Attack detection on multi-architecture Internet of Vehicles honeypots and response mechanism research

Intelligent connected vehicles (ICVs) refer to a new vehicle type that utilizes advanced information and communication technology to enable information exchange among vehicles, between vehicles and roads, and between vehicles and the internet. Malicious actors may exploit vulnerabilities in ICVs to gain malicious control, steal data, or launch denial-of-service attacks, resulting in significant economic losses and personal harm. Therefore, it is crucial to research attack detection and response mechanisms for ICVs and build effective network defense systems to ensure the safe operation of these vehicles. However, different manufacturers may adopt different architectures, posing significant challenges to network security defense for these vehicles. To address this issue, this paper proposes an attack detection and response mechanism based on Docker container technology for Multi-Architecture Vehicle Honeypots (MAV-honeypots). The aim is to simulate ICVs under various architectures using honeypot technology, attracting and inducing attackers to carry out attacks, thus achieving identification, analysis, and response to attackers.