Information Security Protection Design of Electric Vehicles Charging Station

Information security is fundamental to ensuring the normal operation of charging station. Based on CAN bus and 3G wireless network, this paper discusses current threats for communication network, builds a protection structure of information security, and proposes an overall information security protection framework. The firewall mainly includes digital signature authentication which combines SHA-1 message digest algorithm and ELGamal public key cipher system. Firewall-IDS (Intrusion Detection System) interactive modules and host information security protection modules is also designed. This paper lays a basic foundation for security construction of charging station’s communication network.

Download Full-text

Parallel Combining Different Approaches to Multi-pattern Matching for Fpga-based Security Systems

Advances in Cyber-Physical Systems ◽

10.23939/acps2020.01.008 ◽

2017 ◽

Vol 5 (1) ◽

pp. 8-15

Author(s):

Sergii Hilgurt ◽

Keyword(s):

Information Security ◽

Pattern Matching ◽

Intrusion Detection System ◽

Detection System ◽

Finite Automata ◽

Network Intrusion Detection ◽

Security Systems ◽

Analytical Technique ◽

Network Intrusion ◽

Pros And Cons

The multi-pattern matching is a fundamental technique found in applications like a network intrusion detection system, anti-virus, anti-worms and other signature- based information security tools. Due to rising traffic rates, increasing number and sophistication of attacks and the collapse of Moore’s law, traditional software solutions can no longer keep up. Therefore, hardware approaches are frequently being used by developers to accelerate pattern matching. Reconfigurable FPGA-based devices, providing the flexibility of software and the near-ASIC performance, have become increasingly popular for this purpose. Hence, increasing the efficiency of reconfigurable information security tools is a scientific issue now. Many different approaches to constructing hardware matching circuits on FPGAs are known. The most widely used of them are based on discrete comparators, hash-functions and finite automata. Each approach possesses its own pros and cons. None of them still became the leading one. In this paper, a method to combine several different approaches to enforce their advantages has been developed. An analytical technique to quickly advance estimate the resource costs of each matching scheme without need to compile FPGA project has been proposed. It allows to apply optimization procedures to near-optimally split the set of pattern between different approaches in acceptable time.

Download Full-text

Signature-Based Intrusion Detection System (IDS) for In-Vehicle CAN Bus Network

2021 IEEE International Symposium on Circuits and Systems (ISCAS) ◽

10.1109/iscas51556.2021.9401087 ◽

2021 ◽

Author(s):

Shiyi Jin ◽

Jin-Gyun Chung ◽

Yinan Xu

Keyword(s):

Intrusion Detection ◽

Intrusion Detection System ◽

Can Bus ◽

Detection System ◽

Bus Network

Download Full-text

DSSAM: digitally signed secure acknowledgement method for mobile ad hoc network

EURASIP Journal on Wireless Communications and Networking ◽

10.1186/s13638-021-01894-7 ◽

2021 ◽

Vol 2021 (1) ◽

Author(s):

Ashutosh Srivastava ◽

Sachin Kumar Gupta ◽

Mohd Najim ◽

Nitesh Sahu ◽

Geetika Aggarwal ◽

...

Keyword(s):

Digital Signature ◽

Intrusion Detection System ◽

Ad Hoc Network ◽

Ad Hoc ◽

Mobile Ad Hoc Network ◽

Detection System ◽

Source Routing ◽

Security Issues ◽

Dynamic Source ◽

Mobile Ad Hoc

AbstractMobile ad hoc network (MANET) is an infrastructure-less, self-motivated, arbitrary, self-configuring, rapidly changing, multi-hop network that is self-possessing wireless bandwidth-conscious links without centrally managed router support. In such a network, wireless media is easy to snoop. It is firm to the surety to access any node, easier to insertion of bad elements or attackers for malicious activities in the network. Therefore, security issues become one of the significant considerations for such kind of networks. The deployment of an effective intrusion detection system is important in order to provide protection against various attacks. In this paper, a Digitally Signed Secure Acknowledgement Method (DSSAM) with the use of the RSA digital signature has been proposed and simulated. Three different parameters are considered, namely secure acknowledgment, node authentication, and packet authentication for study. This article observes the DSSAM performance and compares it with two existing standard methods, namely Watchdog and 2-ACK under standard Dynamic Source Routing (DSR) routing environment. In the end, it is noticed that the rate of detection of malicious behaviour is better in the case of the proposed method. However, associated overheads are high. A trade-off between performance and overhead has been considered.

Download Full-text

Embedded Intrusion Detection System for Detecting Attacks over CAN-BUS

2019 4th International Conference on System Reliability and Safety (ICSRS) ◽

10.1109/icsrs48664.2019.8987605 ◽

2019 ◽

Cited By ~ 2

Author(s):

Mario Casillo ◽

Simone Coppola ◽

Massimo De Santo ◽

Francesco Pascale ◽

Emanuele Santonicola

Keyword(s):

Intrusion Detection ◽

Intrusion Detection System ◽

Can Bus ◽

Detection System

Download Full-text

Misbehavior-Aware On-Demand Collaborative Intrusion Detection System Using Distributed Ensemble Learning for VANET

Electronics ◽

10.3390/electronics9091411 ◽

2020 ◽

Vol 9 (9) ◽

pp. 1411 ◽

Cited By ~ 1

Author(s):

Fuad A. Ghaleb ◽

Faisal Saeed ◽

Mohammad Al-Sarem ◽

Bander Ali Saleh Al-rimy ◽

Wadii Boulila ◽

...

Keyword(s):

Random Forest ◽

Intrusion Detection ◽

Ensemble Learning ◽

Intrusion Detection System ◽

Detection System ◽

Lower Boundary ◽

Normal Operation ◽

Communication Overhead ◽

On Demand ◽

Collaborative Intrusion Detection

Vehicular ad hoc networks (VANETs) play an important role as enabling technology for future cooperative intelligent transportation systems (CITSs). Vehicles in VANETs share real-time information about their movement state, traffic situation, and road conditions. However, VANETs are susceptible to the cyberattacks that create life threatening situations and/or cause road congestion. Intrusion detection systems (IDSs) that rely on the cooperation between vehicles to detect intruders, were the most suggested security solutions for VANET. Unfortunately, existing cooperative IDSs (CIDSs) are vulnerable to the legitimate yet compromised collaborators that share misleading and manipulated information and disrupt the IDSs’ normal operation. As such, this paper proposes a misbehavior-aware on-demand collaborative intrusion detection system (MA-CIDS) based on the concept of distributed ensemble learning. That is, vehicles individually use the random forest algorithm to train local IDS classifiers and share their locally trained classifiers on-demand with the vehicles in their vicinity, which reduces the communication overhead. Once received, the performance of the classifiers is evaluated using the local testing dataset in the receiving vehicle. The evaluation values are used as a trustworthiness factor and used to rank the received classifiers. The classifiers that deviate much from the box-and-whisker plot lower boundary are excluded from the set of the collaborators. Then, each vehicle constructs an ensemble of weighted random forest-based classifiers that encompasses the locally and remotely trained classifiers. The outputs of the classifiers are aggregated using a robust weighted voting scheme. Extensive simulations were conducted utilizing the network security laboratory-knowledge discovery data mining (NSL-KDD) dataset to evaluate the performance of the proposed MA-CIDS model. The obtained results show that MA-CIDS performs better than the other existing models in terms of effectiveness and efficiency for VANET.

Download Full-text