{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,2,21]],"date-time":"2025-02-21T14:05:57Z","timestamp":1740146757566,"version":"3.37.3"},"reference-count":32,"publisher":"Public Library of Science (PLoS)","issue":"5","license":[{"start":{"date-parts":[[2022,5,5]],"date-time":"2022-05-05T00:00:00Z","timestamp":1651708800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100003392","name":"Natural Science Foundation of Fujian Province","doi-asserted-by":"publisher","award":["2021J011069"],"award-info":[{"award-number":["2021J011069"]}],"id":[{"id":"10.13039\/501100003392","id-type":"DOI","asserted-by":"publisher"}]},{"name":"Fujian Key Laboratory of Information Processing and Intelligent Control (Minjiang University) 2021 Open Fund","award":["MJUKF-IPIC202107"],"award-info":[{"award-number":["MJUKF-IPIC202107"]}]},{"name":"Scientific research start-up fund of Fujian University of Technology","award":["GY-Z21213"],"award-info":[{"award-number":["GY-Z21213"]}]}],"content-domain":{"domain":["www.plosone.org"],"crossmark-restriction":false},"short-container-title":["PLoS ONE"],"abstract":"<jats:p>With the development of the Internet of Vehicles (IoV), attacks to the vehicle-mounted control area network (CAN) have seriously jeopardized the security of automobiles. As an important security measure, intrusion detection technologies have aroused great interest in researchers and many detection methods have also been proposed based on the vehicle\u2019s CAN bus. However, many studies only considered one type of attack at a time but in real environments there may contain a variety of attack types simultaneously. In view of the deficiency in the current methods, this paper proposed a method to detect multi-intrusions at one time based on a Mosaic coded convolutional neural network (CNN) and a centralized coding method. A Mosaic-like data block was created to convert the one-dimensional CAN ID into a two-dimensional data grid for the CNN to effectively extract the data characteristics and maintain the time characteristics between the CAN IDs. Four types of attacks and all combinations of them were used to train and test our model. Finally, a centralized coding method was used to increase the discrimination capability of the model. Experimental results showed that this single model could successfully detect any combinations of the intrusion types with very high and stable performance.<\/jats:p>","DOI":"10.1371\/journal.pone.0267910","type":"journal-article","created":{"date-parts":[[2022,5,5]],"date-time":"2022-05-05T17:36:08Z","timestamp":1651772168000},"page":"e0267910","update-policy":"https:\/\/doi.org\/10.1371\/journal.pone.corrections_policy","source":"Crossref","is-referenced-by-count":3,"title":["A multi-attack intrusion detection model based on Mosaic coded convolutional neural network and centralized encoding"],"prefix":"10.1371","volume":"17","author":[{"given":"Rong","family":"Hu","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Zhongying","family":"Wu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6520-8572","authenticated-orcid":true,"given":"Yong","family":"Xu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Taotao","family":"Lai","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Canyu","family":"Xia","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"340","published-online":{"date-parts":[[2022,5,5]]},"reference":[{"issue":"no. 2","key":"pone.0267910.ref001","doi-asserted-by":"crossref","first-page":"951","DOI":"10.1007\/s11280-019-00704-x","article-title":"Special issue on security and privacy in network computing","volume":"vol. 23","author":"H Wang","year":"2020","journal-title":"World Wide Web"},{"key":"pone.0267910.ref002","article-title":"Dynamic pricing techniques for intelligent transportation system in smart cities: A systematic review","author":"S Saharan","year":"2019","journal-title":"Comp Commun"},{"issue":"no. 2","key":"pone.0267910.ref003","doi-asserted-by":"crossref","first-page":"534","DOI":"10.1109\/TITS.2014.2320605","article-title":"Intra-vehicle networks: A review","volume":"vol. 16","author":"S Tuohy","year":"2015","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"pone.0267910.ref004","first-page":"2015","article-title":"Remote exploitation of an unaltered passenger vehicle","volume":"23","author":"C Miller","journal-title":"Black Hat USA, Las Vegas, NV, USA, Tech. Rep"},{"key":"pone.0267910.ref005","doi-asserted-by":"crossref","first-page":"54607","DOI":"10.1109\/ACCESS.2018.2870695","article-title":"IDH-CAN: A hardware-based ID hopping CAN hechanism with enhanced security for automotive real-time applications","volume":"vol. 6","author":"W Wu","year":"2018","journal-title":"IEEE Access"},{"issue":"no. 1","key":"pone.0267910.ref006","doi-asserted-by":"crossref","first-page":"11","DOI":"10.1016\/j.ress.2010.06.026","article-title":"Security threats to automotive CAN networks-Practical examples and selected short-term countermeasures","volume":"vol. 96","author":"T Hoppe","year":"2011","journal-title":"Reliab. Eng. Syst. Saf"},{"unstructured":"Delatorre G, Rad P, Choo KKR. Driverless vehicle security: Challenges and future research opportunities. Future Generation Computer Systems, pp. 1\u201320, 2018.","key":"pone.0267910.ref007"},{"key":"pone.0267910.ref008","first-page":"2017","article-title":"Design and implementation of an intrusion detection system (IDS) for in-vehicle networks","volume":"1","author":"M Bresch","journal-title":"Dept. Comput. Sci. Eng., Chalmers Univ. Technol., Gothenburg, Sweden, Tech. Rep"},{"key":"pone.0267910.ref009","doi-asserted-by":"crossref","first-page":"490","DOI":"10.1016\/j.procs.2017.05.317","article-title":"An Automotive Signal-Layer Security and Trust-Boundary Identification Approach","volume":"vol. 109","author":"G Macher","year":"2017","journal-title":"Procedia Comput. Sci."},{"issue":"no. 2","key":"pone.0267910.ref010","first-page":"546","article-title":"Potential cyberattacks on automated vehicles","volume":"vol. 16","author":"J Petit","year":"2015","journal-title":"IEEE Trans. Intell. Transp. Syst."},{"key":"pone.0267910.ref011","first-page":"2014","article-title":"A survey of remote automotive attack surfaces","volume":"8","author":"C Miller","journal-title":"Black Hat USA, Las Vegas, NV, USA, Tech. Rep"},{"unstructured":"The Jeep hackers are back to prove car hacking can get much worse. https:\/\/www.wired.com\/2016\/08\/jeep-hackers-return-high-speed-steering-acceleration-hacks\/.","key":"pone.0267910.ref012"},{"unstructured":"The latest research results of Tencent Cohen Lab: 2017 once again realized the remote attack without physical contact on Tesla. https:\/\/keenlab.tencent.com\/zh\/2017\/07\/27\/New-Car-Hacking-Research-2017-Remote-Attack-Tesla-Motors-Again\/.","key":"pone.0267910.ref013"},{"doi-asserted-by":"crossref","unstructured":"Palanca A, Evenchick E, Maggi F. A Stealth, Selective, Link-Layer Denial-of-Service Attack Against Automotive Networks. Springer, Cham, 2017.","key":"pone.0267910.ref014","DOI":"10.1007\/978-3-319-60876-1_9"},{"doi-asserted-by":"crossref","unstructured":"Nilsson DK, Larson UE, Jonsson E. Efficient in-vehicle delayed data authentication based on compound message authentication codes. in Proc. IEEE 68th Veh. Technol. Conf., pp. 1\u20135, Sep. 2008.","key":"pone.0267910.ref015","DOI":"10.1109\/VETECF.2008.259"},{"doi-asserted-by":"crossref","unstructured":"Bulck JV, M\u00fchlberg JT, Piessens F. VulCAN: Efficient component authentication and software isolation for automotive control networks. in Proc. 33rd Annu. Comput. Secur. Appl. Conf., pp. 225\u2013237, Dec. 2017. 10.1145\/3134600.3134623.","key":"pone.0267910.ref016","DOI":"10.1145\/3134600.3134623"},{"issue":"no. 4","key":"pone.0267910.ref017","doi-asserted-by":"crossref","first-page":"405","DOI":"10.1145\/2542049","article-title":"A survey of intrusion detection techniques for cyber-physical systems","volume":"vol. 46","author":"R Mitchell","year":"2014","journal-title":"ACM Comput. Surv."},{"key":"pone.0267910.ref018","doi-asserted-by":"crossref","first-page":"621","DOI":"10.1007\/978-3-319-72359-4_38","volume-title":"Information Security Practice and Experience","author":"T Huang","year":"2017"},{"issue":"no. 8","key":"pone.0267910.ref019","doi-asserted-by":"crossref","first-page":"2114","DOI":"10.1109\/TIFS.2018.2812149","article-title":"VoltageIDS: Low-level communication characteristics for automotive intrusion detection system","volume":"vol. 13","author":"W Choi","year":"2018","journal-title":"IEEE Trans. Inf. Forensics Security"},{"key":"pone.0267910.ref020","first-page":"260","article-title":"Adventures in automotive networks and control units","volume":"vol. 21","author":"C Miller","year":"2013","journal-title":"DefCon"},{"doi-asserted-by":"crossref","unstructured":"M\u00fcter M, Asaj N. Entropy-based anomaly detection for in-vehicle networks. in Proc. IEEE Intell. Vehicles Symp. (IV), pp. 1110\u20131115, Jun. 2011.","key":"pone.0267910.ref021","DOI":"10.1109\/IVS.2011.5940552"},{"doi-asserted-by":"crossref","unstructured":"Larson UE, Nilsson DK, Jonsson E. An approach to specification-based attack detection for in-vehicle networks. Intelligent Vehicles Symposium, 2008 IEEE, pp. 220\u2013225, 2008.","key":"pone.0267910.ref022","DOI":"10.1109\/IVS.2008.4621263"},{"doi-asserted-by":"crossref","unstructured":"Lee H, Jeong SH, Kim HK. OTIDS: A novel intrusion detection system for in-vehicle network by using remote frame. in Proc. 15th Annu. Conf. Privacy, Secur. Trust (PST), pp. 5709\u20135757, Aug. 2017.","key":"pone.0267910.ref023","DOI":"10.1109\/PST.2017.00017"},{"doi-asserted-by":"crossref","unstructured":"Song HM, Kim HR, Kim HK. Intrusion detection system based on the analysis of time intervals of can messages for in-vehicle network. in Proc. Int. Conf. Inf. Netw. (ICOIN), pp. 63\u201368, Jan. 2016.","key":"pone.0267910.ref024","DOI":"10.1109\/ICOIN.2016.7427089"},{"issue":"no. 3","key":"pone.0267910.ref025","doi-asserted-by":"crossref","first-page":"919","DOI":"10.1109\/TITS.2019.2908074","article-title":"A survey of intrusion detection for in-vehicle networks","volume":"vol. 21","author":"W Wu","year":"2020","journal-title":"IEEE Trans. Intelligent Transportation Systems"},{"issue":"no. 4","key":"pone.0267910.ref026","doi-asserted-by":"crossref","first-page":"79","DOI":"10.4236\/wet.2018.94007","article-title":"Classification approach for intrusion detection in vehicle systems","volume":"vol. 9","author":"A Alshammari","year":"2018","journal-title":"Wireless Engineering and Technology"},{"issue":"no. 6","key":"pone.0267910.ref027","article-title":"Intrusion detection system using deep neural network for in-vehicle network security","volume":"vol. 11","author":"MJ Kang","year":"2016","journal-title":"Plos One"},{"doi-asserted-by":"crossref","unstructured":"Taylor A, Leblanc S, Japkowicz N. Anomaly Detection in Automobile Control Network Data with Long Short-Term Memory Networks. in: 2016 IEEE International Conference on Data Science and Advanced Analytics (DSAA), IEEE, pp. 130\u2013139, Oct. 2016.","key":"pone.0267910.ref028","DOI":"10.1109\/DSAA.2016.20"},{"doi-asserted-by":"crossref","unstructured":"Seo E, Song HM, Kim HK. GIDS: GAN based intrusion detection system for in-vehicle network. 2018 16th Annual Conference on Privacy, Security and Trust (PST). IEEE, pp. 1\u20136, Jul. 2019.","key":"pone.0267910.ref029","DOI":"10.1109\/PST.2018.8514157"},{"key":"pone.0267910.ref030","first-page":"100198.1","article-title":"In-vehicle network intrusion detection using deep convolutional neural network","author":"HM Song","year":"2020","journal-title":"Vehicular Communications"},{"key":"pone.0267910.ref031","first-page":"1","article-title":"Intrusion prevention system of automotive network can bus","author":"S Abbottmccune","year":"2016","journal-title":"Proc. IEEE Int. Carnahan Conf. Secur. Technol. (ICCST)"},{"unstructured":"Song HM, Kim HK. CAN network intrusion datasets. https:\/\/ocslab.hksecurity.net\/Dataset\/CAN-intrusion-dataset.","key":"pone.0267910.ref032"}],"container-title":["PLOS ONE"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dx.plos.org\/10.1371\/journal.pone.0267910","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,23]],"date-time":"2024-09-23T21:59:00Z","timestamp":1727128740000},"score":1,"resource":{"primary":{"URL":"https:\/\/dx.plos.org\/10.1371\/journal.pone.0267910"}},"subtitle":[],"editor":[{"given":"Hua","family":"Wang","sequence":"first","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2022,5,5]]},"references-count":32,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2022,5,5]]}},"URL":"https:\/\/doi.org\/10.1371\/journal.pone.0267910","relation":{},"ISSN":["1932-6203"],"issn-type":[{"type":"electronic","value":"1932-6203"}],"subject":[],"published":{"date-parts":[[2022,5,5]]}}}