AntibotV: A Multilevel Behaviour-based Framework for Botnets Detection in Vehicular Networks
Fuente:
arXiv
Saved in:
| Main Authors: | , , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866914857928884224 |
|---|---|
| author | Rahal, Rabah Korba, Abdelaziz Amara Ghoualmi-Zine, Nacira Challal, Yacine Ghamri-Doudane, Mohamed Yacine |
| author_facet | Rahal, Rabah Korba, Abdelaziz Amara Ghoualmi-Zine, Nacira Challal, Yacine Ghamri-Doudane, Mohamed Yacine |
| contents | Connected cars offer safety and efficiency for both individuals and fleets of private vehicles and public transportation companies. However, equipping vehicles with information and communication technologies raises privacy and security concerns, which significantly threaten the user's data and life. Using bot malware, a hacker may compromise a vehicle and control it remotely, for instance, he can disable breaks or start the engine remotely. In this paper, besides in-vehicle attacks existing in the literature, we consider new zeroday bot malware attacks specific to the vehicular context, WSMP-Flood, and Geo-WSMP Flood. Then, we propose AntibotV, a multilevel behaviour-based framework for vehicular botnets detection in vehicular networks. The proposed framework combines two main modules for attack detection, the first one monitors the vehicle's activity at the network level, whereas the second one monitors the in-vehicle activity. The two intrusion detection modules have been trained on a historical network and in-vehicle communication using decision tree algorithms. The experimental results showed that the proposed framework outperforms existing solutions, it achieves a detection rate higher than 97% and a false positive rate lower than 0.14%. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2407_03506 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | AntibotV: A Multilevel Behaviour-based Framework for Botnets Detection in Vehicular Networks Rahal, Rabah Korba, Abdelaziz Amara Ghoualmi-Zine, Nacira Challal, Yacine Ghamri-Doudane, Mohamed Yacine Cryptography and Security Artificial Intelligence Connected cars offer safety and efficiency for both individuals and fleets of private vehicles and public transportation companies. However, equipping vehicles with information and communication technologies raises privacy and security concerns, which significantly threaten the user's data and life. Using bot malware, a hacker may compromise a vehicle and control it remotely, for instance, he can disable breaks or start the engine remotely. In this paper, besides in-vehicle attacks existing in the literature, we consider new zeroday bot malware attacks specific to the vehicular context, WSMP-Flood, and Geo-WSMP Flood. Then, we propose AntibotV, a multilevel behaviour-based framework for vehicular botnets detection in vehicular networks. The proposed framework combines two main modules for attack detection, the first one monitors the vehicle's activity at the network level, whereas the second one monitors the in-vehicle activity. The two intrusion detection modules have been trained on a historical network and in-vehicle communication using decision tree algorithms. The experimental results showed that the proposed framework outperforms existing solutions, it achieves a detection rate higher than 97% and a false positive rate lower than 0.14%. |
| title | AntibotV: A Multilevel Behaviour-based Framework for Botnets Detection in Vehicular Networks |
| topic | Cryptography and Security Artificial Intelligence |
| url | https://arxiv.org/abs/2407.03506 |