{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T11:27:56Z","timestamp":1780054076648,"version":"3.54.0"},"reference-count":258,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"},{"start":{"date-parts":[[2021,1,1]],"date-time":"2021-01-01T00:00:00Z","timestamp":1609459200000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1947580"],"award-info":[{"award-number":["CNS-1947580"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-2035770"],"award-info":[{"award-number":["CNS-2035770"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Deputyship for Research and Innovation, Ministry of Education in the Kingdom of Saudi Arabia","award":["DRI-KSU-934"],"award-info":[{"award-number":["DRI-KSU-934"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2021]]},"DOI":"10.1109\/access.2021.3130495","type":"journal-article","created":{"date-parts":[[2021,11,23]],"date-time":"2021-11-23T21:30:41Z","timestamp":1637703041000},"page":"162401-162437","source":"Crossref","is-referenced-by-count":80,"title":["Vehicle Security: A Survey of Security Issues and Vulnerabilities, Malware Attacks and Defenses"],"prefix":"10.1109","volume":"9","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-6199-6468","authenticated-orcid":false,"given":"Abdulrahman Abu","family":"Elkhail","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3812-3244","authenticated-orcid":false,"given":"Rafi Ud Daula","family":"Refat","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4071-9004","authenticated-orcid":false,"given":"Ricardo","family":"Habre","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8855-6158","authenticated-orcid":false,"given":"Azeem","family":"Hafeez","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6711-1280","authenticated-orcid":false,"given":"Anys","family":"Bacha","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6006-3888","authenticated-orcid":false,"given":"Hafiz","family":"Malik","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref170","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1228"},{"key":"ref172","doi-asserted-by":"publisher","DOI":"10.14429\/dsj.66.9701"},{"key":"ref171","doi-asserted-by":"publisher","DOI":"10.22619\/IJCSA.2016.1001011"},{"key":"ref174","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.10.007"},{"key":"ref173","doi-asserted-by":"publisher","DOI":"10.1109\/TETCI.2017.2699220"},{"key":"ref176","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2020.113581"},{"key":"ref175","doi-asserted-by":"publisher","DOI":"10.1109\/BigData47090.2019.9006464"},{"key":"ref178","doi-asserted-by":"publisher","DOI":"10.1145\/2020408.2020448"},{"key":"ref177","doi-asserted-by":"publisher","DOI":"10.25008\/ijadis.v1i1.176"},{"key":"ref168","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.10.004"},{"key":"ref169","doi-asserted-by":"publisher","DOI":"10.1002\/sec.902"},{"key":"ref39","year":"2018","journal-title":"Bleepingcomputer Report"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.vehcom.2017.10.002"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.3390\/info10040148"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1016\/S0921-8890(99)00125-6"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2002.802926"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.20485\/jsaeijae.8.1_1"},{"key":"ref36","article-title":"On board diagnostics: Risks and vulnerabilities of the connected vehicle","volume":"10","author":"klinedinst","year":"2016"},{"key":"ref35","first-page":"260","article-title":"Adventures in automotive networks and control units","author":"valasek","year":"2013","journal-title":"Proc DEF CON"},{"key":"ref34","article-title":"Threats and countermeasures of cyber security in direct and remote vehicle communication systems","author":"bharati","year":"2020","journal-title":"arXiv 2006 08723"},{"key":"ref181","first-page":"4357","article-title":"Cloud-based malware analysis system for mobile applications","volume":"16","author":"kim","year":"2013","journal-title":"Information"},{"key":"ref180","doi-asserted-by":"publisher","DOI":"10.1145\/2420950.2420983"},{"key":"ref185","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2017.2687918"},{"key":"ref184","doi-asserted-by":"publisher","DOI":"10.1145\/2924715.2924719"},{"key":"ref183","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-28865-9_9"},{"key":"ref182","doi-asserted-by":"publisher","DOI":"10.1109\/CTS.2014.6867562"},{"key":"ref189","doi-asserted-by":"publisher","DOI":"10.1016\/j.simpat.2021.102391"},{"key":"ref188","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-019-00447-w"},{"key":"ref187","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2018.12.005"},{"key":"ref186","doi-asserted-by":"publisher","DOI":"10.1109\/PAC.2018.00011"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/RADAR.2008.4720794"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2012.2184729"},{"key":"ref179","first-page":"1","article-title":"Malware detection based on cloud computing integrating intrusion ontology representation","author":"mart\u00ednez","year":"2010","journal-title":"Proc IEEE Latin-Amer Conf Commun"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2014.6957663"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2016.2541862"},{"key":"ref22","first-page":"1","article-title":"Introduction to the controller area network (CAN)","author":"corrigan","year":"2002"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2013.SUP.0513036"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/s00287-010-0506-7"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/FPL.2009.5272532"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/WF-IoT.2018.8355132"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1088\/1757-899X\/149\/1\/012141"},{"key":"ref50","first-page":"1","article-title":"Free-fall: Hacking Tesla from wireless to CAN bus","volume":"25","author":"nie","year":"2017","journal-title":"Black Hat Briefings"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2015.7157983"},{"key":"ref154","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2015.2491300"},{"key":"ref153","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-015-0247-x"},{"key":"ref156","article-title":"Malware detection approach for Android systems using system call logs","author":"chaba","year":"2017","journal-title":"arXiv 1709 08805"},{"key":"ref155","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-016-0267-1"},{"key":"ref150","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.09.006"},{"key":"ref152","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2014.10.004"},{"key":"ref151","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2014.6968547"},{"key":"ref146","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-011-0152-x"},{"key":"ref147","first-page":"85","article-title":"Behavioural detection with API call-grams to identify malicious PE files","author":"faruki","year":"2012","journal-title":"Proc SecurIT"},{"key":"ref148","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2013.08.008"},{"key":"ref149","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-013-0181-8"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-006-0012-2"},{"key":"ref58","year":"2017","journal-title":"Threatpost Report"},{"key":"ref57","year":"2016","journal-title":"Autoblog Report"},{"key":"ref56","year":"2017","journal-title":"Guide to LTE Security"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1016\/j.vehcom.2018.01.008"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1049\/cp.2018.0046"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ITSC.2015.176"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.5121\/csit.2017.71508"},{"key":"ref40","year":"2016","journal-title":"Latimes Report"},{"key":"ref167","doi-asserted-by":"publisher","DOI":"10.1186\/2190-8532-1-1"},{"key":"ref166","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-012-0160-5"},{"key":"ref165","doi-asserted-by":"publisher","DOI":"10.1109\/AIMSEC.2011.6010676"},{"key":"ref164","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-11747-3_3"},{"key":"ref163","doi-asserted-by":"publisher","DOI":"10.1007\/s10844-009-0086-7"},{"key":"ref162","article-title":"Malware variant detection","author":"alzarooni","year":"2012"},{"key":"ref161","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2013.6703680"},{"key":"ref160","doi-asserted-by":"publisher","DOI":"10.1109\/IKT.2013.6620049"},{"key":"ref4","first-page":"1","article-title":"Cybersecurity evaluation of automotive E\/E architectures","author":"ring","year":"2018","journal-title":"Proc ACM Comput Sci Cars Symp (CSCS)"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1002\/9781118452189"},{"key":"ref6","first-page":"1","article-title":"Relay attacks on passive keyless entry and start systems in modern cars","author":"francillon","year":"2011","journal-title":"Proc Network and Distributed System Security Symp (NDSS)"},{"key":"ref5","article-title":"Scientist banned from revealing codes used to start luxury cars","volume":"27","author":"o\u2019carroll","year":"2013","journal-title":"Guardian"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/DSNW.2013.6615528"},{"key":"ref159","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2020.02.002"},{"key":"ref7","first-page":"1","article-title":"Security and privacy vulnerabilities of in-car wireless networks: A tire pressure monitoring system case study","volume":"10","author":"rouf","year":"2010","journal-title":"Proc Usenix Secur Symp"},{"key":"ref49","article-title":"An overview of attacks and defences on intelligent connected vehicles","author":"dibaei","year":"2019","journal-title":"arXiv 1907 07455"},{"key":"ref157","doi-asserted-by":"publisher","DOI":"10.14419\/ijet.v7i4.15.21431"},{"key":"ref9","article-title":"Hackers reveal nasty new car attacks–with me behind the wheel","author":"greenberg","year":"2013"},{"key":"ref158","doi-asserted-by":"publisher","DOI":"10.1109\/DSN-Industry.2019.00010"},{"key":"ref46","first-page":"66","article-title":"Simulated attacks on can buses: Vehicle virus","author":"nilsson","year":"2008","journal-title":"Proc IASTED Int Conf Commun Syst Netw (AsiaCSN)"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2011.5940525"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.12783\/dtcse\/CCNT2018\/24750"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/MNET.2018.1700319"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/s11277-016-3618-9"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/2989275.2989283"},{"key":"ref44","first-page":"109","article-title":"Can you trust autonomous vehicles: Contactless attacks against sensors of self-driving vehicle","volume":"24","author":"yan","year":"2016","journal-title":"DefCon"},{"key":"ref43","first-page":"2015","article-title":"Remote attacks on automated vehicles sensors: Experiments on camera and LiDAR","volume":"11","author":"petit","year":"2015","journal-title":"Proc Black Hat Eur"},{"key":"ref73","first-page":"239","article-title":"Unveiling the kernel: Rootkit discovery using selective automated kernel memory differencing","author":"zaki","year":"2014","journal-title":"Proc Virus Bull Conf"},{"key":"ref72","doi-asserted-by":"publisher","DOI":"10.1002\/sec.166"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/3073559"},{"key":"ref70","author":"edwards","year":"2006","journal-title":"System method and computer program product for preventing spyware\/malware from installing a registry"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.144"},{"key":"ref77","doi-asserted-by":"publisher","DOI":"10.3844\/ajassp.2017.1049.1069"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1109\/IBCAST.2015.7058526"},{"key":"ref75","first-page":"266","article-title":"Malware analysis and detection using data mining and machine learning classification","author":"chowdhury","year":"2017","journal-title":"Proc Int Conf Appl Techn Cyber Secur Intell"},{"key":"ref78","first-page":"998","article-title":"Survey on malware detection methods, 3rd hackers workshop on computer and internet security","volume":"17","author":"laxmi","year":"2015","journal-title":"IEEE Commun Surveys Tuts"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638192"},{"key":"ref60","volume":"22","author":"aycock","year":"2006","journal-title":"Computer Viruses and Malware"},{"key":"ref62","author":"szor","year":"2005","journal-title":"The Art of Computer Virus Research and Defense"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.20"},{"key":"ref63","article-title":"Computer viruses","author":"denning","year":"1988"},{"key":"ref64","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-005-0007-4"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/SMCSIA.2003.1232411"},{"key":"ref66","article-title":"Worm infects millions of computers worldwide","volume":"23","author":"markoff","year":"2009","journal-title":"New York Times"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/948187.948189"},{"key":"ref68","first-page":"412","article-title":"Detecting worms via mining dynamic program execution","author":"wang","year":"2007","journal-title":"Proc 3rd Int Conf Secur Privacy Commun Netw Workshops (SecureComm)"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-59140-991-5.ch020"},{"key":"ref197","doi-asserted-by":"publisher","DOI":"10.23919\/EUSIPCO.2018.8553214"},{"key":"ref198","doi-asserted-by":"publisher","DOI":"10.1109\/ACT.2010.33"},{"key":"ref199","doi-asserted-by":"publisher","DOI":"10.1145\/2016904.2016908"},{"key":"ref193","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3077498"},{"key":"ref194","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2020.3048791"},{"key":"ref195","doi-asserted-by":"publisher","DOI":"10.4236\/jis.2014.52006"},{"key":"ref196","article-title":"Adversarial perturbations against deep neural networks for malware classification","author":"grosse","year":"2016","journal-title":"arXiv 1606 04435"},{"key":"ref95","year":"2013","journal-title":"Malware Affecting Linux Web Servers Major Trend"},{"key":"ref190","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2021.107095"},{"key":"ref94","year":"2018","journal-title":"The Meet Linux Viruses Report"},{"key":"ref191","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2021.108394"},{"key":"ref93","doi-asserted-by":"publisher","DOI":"10.1109\/ICCSP48568.2020.9182292"},{"key":"ref192","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2021.3087316"},{"key":"ref92","doi-asserted-by":"publisher","DOI":"10.1109\/ICICT48043.2020.9112556"},{"key":"ref91","doi-asserted-by":"publisher","DOI":"10.1145\/2089125.2089126"},{"key":"ref90","first-page":"69","article-title":"Malware threats and mitigation strategies: A survey","volume":"29","author":"rehman","year":"2011","journal-title":"J Theor Appl Inf Technol"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1016\/j.trc.2016.03.008"},{"key":"ref99","first-page":"6","article-title":"Securing intelligent vehicular ad hoc networks: A survey","author":"ahmed","year":"2017","journal-title":"Advances in Computer Science and Ubiquitous Computing"},{"key":"ref96","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2006.10.002"},{"key":"ref97","year":"2015","journal-title":"Technology News Report"},{"key":"ref82","year":"2018","journal-title":"The McAfee Security Report"},{"key":"ref81","first-page":"1","article-title":"Wanna drive? Feasible attack paths and effective protection against ransomware in modern vehicles","author":"wolf","year":"2017","journal-title":"Proc Embedded Secur Cars Conf (ESCAR) Eur"},{"key":"ref84","doi-asserted-by":"publisher","DOI":"10.14257\/ijca.2018.11.9.07"},{"key":"ref83","year":"2018","journal-title":"Boston 25 News Report"},{"key":"ref80","first-page":"10","article-title":"Ransomware: Evolution, mitigation and prevention","volume":"13","author":"richardson","year":"2017","journal-title":"International Journal of Management Reviews"},{"key":"ref89","first-page":"413","article-title":"Dark firmware: A systematic approach to exploring application security risks in the presence of untrusted firmware","author":"ibdah","year":"2020","journal-title":"Proc 23rd Int Symp Res Attacks Intrusions Defenses (RAID)"},{"key":"ref85","year":"2020","journal-title":"IBM Security report"},{"key":"ref86","year":"0","journal-title":"Washington and California Universities Report"},{"key":"ref87","year":"2020","journal-title":"The University of Leuven Research Report"},{"key":"ref88","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-5225-4100-4.ch008"},{"key":"ref200","doi-asserted-by":"publisher","DOI":"10.1145\/2381896.2381900"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.1109\/CCWC.2017.7868416"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.5121\/ijans.2014.4201"},{"key":"ref209","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2017.04.044"},{"key":"ref203","doi-asserted-by":"publisher","DOI":"10.1145\/2619239.2631434"},{"key":"ref204","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2015.7413680"},{"key":"ref201","doi-asserted-by":"publisher","DOI":"10.1145\/2487575.2488219"},{"key":"ref202","doi-asserted-by":"publisher","DOI":"10.1109\/ICASSP.2013.6638293"},{"key":"ref207","first-page":"438","article-title":"DeepFlow: Deep learning-based malware detection by mining Android application for abnormal usage of sensitive data","author":"zhu","year":"2017","journal-title":"Proc IEEE Symp Comput Commun (ISCC)"},{"key":"ref208","doi-asserted-by":"publisher","DOI":"10.1080\/19361610.2018.1387734"},{"key":"ref205","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2014.06.001"},{"key":"ref206","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2016.09.041"},{"key":"ref211","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2019.8715080"},{"key":"ref210","doi-asserted-by":"publisher","DOI":"10.1109\/AIKE.2018.00041"},{"key":"ref212","doi-asserted-by":"publisher","DOI":"10.1109\/LOCS.2019.2918091"},{"key":"ref213","doi-asserted-by":"publisher","DOI":"10.1109\/CCOMS.2019.8821665"},{"key":"ref214","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2896003"},{"key":"ref215","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3038453"},{"key":"ref216","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2018.09.102"},{"key":"ref217","doi-asserted-by":"publisher","DOI":"10.1145\/3386263.3407585"},{"key":"ref218","doi-asserted-by":"publisher","DOI":"10.1109\/LES.2020.3035875"},{"key":"ref219","doi-asserted-by":"publisher","DOI":"10.1007\/s11265-020-01588-1"},{"key":"ref220","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2021.03.105"},{"key":"ref222","doi-asserted-by":"publisher","DOI":"10.1109\/ICOIN.2016.7427089"},{"key":"ref221","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-021-00386-y"},{"key":"ref229","doi-asserted-by":"publisher","DOI":"10.1109\/WIFS.2017.8267643"},{"key":"ref228","first-page":"911","article-title":"Fingerprinting electronic control units for vehicle intrusion detection","author":"cho","year":"2016","journal-title":"Proc 25th USENIX Secur Symp (USENIX Security)"},{"key":"ref227","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2013.2239301"},{"key":"ref226","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecurity.2012.7"},{"key":"ref225","first-page":"1","article-title":"CANAuth—A simple, backward compatible broadcast authentication protocol for can bus","author":"van herrewege","year":"2011","journal-title":"Proc ECRYPT Workshop Lightweight Cryptogr"},{"key":"ref224","doi-asserted-by":"publisher","DOI":"10.1109\/IVS.2011.5940552"},{"key":"ref223","doi-asserted-by":"publisher","DOI":"10.1109\/ISIAS.2010.5604050"},{"key":"ref127","doi-asserted-by":"publisher","DOI":"10.1109\/ICC.2015.7249229"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1109\/ISIAS.2015.7492756"},{"key":"ref125","doi-asserted-by":"publisher","DOI":"10.1109\/CC.2014.7022530"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1145\/2508148.2485970"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.1109\/SECON.2016.7506685"},{"key":"ref128","first-page":"597","article-title":"DroidClassifier: Efficient adaptive mining of application-layer header for classifying Android malware","author":"li","year":"2016","journal-title":"Proc Int Conf Secur Privacy Commun Syst"},{"key":"ref130","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2016.7888730"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-017-9539-8"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.5815\/ijmsc.2019.03.05"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2016.01.002"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2016.11.011"},{"key":"ref232","doi-asserted-by":"publisher","DOI":"10.1145\/3416014.3424581"},{"key":"ref233","doi-asserted-by":"publisher","DOI":"10.3390\/fi12070119"},{"key":"ref230","doi-asserted-by":"publisher","DOI":"10.1109\/FUZZ-IEEE.2017.8015464"},{"key":"ref231","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2017.02.023"},{"key":"ref239","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2020.3025685"},{"key":"ref238","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.2982544"},{"key":"ref235","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2812149"},{"key":"ref234","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3029307"},{"key":"ref237","doi-asserted-by":"publisher","DOI":"10.1109\/GLOCOM.2008.ECP.369"},{"key":"ref236","doi-asserted-by":"publisher","DOI":"10.1109\/ICCPS.2018.00012"},{"key":"ref136","author":"markit","year":"2017","journal-title":"Vehicles Getting Older Average Age of Light Cars and Trucks in U S"},{"key":"ref135","doi-asserted-by":"publisher","DOI":"10.1109\/AsiaJCIS50894.2020.00033"},{"key":"ref138","author":"cook","year":"2021","journal-title":"Malware Statistics and Facts for 2021"},{"key":"ref137","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653736"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-008-0086-0"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.1109\/LCA.2020.3017457"},{"key":"ref141","doi-asserted-by":"publisher","DOI":"10.1109\/DSN48987.2021.00044"},{"key":"ref142","volume":"103","author":"zhang","year":"2012","journal-title":"Vehicle Safety Communications Protocols Security and Privacy"},{"key":"ref143","doi-asserted-by":"publisher","DOI":"10.1109\/AICCSA.2017.24"},{"key":"ref2","first-page":"447","article-title":"Comprehensive experimental analyses of automotive attack surfaces","volume":"4","author":"checkoway","year":"2011","journal-title":"Proc Usenix Secur Symp"},{"key":"ref144","doi-asserted-by":"publisher","DOI":"10.1109\/NPSEC.2010.5634444"},{"key":"ref1","first-page":"3","article-title":"This car runs on code","volume":"46","author":"charette","year":"2009","journal-title":"IEEE Spectr"},{"key":"ref145","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS.2011.17"},{"key":"ref241","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243840"},{"key":"ref242","author":"olenick","year":"2021","journal-title":"How Conti Ransomware Works"},{"key":"ref243","author":"loman","year":"2019","journal-title":"How the Most Damaging Ransomware Evades IT Security"},{"key":"ref244","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2018.07.007"},{"key":"ref240","first-page":"1627","article-title":"Inadvertently making cyber criminals rich: A comprehensive study of cryptojacking campaigns at internet scale","author":"bijmans","year":"2019","journal-title":"Proc 28th USENIX Secur Symp (USENIX Security)"},{"key":"ref248","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2010.02.015"},{"key":"ref247","doi-asserted-by":"publisher","DOI":"10.1186\/s42400-020-00049-3"},{"key":"ref246","doi-asserted-by":"publisher","DOI":"10.1016\/j.jpdc.2018.04.008"},{"key":"ref245","doi-asserted-by":"publisher","DOI":"10.1109\/ICCCC.2016.7496735"},{"key":"ref249","doi-asserted-by":"publisher","DOI":"10.1016\/j.csi.2017.09.009"},{"key":"ref109","first-page":"1","article-title":"A survey of malware detection techniques","volume":"48","author":"idika","year":"2007","journal-title":"Purdue Univ"},{"key":"ref108","volume":"5","author":"kumar","year":"2006","journal-title":"Managing Cyber Threats Issues Approaches and Challenges"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1109\/PST.2017.00017"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.81"},{"key":"ref105","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813604"},{"key":"ref104","doi-asserted-by":"publisher","DOI":"10.1109\/BigDataSecurity-HPSC-IDS.2019.00013"},{"key":"ref103","year":"2021","journal-title":"Upstream Security Global Automotive Cybersecurity Report"},{"key":"ref102","year":"2019","journal-title":"Operation ShadowHammer"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.05.003"},{"key":"ref112","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2019.2963724"},{"key":"ref110","first-page":"26","article-title":"Computer virus propagation models","author":"serazzi","year":"2003","journal-title":"Proc Int Workshop Modeling Anal Simulation Comput Telecommun Syst"},{"key":"ref250","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2015.06.004"},{"key":"ref251","doi-asserted-by":"publisher","DOI":"10.1109\/TVT.2015.2402166"},{"key":"ref254","doi-asserted-by":"publisher","DOI":"10.1109\/ICTRC.2015.7156440"},{"key":"ref255","doi-asserted-by":"publisher","DOI":"10.4271\/2017-01-1659"},{"key":"ref252","doi-asserted-by":"publisher","DOI":"10.1145\/1614320.1614356"},{"key":"ref253","doi-asserted-by":"publisher","DOI":"10.1016\/0020-0190(83)90029-7"},{"key":"ref257","doi-asserted-by":"publisher","DOI":"10.1016\/j.simpat.2016.08.005"},{"key":"ref256","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2017.2782159"},{"key":"ref10","article-title":"Team of hackers take remote control of Tesla models from 12 miles away","volume":"20","author":"solon","year":"2016","journal-title":"Guardian"},{"key":"ref11","first-page":"91","article-title":"Remote exploitation of an unaltered passenger vehicle","volume":"2015","author":"miller","year":"2015","journal-title":"Black Hat USA"},{"key":"ref258","doi-asserted-by":"publisher","DOI":"10.1109\/ICCW.2015.7247453"},{"key":"ref12","first-page":"39","article-title":"0-days & mitigations: Roadways to exploit and secure connected BMW cars","volume":"2019","author":"cai","year":"2019","journal-title":"Black Hat USA"},{"key":"ref13","article-title":"Toyota’s killer firmware: Bad design and its consequences","volume":"28","author":"dunn","year":"2013","journal-title":"EDN Netw"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.dcan.2020.04.007"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/MVT.2017.2669348"},{"key":"ref16","year":"1983","journal-title":"CAN-Bus Specifications Report"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1145\/2307636.2307663"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2014.2302386"},{"key":"ref117","doi-asserted-by":"publisher","DOI":"10.1016\/j.jnca.2012.09.004"},{"key":"ref18","first-page":"20","article-title":"Can bus Ethernet or FPD-link: Which is best for automotive communications","volume":"1q","author":"sauerwald","year":"2014","journal-title":"Analog Appl J"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1007\/s11431-017-9338-1"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1109\/CADS.2015.7377792"},{"key":"ref114","article-title":"Data mining methods for malware detection","author":"siddiqui","year":"2008"},{"key":"ref113","first-page":"730","article-title":"Detecting can bus intrusion by applying machine learning method to graph based features","author":"refat","year":"2021","journal-title":"Proc SAI Intell Syst Conf"},{"key":"ref116","first-page":"1706","article-title":"International journal of advanced research in computer science and software engineering","volume":"3","author":"roy","year":"2013","journal-title":"Int J"},{"key":"ref115","first-page":"74","article-title":"Survey on malware detection methods","author":"vinod","year":"2009","journal-title":"Proc 3rd Hackers Workshop Comput Internet Secur (IITKHACK)"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1109\/MALWARE.2010.5665787"},{"key":"ref121","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-010-0141-5"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1109\/ICeLeTE.2012.6333411"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1016\/j.ins.2011.08.020"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/6287639\/9312710\/9625934-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/6287639\/9312710\/09625934.pdf?arnumber=9625934","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,8]],"date-time":"2022-04-08T18:53:38Z","timestamp":1649444018000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9625934\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2021]]},"references-count":258,"URL":"https:\/\/doi.org\/10.1109\/access.2021.3130495","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021]]}}}