{"id":"https://openalex.org/W4409426940","doi":"https://doi.org/10.1109/infoteh64129.2025.10959305","title":"Security Challenges and Mitigation Strategies for CAN-Based Protocols: A Comprehensive Survey","display_name":"Security Challenges and Mitigation Strategies for CAN-Based Protocols: A Comprehensive Survey","publication_year":2025,"publication_date":"2025-03-19","ids":{"openalex":"https://openalex.org/W4409426940","doi":"https://doi.org/10.1109/infoteh64129.2025.10959305"},"language":"en","primary_location":{"id":"doi:10.1109/infoteh64129.2025.10959305","doi":"https://doi.org/10.1109/infoteh64129.2025.10959305","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infoteh64129.2025.10959305","pdf_url":null,"source":{"id":"https://openalex.org/S7407086076","display_name":"International Symposium INFOTEH-JAHORINA (INFOTEH)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 24th International Symposium INFOTEH-JAHORINA (INFOTEH)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5043322370","display_name":"Srdjan Popic","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I2801863878","display_name":"RT-RK Institute for Computer Based Systems (Serbia)","ror":"https://ror.org/02vm8jd66","country_code":"RS","type":"company","lineage":["https://openalex.org/I2801863878"]}],"countries":["RS"],"is_corresponding":false,"raw_author_name":"Srdjan Popic","raw_affiliation_strings":["RT-RK Institute for Computer Based Systems,Novi Sad,Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RT-RK Institute for Computer Based Systems,Novi Sad,Serbia","institution_ids":["https://openalex.org/I2801863878"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117140951","display_name":"Bojan Ramic","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I2801863878","display_name":"RT-RK Institute for Computer Based Systems (Serbia)","ror":"https://ror.org/02vm8jd66","country_code":"RS","type":"company","lineage":["https://openalex.org/I2801863878"]}],"countries":["RS"],"is_corresponding":false,"raw_author_name":"Bojan Ramic","raw_affiliation_strings":["RT-RK Institute for Computer Based Systems,Novi Sad,Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RT-RK Institute for Computer Based Systems,Novi Sad,Serbia","institution_ids":["https://openalex.org/I2801863878"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5117140952","display_name":"Sasa Bojanic","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I2801863878","display_name":"RT-RK Institute for Computer Based Systems (Serbia)","ror":"https://ror.org/02vm8jd66","country_code":"RS","type":"company","lineage":["https://openalex.org/I2801863878"]}],"countries":["RS"],"is_corresponding":false,"raw_author_name":"Sasa Bojanic","raw_affiliation_strings":["RT-RK Institute for Computer Based Systems,Novi Sad,Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RT-RK Institute for Computer Based Systems,Novi Sad,Serbia","institution_ids":["https://openalex.org/I2801863878"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2801863878"],"apc_list":null,"apc_paid":null,"fwci":5.1381,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.95308464,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5859000086784363,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5859000086784363,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.17159999907016754,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.0697999969124794,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/can-bus","display_name":"CAN bus","score":0.9819999933242798},{"id":"https://openalex.org/keywords/j1939","display_name":"J1939","score":0.9190000295639038},{"id":"https://openalex.org/keywords/canopen","display_name":"CANopen","score":1.0},{"id":"https://openalex.org/keywords/eavesdropping","display_name":"eavesdropping","score":0.9860000014305115},{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":1.0},{"id":"https://openalex.org/keywords/unauthorized-data-access","display_name":"unauthorized data access","score":0.9079999923706055},{"id":"https://openalex.org/keywords/authentication","display_name":"authentication","score":0.7390000224113464},{"id":"https://openalex.org/keywords/encryption","display_name":"encryption","score":0.7900000214576721},{"id":"https://openalex.org/keywords/intrusion-detection-systems","display_name":"intrusion detection systems","score":0.9610000252723694},{"id":"https://openalex.org/keywords/security-controls","display_name":"security countermeasures","score":0.7379999756813049},{"id":"https://openalex.org/keywords/vehicular-networks","display_name":"vehicular networks","score":0.7519999742507935},{"id":"https://openalex.org/keywords/embedded-systems","display_name":"embedded systems","score":0.6100000143051147},{"id":"https://openalex.org/keywords/security-performance-trade-off","display_name":"security-performance trade-off","score":0.8080000281333923}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.640781819820404},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3480664789676666},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.12357783317565918}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infoteh64129.2025.10959305","doi":"https://doi.org/10.1109/infoteh64129.2025.10959305","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infoteh64129.2025.10959305","pdf_url":null,"source":{"id":"https://openalex.org/S7407086076","display_name":"International Symposium INFOTEH-JAHORINA (INFOTEH)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 24th International Symposium INFOTEH-JAHORINA (INFOTEH)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.7207000255584717}],"sustainable_development_goals_aurora":[{"display_name":"Climate action","id":"https://metadata.un.org/sdg/13","score":0.6399999856948853}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W2070375778","https://openalex.org/W2399576380","https://openalex.org/W2407793975","https://openalex.org/W2791964896","https://openalex.org/W2890588168","https://openalex.org/W2898450148","https://openalex.org/W2921212998","https://openalex.org/W2924473624","https://openalex.org/W2939800427","https://openalex.org/W2987614086","https://openalex.org/W3006112733","https://openalex.org/W3006171966","https://openalex.org/W3017028995","https://openalex.org/W3113240968","https://openalex.org/W3153622979","https://openalex.org/W3164317619","https://openalex.org/W3199525502","https://openalex.org/W3215200515","https://openalex.org/W4244999754","https://openalex.org/W4285125724","https://openalex.org/W4323966568","https://openalex.org/W4360840693","https://openalex.org/W4366377785","https://openalex.org/W4380451006","https://openalex.org/W4386297618","https://openalex.org/W4390655080","https://openalex.org/W4392061622","https://openalex.org/W4403941710","https://openalex.org/W4404459568","https://openalex.org/W4407272606","https://openalex.org/W6730015920","https://openalex.org/W6868739043","https://openalex.org/W6941291842","https://openalex.org/W7024526950","https://openalex.org/W7081992586"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W4391913857","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052"],"abstract_inverted_index":{"The":[0,159],"Controller":[1],"Area":[2],"Network":[3],"(CAN)":[4],"protocol":[5,119],"is":[6],"the":[7,51],"backbone":[8],"of":[9,42],"many":[10],"critical":[11],"communication":[12,166],"systems":[13,116],"in":[14,100,145,168],"automotive,":[15],"industrial,":[16],"and":[17,32,45,57,73,87,118,126,135,148],"embedded":[18],"applications.":[19],"Despite":[20],"its":[21,58],"widespread":[22],"adoption,":[23],"CAN-based":[24,91],"protocols,":[25,60,92],"such":[26,65,129],"as":[27,66,130],"J1939,":[28],"CANopen,":[29],"NMEA":[30],"2000,":[31],"others,":[33],"face":[34],"inherent":[35],"security":[36,52,98,125,154],"vulnerabilities":[37],"due":[38],"to":[39,94,152,162],"their":[40],"lack":[41],"robust":[43],"authentication":[44],"encryption":[46,112],"mechanisms.":[47],"This":[48],"research":[49,142],"examines":[50],"challenges":[53],"associated":[54],"with":[55],"CAN":[56,169],"derivative":[59],"focusing":[61],"on":[62],"potential":[63],"exploits":[64],"message":[67],"spoofing,":[68],"eavesdropping,":[69],"denial-of-service":[70],"(DoS)":[71],"attacks,":[72],"unauthorized":[74],"data":[75],"access.":[76],"Unlike":[77],"previous":[78],"studies,":[79],"this":[80,141],"work":[81],"comprehensively":[82],"reviews":[83],"defense":[84],"strategies,":[85],"techniques,":[86],"countermeasures":[88],"across":[89],"multiple":[90],"aiming":[93],"identify":[95],"all":[96],"possible":[97],"solutions":[99],"a":[101],"unified":[102],"analysis.":[103],"In":[104],"addition,":[105],"it":[106],"evaluates":[107],"current":[108,146],"industry":[109],"solutions,":[110],"including":[111],"overlays,":[113],"intrusion":[114],"detection":[115],"(IDS),":[117],"enhancements,":[120],"while":[121,155],"considering":[122],"trade-offs":[123],"between":[124],"performance":[127],"metrics,":[128],"network":[131,157],"traffic":[132],"load,":[133],"latency,":[134],"scalability.":[136],"By":[137],"analyzing":[138],"existing":[139],"approaches,":[140],"identifies":[143],"gaps":[144],"implementations":[147],"explores":[149],"innovative":[150],"strategies":[151],"enhance":[153],"maintaining":[156],"efficiency.":[158],"findings":[160],"contribute":[161],"developing":[163],"more":[164],"resilient":[165],"frameworks":[167],"networks.":[170]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2025-10-10T00:00:00"}