"A Kavousi-Fard","year":"2020","unstructured":"Kavousi-Fard, A., Jin, T., Su, W. & Parsa, N. An effective anomaly detection model for securing communications in electric vehicles. IEEE Trans. Ind. Appl. https:\/\/doi.org\/10.1109\/TIA.2020.3005062 (2020).","journal-title":"IEEE Trans. Ind. Appl."},{"key":"58694_CR26","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2022.3151712","author":"C Jichici","year":"2022","unstructured":"Jichici, C., Groza, B., Ragobete, R., Murvay, P.-S. & Andreica, T. Effective intrusion detection and prevention for the commercial vehicle sae j1939 can bus. IEEE Trans. Intell. Transp. Syst. https:\/\/doi.org\/10.1109\/TITS.2022.3151712 (2022).","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"58694_CR27","doi-asserted-by":"publisher","first-page":"102593","DOI":"10.1109\/ACCESS.2021.3094365","volume":"9","author":"I Aliyu","year":"2021","unstructured":"Aliyu, I., Feliciano, M. C., Van Engelenburg, S., Kim, D. O. & Lim, C. G. A blockchain-based federated forest for sdn-enabled in-vehicle network intrusion detection system. IEEE Access 9, 102593\u2013102608. https:\/\/doi.org\/10.1109\/ACCESS.2021.3094365 (2021).","journal-title":"IEEE Access"},{"key":"58694_CR28","doi-asserted-by":"publisher","first-page":"3491","DOI":"10.1109\/ACCESS.2017.2782159","volume":"6","author":"G Loukas","year":"2017","unstructured":"Loukas, G. et al. Cloud-based cyber-physical intrusion detection for vehicles using deep learning. IEEE Access 6, 3491\u20133508 (2017).","journal-title":"IEEE Access"},{"key":"58694_CR29","doi-asserted-by":"publisher","first-page":"184","DOI":"10.1186\/s13638-019-1484-3","volume":"2019","author":"S-F Lokman","year":"2019","unstructured":"Lokman, S.-F., Othman, A. T. & Abu-Bakar, M.-H. Intrusion detection system for automotive controller area network (can) bus system: A review. EURASIP J. Wirel. Commun. Netw. 2019, 184 (2019).","journal-title":"EURASIP J. Wirel. Commun. Netw."},{"key":"58694_CR30","doi-asserted-by":"publisher","first-page":"919","DOI":"10.1109\/TITS.2019.2908074","volume":"21","author":"W Wu","year":"2020","unstructured":"Wu, W. et al. A survey of intrusion detection for in-vehicle networks. IEEE Trans. Intell. Transp. Syst. 21, 919\u2013933. https:\/\/doi.org\/10.1109\/TITS.2019.2908074 (2020).","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"58694_CR31","doi-asserted-by":"publisher","first-page":"162401","DOI":"10.1109\/ACCESS.2021.3130495","volume":"9","author":"AA Elkhail","year":"2021","unstructured":"Elkhail, A. A. et al. Vehicle security: A survey of security issues and vulnerabilities, malware attacks and defenses. IEEE Access 9, 162401\u2013162437. https:\/\/doi.org\/10.1109\/ACCESS.2021.3130495 (2021).","journal-title":"IEEE Access"},{"key":"58694_CR32","doi-asserted-by":"publisher","DOI":"10.3390\/electronics11071072","author":"G Karopoulos","year":"2022","unstructured":"Karopoulos, G., Kambourakis, G., Chatzoglou, E., Hern\u00e1ndez-Ramos, J. L. & Kouliaridis, V. Demystifying in-vehicle intrusion detection systems: A survey of surveys and a meta-taxonomy. Electronics https:\/\/doi.org\/10.3390\/electronics11071072 (2022).","journal-title":"Electronics"},{"key":"58694_CR33","unstructured":"Oham, C., Kanhere, S. S., Jurdak, R. & Jha, S. A blockchain based liability attribution framework for autonomous vehicles. arXiv preprint arXiv:1802.05050 (2018)."},{"key":"58694_CR34","doi-asserted-by":"crossref","unstructured":"Ugwu, M. C., Okpala, I. U., Oham, C. I. & Nwakanma, C. I. A tiered blockchain framework for vehicular forensics. Int. J. Netw. Secur. Appl. (IJNSA) 10 (2018).","DOI":"10.5121\/ijnsa.2018.10503"},{"key":"58694_CR35","doi-asserted-by":"crossref","unstructured":"Guo, H., Meamari, E. & Shen, C.-C. Blockchain-inspired event recording system for autonomous vehicles. In 2018 1st IEEE International Conference on Hot Information-Centric Networking (HotICN), 218\u2013222 (IEEE, 2018).","DOI":"10.1109\/HOTICN.2018.8606016"},{"key":"58694_CR36","doi-asserted-by":"publisher","first-page":"390","DOI":"10.1016\/j.procir.2020.05.256","volume":"97","author":"M Kuhn","year":"2021","unstructured":"Kuhn, M., Funk, F. & Franke, J. Blockchain architecture for automotive traceability. Procedia Cirp 97, 390\u2013395 (2021).","journal-title":"Procedia Cirp"},{"key":"58694_CR37","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102670","author":"T Moulahi","year":"2022","unstructured":"Moulahi, T. et al. Privacy-preserving federated learning cyber-threat detection for intelligent transport systems with blockchain-based security. Expert. Syst. https:\/\/doi.org\/10.1016\/j.jisa.2020.102670 (2022).","journal-title":"Expert. Syst."},{"key":"58694_CR38","doi-asserted-by":"publisher","DOI":"10.1109\/TEM.2021.3131044","author":"T-M Choi","year":"2022","unstructured":"Choi, T.-M. & Shi, X. On-demand ride-hailing service platforms with hired drivers during coronavirus (covid-19) outbreak: Can blockchain help. IEEE Trans. Eng. Manag. https:\/\/doi.org\/10.1109\/TEM.2021.3131044 (2022).","journal-title":"IEEE Trans. Eng. Manag."},{"key":"58694_CR39","doi-asserted-by":"publisher","first-page":"9388","DOI":"10.1038\/s41598-022-11741-4","volume":"12","author":"X Wan","year":"2022","unstructured":"Wan, X., Liu, J. & Zhao, S. Evolutionary game study on the governance and development of online car-hailing based on blockchain technology. Sci. Rep. 12, 9388. https:\/\/doi.org\/10.1038\/s41598-022-11741-4 (2022).","journal-title":"Sci. Rep."},{"key":"58694_CR40","doi-asserted-by":"publisher","first-page":"1397","DOI":"10.1109\/TETC.2020.3033532","volume":"9","author":"H Zhang","year":"2021","unstructured":"Zhang, H., Liu, J., Zhao, H., Wang, P. & Kato, N. Blockchain-based trust management for internet of vehicles. IEEE Trans. Emerg. Top. Comput. 9, 1397\u20131409. https:\/\/doi.org\/10.1109\/TETC.2020.3033532 (2021).","journal-title":"IEEE Trans. Emerg. Top. Comput."},{"key":"58694_CR41","doi-asserted-by":"publisher","first-page":"16928","DOI":"10.1109\/JIOT.2022.3142251","volume":"9","author":"Y Tan","year":"2022","unstructured":"Tan, Y., Wang, J., Liu, J. & Kato, N. Blockchain-assisted distributed and lightweight authentication service for industrial unmanned aerial vehicles. IEEE Internet Things J. 9, 16928\u201316940. https:\/\/doi.org\/10.1109\/JIOT.2022.3142251 (2022).","journal-title":"IEEE Internet Things J."},{"key":"58694_CR42","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2020.102670","volume":"55","author":"R Ch","year":"2020","unstructured":"Ch, R., Srivastava, G., Reddy Gadekallu, T., Maddikunta, P. K. R. & Bhattacharya, S. Security and privacy of uav data using blockchain technology. J. Inf. Secur. Appl. 55, 102670. https:\/\/doi.org\/10.1016\/j.jisa.2020.102670 (2020).","journal-title":"J. Inf. Secur. Appl."},{"key":"58694_CR43","doi-asserted-by":"publisher","unstructured":"Akram, J., Akram, A., Jhaveri, R. H., Alazab, M. & Chi, H. Bc-iodt: Blockchain-based framework for authentication in internet of drone things. In Proceedings of the 5th International ACM Mobicom Workshop on Drone Assisted Wireless Communications for 5G and Beyond, DroneCom \u201922, 115\u2013120 (Association for Computing Machinery, 2022).. https:\/\/doi.org\/10.1145\/3555661.3560874","DOI":"10.1145\/3555661.3560874"},{"key":"58694_CR44","doi-asserted-by":"publisher","first-page":"12937","DOI":"10.1038\/s41598-022-17043-z","volume":"12","author":"RF Mansour","year":"2022","unstructured":"Mansour, R. F. Artificial intelligence based optimization with deep learning model for blockchain enabled intrusion detection in cps environment. Sci. Rep. 12, 12937. https:\/\/doi.org\/10.1038\/s41598-022-17043-z (2022).","journal-title":"Sci. Rep."},{"key":"58694_CR45","doi-asserted-by":"publisher","DOI":"10.1016\/j.vehcom.2018.09.004","author":"M Han","year":"2018","unstructured":"Han, M., Kwak, B.-I. & Kim, H. K. Anomaly intrusion detection method for vehicular networks based on survival analysis. Veh. Commun. https:\/\/doi.org\/10.1016\/j.vehcom.2018.09.004 (2018).","journal-title":"Veh. Commun."},{"key":"58694_CR46","unstructured":"Buterin, V. et al. Ethereum: A next-generation smart contract and decentralized application platform (2014)."}],"container-title":["Scientific Reports"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.nature.com\/articles\/s41598-024-58694-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-024-58694-4","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-024-58694-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,4,8]],"date-time":"2024-04-08T09:05:54Z","timestamp":1712567154000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.nature.com\/articles\/s41598-024-58694-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,4,8]]},"references-count":46,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2024,12]]}},"alternative-id":["58694"],"URL":"https:\/\/doi.org\/10.1038\/s41598-024-58694-4","relation":{},"ISSN":["2045-2322"],"issn-type":[{"value":"2045-2322","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,4,8]]},"assertion":[{"value":"24 August 2022","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 March 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 April 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare no competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"8169"}}