arXiv:2603.25763cs.CRcs.AI2026-03被引 1

用混合模型检测车载网络攻击,准确率超现有方法。

CANGuard: A Spatio-Temporal CNN-GRU-Attention Hybrid Architecture for Intrusion Detection in In-Vehicle CAN Networks

  • 融合卷积、GRU与注意力机制捕捉数据时空特征。
  • 在CICIoV2024数据集上达到98.7%准确率,优于主流方法。
  • 可解释性强,识别关键异常特征,适合车联网安全部署。

车联网(IoV)已成为智能交通系统的关键部分,促进车辆与基础设施间的无缝交互。近年来,其在提升出行效率、安全性和交通流畅性方面作用日益显著。然而,这种连接性也带来了严重安全隐患,尤其是针对控制器局域网(CAN)总线的拒绝服务(DoS)和伪造攻击,可能严重影响车辆关键组件间的通信,导致系统故障、失控甚至危及乘客安全。为此,本文提出CANGuard,一种结合卷积神经网络(CNN)、门控循环单元(GRU)与注意力机制的新型时空深度学习架构,以有效识别此类攻击。模型在CICIoV2024数据集上训练与评估,各项指标表现优异,准确率、精确率、召回率与F1分数均达领先水平,优于现有最先进方法。消融实验证明了CNN、GRU与注意力模块的独立及协同贡献。此外,通过SHAP分析揭示了模型决策机制,确定对入侵检测影响最大的特征。该方法展现出在现代车联网环境中实现高效、可扩展安全增强的巨大潜力,有助于保障更安全可靠的CAN总线通信。

原文摘要 · Abstract (English)

The Internet of Vehicles (IoV) has become an essential component of smart transportation systems, enabling seamless interaction among vehicles and infrastructure. In recent years, it has played a progressively significant role in enhancing mobility, safety, and transportation efficiency. However, this connectivity introduces severe security vulnerabilities, particularly Denial-of-Service (DoS) and spoofing attacks targeting the Controller Area Network (CAN) bus, which could severely inhibit communication between the critical components of a vehicle, leading to system malfunctions, loss of control, or even endangering passengers' safety. To address this problem, this paper presents CANGuard, a novel spatio-temporal deep learning architecture that combines Convolutional Neural Networks (CNN), Gated Recurrent Units (GRU), and an attention mechanism to effectively identify such attacks. The model is trained and evaluated on the CICIoV2024 dataset, achieving competitive performance across accuracy, precision, recall, and F1-score and outperforming existing state-of-the-art methods. A comprehensive ablation study confirms the individual and combined contributions of the CNN, GRU, and attention components. Additionally, a SHAP analysis is conducted to interpret the decision-making process of the model and determine which features have the most significant impact on intrusion detection. The proposed approach demonstrates strong potential for practical and scalable security enhancements in modern IoV environments, thereby ensuring safer and more secure CAN bus communications.

车联网入侵检测深度学习

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。