{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,28]],"date-time":"2026-09-28T15:50:31Z","timestamp":1790610631645,"version":"4.1.0"},"reference-count":45,"publisher":"MDPI AG","issue":"19","license":[{"start":{"date-parts":[[2023,10,2]],"date-time":"2023-10-02T00:00:00Z","timestamp":1696204800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Najran University","award":["NU\/RG\/SERC\/12\/27"],"award-info":[{"award-number":["NU\/RG\/SERC\/12\/27"]}]},{"name":"Najran University","award":["IFP22UQU4260426DSR203"],"award-info":[{"award-number":["IFP22UQU4260426DSR203"]}]},{"name":"Ministry of Education in Saudi Arabia","award":["NU\/RG\/SERC\/12\/27"],"award-info":[{"award-number":["NU\/RG\/SERC\/12\/27"]}]},{"name":"Ministry of Education in Saudi Arabia","award":["IFP22UQU4260426DSR203"],"award-info":[{"award-number":["IFP22UQU4260426DSR203"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Current vehicles include electronic features that provide ease and convenience to drivers. These electronic features or nodes rely on in-vehicle communication protocols to ensure functionality. One of the most-widely adopted in-vehicle protocols on the market today is the Controller Area Network, popularly referred to as the CAN bus. The CAN bus is utilized in various modern, sophisticated vehicles. However, as the sophistication levels of vehicles continue to increase, we now see a high rise in attacks against them. These attacks range from simple to more-complex variants, which could have detrimental effects when carried out successfully. Therefore, there is a need to carry out an assessment of the security vulnerabilities that could be exploited within the CAN bus. In this research, we conducted a security vulnerability analysis on the CAN bus protocol by proposing an attack scenario on a CAN bus simulation that exploits the arbitration feature extensively. This feature determines which message is sent via the bus in the event that two or more nodes attempt to send a message at the same time. It achieves this by prioritizing messages with lower identifiers. Our analysis revealed that an attacker can spoof a message ID to gain high priority, continuously injecting messages with the spoofed ID. As a result, this prevents the transmission of legitimate messages, impacting the vehicle\u2019s operations. We identified significant risks in the CAN protocol, including spoofing, injection, and Denial of Service. Furthermore, we examined the latency of the CAN-enabled system under attack, finding that the compromised node (the attacker\u2019s device) consistently achieved the lowest latency due to message arbitration. This demonstrates the potential for an attacker to take control of the bus, injecting messages without contention, thereby disrupting the normal operations of the vehicle, which could potentially compromise safety.<\/jats:p>","DOI":"10.3390\/s23198223","type":"journal-article","created":{"date-parts":[[2023,10,2]],"date-time":"2023-10-02T11:56:49Z","timestamp":1696247809000},"page":"8223","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":31,"title":["CANAttack: Assessing Vulnerabilities within Controller Area Network"],"prefix":"10.3390","volume":"23","author":[{"given":"Damilola","family":"Oladimeji","sequence":"first","affiliation":[{"name":"Department of Computer Science, Sam Houston State University, Huntsville, TX 77340, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Amar","family":"Rasheed","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Sam Houston State University, Huntsville, TX 77340, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4940-6808","authenticated-orcid":false,"given":"Cihan","family":"Varol","sequence":"additional","affiliation":[{"name":"Department of Computer Science, Sam Houston State University, Huntsville, TX 77340, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5153-8693","authenticated-orcid":false,"given":"Mohamed","family":"Baza","sequence":"additional","affiliation":[{"name":"Department of Computer Science, College of Charleston, Charleston, SC 29424, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8799-9448","authenticated-orcid":false,"given":"Hani","family":"Alshahrani","sequence":"additional","affiliation":[{"name":"Department of Computer Science, College of Computer Science and Information Systems, Najran University, Najran 61441, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8669-6883","authenticated-orcid":false,"given":"Abdullah","family":"Baz","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, College of Computer and Information Systems, Umm Al-Qura University, Makkah 21955, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2023,10,2]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"Oladimeji, D., Amar, R., Narasimha, S., and Varol, C. (2023, January 8\u201311). A Testbed for a Controller Area Network Communication Protocol in Automobiles. Proceedings of the 2023 IEEE 20th Consumer Communications & Networking Conference (CCNC), Las Vegas, NV, USA.","DOI":"10.1109\/CCNC51644.2023.10059608"},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"14","DOI":"10.1016\/j.dcan.2022.04.021","article-title":"A novel intrusion detection model for the CAN bus packet of in-vehicle network based on attention mechanism and autoencoder","volume":"9","author":"Wei","year":"2023","journal-title":"Digit. Commun. Netw."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Rasheed, A., Baza, M., Badr, M., Alshahrani, H., and Choo, K. (2023). Efficient Crypto Engine for Authenticated Encryption, Data Traceability, and Replay Attack Detection Over CAN Bus Network. IEEE Trans. Netw. Sci. Eng., 1\u201317.","DOI":"10.1109\/TNSE.2023.3312545"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Amiri, W., Baza, M., Banawan, K., Mahmoud, M., Alasmary, W., and Akkaya, K. (2019, January 17\u201319). Privacy-Preserving Smart Parking System Using Blockchain and Private Information Retrieval. Proceedings of the 2019 International Conference On Smart Applications, Communications And Networking (SmartNets), Sharm El Sheikh, Egypt.","DOI":"10.1109\/SmartNets48225.2019.9069783"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"1214","DOI":"10.1109\/TNSE.2019.2959230","article-title":"B-Ride: Ride Sharing With Privacy-Preservation, Trust and Fair Payment Atop Public Blockchain","volume":"8","author":"Baza","year":"2021","journal-title":"IEEE Trans. Netw. Sci. Eng."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Caivano, D., De Vincentiis, M., Nitti, F., and Pal, A. (2022, January 18). Quantum optimization for fast CAN bus intrusion detection. Proceedings of the 1st International Workshop on Quantum Programming for Software Engineering, Singapore.","DOI":"10.1145\/3549036.3562058"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"4800","DOI":"10.1109\/TIFS.2023.3297444","article-title":"CAN-LOC: Spoofing detection and physical intrusion localization on an in-vehicle CAN bus based on deep features of voltage signals","volume":"18","author":"Levy","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Oladimeji, D., Gupta, K., Kose, N.A., Gundogan, K., Ge, L., and Liang, F. (2023). Smart transportation: An overview of technologies and applications. Sensors, 23.","DOI":"10.3390\/s23083880"},{"key":"ref_9","first-page":"823","article-title":"Automotive serial controller area network","volume":"95","author":"Kiencke","year":"1986","journal-title":"SAE Trans."},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Lin, Y., Chen, C., Xiao, F., Avatefipour, O., Alsubhi, K., and Yunianta, A. (2020). An evolutionary deep learning anomaly detection framework for in-vehicle networks-CAN bus. IEEE Trans. Ind. Appl., 1.","DOI":"10.1109\/TIA.2020.3009906"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Bozdal, M., Samie, M., Aslam, S., and Jennions, I. (2020). Evaluation of can bus security challenges. Sensors, 20.","DOI":"10.3390\/s20082364"},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Farag, W.A. (2017, January 4\u20136). CANTrack: Enhancing automotive CAN bus security using intuitive encryption algorithms. Proceedings of the 2017 7th International Conference on Modeling, Simulation, and Applied Optimization (ICMSAO), Sharjah, United Arab Emirates.","DOI":"10.1109\/ICMSAO.2017.7934878"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Gundu, R., and Maleki, M. (2022, January 19\u201321). Securing CAN bus in connected and autonomous vehicles using supervised machine learning approaches. Proceedings of the 2022 IEEE International Conference on Electro Information Technology (eIT), Mankato, MN, USA.","DOI":"10.1109\/eIT53891.2022.9813985"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3495534","article-title":"Detection and mitigation of sensor and CAN bus attacks in vehicle anti-lock braking systems","volume":"6","author":"Kang","year":"2022","journal-title":"ACM Trans. Cyber Phys. Syst."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Aldhyani, T.H., and Alkahtani, H. (2022). Attacks to automatous vehicles: A deep learning algorithm for cybersecurity. Sensors, 22.","DOI":"10.3390\/s22010360"},{"key":"ref_16","doi-asserted-by":"crossref","unstructured":"Siddiqui, A.S., Gui, Y., Plusquellic, J., and Saqib, F. (2017, January 6\u20139). Secure communication over CANBus. Proceedings of the 2017 IEEE 60th International Midwest Symposium on Circuits and Systems (MWSCAS), Medford, MA, USA.","DOI":"10.1109\/MWSCAS.2017.8053160"},{"key":"ref_17","unstructured":"(2015). Road Vehicles\u2013Controller Area Network (CAN)\u2014Part 1: Data Link Layer and Physical Signalling. Standard No. 11898-1."},{"key":"ref_18","unstructured":"Hartzell, S., and Stubel, C. (2017). University Washington. Technical Report."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"384","DOI":"10.1016\/j.ins.2022.08.093","article-title":"Dynamic event-triggered security control for networked control systems with cyber-attacks: A model predictive control approach","volume":"612","author":"Li","year":"2022","journal-title":"Inf. Sci."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"1667","DOI":"10.1109\/TIFS.2023.3246766","article-title":"APMSA: Adversarial perturbation against model stealing attacks","volume":"18","author":"Zhang","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"1211","DOI":"10.1109\/TIFS.2023.3236788","article-title":"Jamming and Eavesdropping Defense Scheme Based on Deep Reinforcement Learning in Autonomous Vehicle Networks","volume":"18","author":"Yao","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"786","DOI":"10.1109\/TIFS.2020.3023277","article-title":"Improving physical layer security of uplink NOMA via energy harvesting jammers","volume":"16","author":"Cao","year":"2020","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"103187","DOI":"10.1016\/j.cose.2023.103187","article-title":"Security defense decision method based on potential differential game for complex networks","volume":"129","author":"Zhang","year":"2023","journal-title":"Comput. Secur."},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"2909","DOI":"10.1093\/comjnl\/bxac085","article-title":"Effectively detecting operational anomalies in large-scale iot data infrastructures by using a gan-based predictive model","volume":"65","author":"Chen","year":"2022","journal-title":"Comput. J."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"107194","DOI":"10.1016\/j.infsof.2023.107194","article-title":"An Abstract Syntax Tree based static fuzzing mutation for vulnerability evolution analysis","volume":"158","author":"Zheng","year":"2023","journal-title":"Inf. Softw. Technol."},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"Lin, C.W., and Sangiovanni-Vincentelli, A. (2012, January 14\u201316). Cyber-security for the controller area network (CAN) communication protocol. Proceedings of the 2012 International Conference on Cyber Security, Alexandria, VA, USA.","DOI":"10.1109\/CyberSecurity.2012.7"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"101857","DOI":"10.1016\/j.cose.2020.101857","article-title":"CAN-ADF: The controller area network attack detection framework","volume":"94","author":"Tariq","year":"2020","journal-title":"Comput. Secur."},{"key":"ref_28","unstructured":"Hoppe, T., and Dittman, J. (October, January 30). Sniffing\/Replay Attacks on CAN Buses: A simulated attack on the electric window lift classified using an adapted CERT taxonomy. Proceedings of the 2nd Workshop on Embedded Systems Security (WESS), Salzburg, Austria."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Koscher, K., Czeskis, A., Roesner, F., Patel, S., Kohno, T., Checkoway, S., McCoy, D., Kantor, B., Anderson, D., and Shacham, H. (2010, January 16\u201319). Experimental security analysis of a modern automobile. Proceedings of the 2010 IEEE Symposium on Security and Privacy, Berleley\/Oakland, CA, USA.","DOI":"10.1109\/SP.2010.34"},{"key":"ref_30","first-page":"16","article-title":"Free-fall: Hacking tesla from wireless to can bus","volume":"25","author":"Nie","year":"2017","journal-title":"Brief. Black Hat"},{"key":"ref_31","unstructured":"Avatefipour, O., and Malik, H. (2018). State-of-the-art survey on in-vehicle network communication (CAN-Bus) security and vulnerabilities. arXiv."},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Zhang, H., Meng, X., Zhang, X., and Liu, Z. (2020). CANsec: A practical in-vehicle controller area network security evaluation tool. Sensors, 20.","DOI":"10.3390\/s20174900"},{"key":"ref_33","unstructured":"Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., Savage, S., Koscher, K., Czeskis, A., Roesner, F., and Kohno, T. (2011, January 8\u201312). Comprehensive experimental analyses of automotive attack surfaces. Proceedings of the 20th USENIX Security Symposium (USENIX Security 11), San Francisco, CA, USA."},{"key":"ref_34","first-page":"5","article-title":"Car hacking: Accessing and exploiting the can bus protocol. Comprehensive experimental analyses of automotive attack surfaces","volume":"2019","author":"Payne","year":"2019","journal-title":"J. Cybersecur. Educ. Res. Pract."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Iehira, K., Inoue, H., and Ishida, K. (2018, January 12\u201315). Spoofing attack using bus-off attacks against a specific ECU of the CAN bus. Proceedings of the 2018 15th IEEE Annual Consumer Communications & Networking Conference (CCNC), Las Vegas, NV, USA.","DOI":"10.1109\/CCNC.2018.8319180"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Bloom, G. (2021, January 25). WeepingCAN: A stealthy CAN bus-off attack. Proceedings of the Workshop on Automotive and Autonomous Vehicle Security, Online.","DOI":"10.14722\/autosec.2021.23002"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Mohammed, A.Z., Man, Y., Gerdes, R., Li, M., and Celik, Z.B. (2022, January 24). Physical layer data manipulation attacks on the can bus. Proceedings of the International Workshop on Automotive and Autonomous Vehicle Security (AutoSec), San Diego, CA, USA.","DOI":"10.14722\/autosec.2022.23047"},{"key":"ref_38","first-page":"94","article-title":"A survey of remote automotive attack surfaces","volume":"2014","author":"Miller","year":"2014","journal-title":"Black Hat"},{"key":"ref_39","first-page":"21","article-title":"Hackers Remotely Kill a Jeep on the Highway-With Me in It","volume":"7","author":"Greenberg","year":"2015","journal-title":"Wired"},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"17","DOI":"10.3390\/smartcities3010002","article-title":"Identify a spoofing attack on an in-vehicle CAN bus based on the deep features of an ECU fingerprint signal","volume":"3","author":"Yang","year":"2020","journal-title":"Smart Cities"},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1109\/MPOT.2018.2837686","article-title":"Security analysis of an automobile controller area network bus","volume":"39","author":"Hartzell","year":"2020","journal-title":"IEEE Potentials"},{"key":"ref_42","unstructured":"Gazdag, A., Ferenczi, C., and Butty\u00e1n, L. (2020, January 6\u20138). Development of a man-in-the-middle attack device for the can bus. Proceedings of the 1st Conference on Information Technology and Data Science, Debrecen, Hungary."},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"42850","DOI":"10.1109\/ACCESS.2023.3270777","article-title":"Hybrid mmWave-Li-Fi 5G Architecture for Reconfigurable Variable Latency and Data Rate Communications","volume":"11","author":"Lau","year":"2023","journal-title":"IEEE Access"},{"key":"ref_44","doi-asserted-by":"crossref","unstructured":"Rajapaksha, S., Kalutarage, H., Al-Kadri, M.O., Madzudzo, G., and Petrovski, A.V. (June, January 31). Keep the moving vehicle secure: Context-aware intrusion detection system for in-vehicle CAN bus security. Proceedings of the 2022 14th International Conference on Cyber Conflict: Keep Moving!(CyCon), Tallinn, Estonia.","DOI":"10.23919\/CyCon55549.2022.9811048"},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"1163","DOI":"10.1016\/0967-0661(95)00112-8","article-title":"Calculating controller area network (CAN) message response times","volume":"3","author":"Tindell","year":"1995","journal-title":"Control Eng. Pract."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/19\/8223\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,10]],"date-time":"2025-10-10T21:04:15Z","timestamp":1760130255000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/23\/19\/8223"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,10,2]]},"references-count":45,"journal-issue":{"issue":"19","published-online":{"date-parts":[[2023,10]]}},"alternative-id":["s23198223"],"URL":"https:\/\/doi.org\/10.3390\/s23198223","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,10,2]]}}}