A Lightweight Voltage-Based ECU Fingerprint Intrusion Detection System for In-Vehicle CAN Bus

The Controller Area Network (CAN) is the de facto industry standard of In-Vehicle Network (IVN) for connecting Electronic Control Units (ECUs). In recent years, related researchers have proposed various in-vehicle network security schemes to protect CAN bus. By leveraging the physical characteristics of signals sent by ECUs, ECU identification methods are proposed to implement intrusion detection system at the physical transmission layer. Voltage-based physical fingerprint techniques have gained significant attention in this research field. Considering the resource-constrained embedded environments of IVN, various methods attempt to reduce the resource requirements of physical fingerprint-based ECU identification methods. In this paper, a lightweight voltage-based fingerprint intrusion detection system is proposed, which achieves an identification accuracy of over 99% under conditions of low sampling rates, short signal segments, and a small feature set through comprehensive experiments on both CAN prototypes and a rich dataset of ten actual vehicles.