{"id":"https://openalex.org/W4387757650","doi":"https://doi.org/10.1109/tits.2023.3323622","title":"In-Vehicle Network Intrusion Detection System Using CAN Frame-Aware Features","display_name":"In-Vehicle Network Intrusion Detection System Using CAN Frame-Aware Features","publication_year":2023,"publication_date":"2023-10-18","ids":{"openalex":"https://openalex.org/W4387757650","doi":"https://doi.org/10.1109/tits.2023.3323622"},"language":"en","primary_location":{"id":"doi:10.1109/tits.2023.3323622","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tits.2023.3323622","pdf_url":null,"source":{"id":"https://openalex.org/S144771191","display_name":"IEEE Transactions on Intelligent Transportation Systems","issn_l":"1524-9050","issn":["1524-9050","1558-0016"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Intelligent Transportation Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5052582075","display_name":"Yeonseon Jeong","orcid":"https://orcid.org/0000-0003-2138-7227"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Yeonseon Jeong","raw_affiliation_strings":["School of Cybersecurity, Korea University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0003-2138-7227","affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Korea University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062323771","display_name":"Hyung-Hoon Kim","orcid":"https://orcid.org/0000-0002-5069-195X"},"institutions":[{"id":"https://openalex.org/I141371507","display_name":"Soongsil University","ror":"https://ror.org/017xnm587","country_code":"KR","type":"education","lineage":["https://openalex.org/I141371507"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hyunghoon Kim","raw_affiliation_strings":["School of Software, Soongsil University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-5069-195X","affiliations":[{"raw_affiliation_string":"School of Software, Soongsil University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I141371507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100714487","display_name":"Seyoung Lee","orcid":"https://orcid.org/0000-0002-8277-8486"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Seyoung Lee","raw_affiliation_strings":["School of Cybersecurity, Korea University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-8277-8486","affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Korea University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101989950","display_name":"Wonsuk Choi","orcid":"https://orcid.org/0000-0003-3253-4827"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Wonsuk Choi","raw_affiliation_strings":["School of Cybersecurity, Korea University, Seoul, Republic of Korea"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Korea University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100436315","display_name":"Dong Hoon Lee","orcid":"https://orcid.org/0000-0003-0692-2543"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Dong Hoon Lee","raw_affiliation_strings":["School of Cybersecurity, Korea University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0003-0692-2543","affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Korea University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5075231564","display_name":"Hyo Jin Jo","orcid":"https://orcid.org/0000-0002-3496-7899"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Hyo Jin Jo","raw_affiliation_strings":["School of Cybersecurity, Korea University, Seoul, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-3496-7899","affiliations":[{"raw_affiliation_string":"School of Cybersecurity, Korea University, Seoul, Republic of Korea","institution_ids":["https://openalex.org/I197347611"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4316,"has_fulltext":false,"cited_by_count":17,"citation_normalized_percentile":{"value":0.80809204,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"25","issue":"5","first_page":"3843","last_page":"3853"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9905999898910522,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9810000061988831,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8202739953994751},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.705962061882019},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.6667971014976501},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.5612028241157532},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.5345959067344666},{"id":"https://openalex.org/keywords/spoofing-attack","display_name":"Spoofing attack","score":0.5213057398796082},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5172091722488403},{"id":"https://openalex.org/keywords/frame","display_name":"Frame (networking)","score":0.5068631768226624},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.4738859534263611},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4392857253551483},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.43607833981513977},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.4293513298034668},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.40658608078956604},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2898530066013336}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8202739953994751},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.705962061882019},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.6667971014976501},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.5612028241157532},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.5345959067344666},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.5213057398796082},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5172091722488403},{"id":"https://openalex.org/C126042441","wikidata":"https://www.wikidata.org/wiki/Q1324888","display_name":"Frame (networking)","level":2,"score":0.5068631768226624},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4738859534263611},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4392857253551483},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.43607833981513977},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.4293513298034668},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.40658608078956604},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2898530066013336}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tits.2023.3323622","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tits.2023.3323622","pdf_url":null,"source":{"id":"https://openalex.org/S144771191","display_name":"IEEE Transactions on Intelligent Transportation Systems","issn_l":"1524-9050","issn":["1524-9050","1558-0016"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Intelligent Transportation Systems","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1625125278","display_name":null,"funder_award_id":"2021R1C1C1011960","funder_id":"https://openalex.org/F4320322030","funder_display_name":"Ministry of Science, ICT and Future Planning"},{"id":"https://openalex.org/G3292777453","display_name":null,"funder_award_id":"00218853","funder_id":"https://openalex.org/F4320335489","funder_display_name":"Institute for Information and Communications Technology Promotion"}],"funders":[{"id":"https://openalex.org/F4320322030","display_name":"Ministry of Science, ICT and Future Planning","ror":"https://ror.org/032e49973"},{"id":"https://openalex.org/F4320322120","display_name":"National Research Foundation of Korea","ror":"https://ror.org/013aysd81"},{"id":"https://openalex.org/F4320335489","display_name":"Institute for Information and Communications Technology Promotion","ror":"https://ror.org/01g0hqq23"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W2104807148","https://openalex.org/W2116520617","https://openalex.org/W2148974412","https://openalex.org/W2295598076","https://openalex.org/W2891789701","https://openalex.org/W2959120033","https://openalex.org/W2979202956","https://openalex.org/W2984712157","https://openalex.org/W3047033621","https://openalex.org/W3083938246","https://openalex.org/W3089775054","https://openalex.org/W3092232275","https://openalex.org/W3102406764","https://openalex.org/W3105105644","https://openalex.org/W3122474235","https://openalex.org/W3133917079","https://openalex.org/W3165817011","https://openalex.org/W3175018059","https://openalex.org/W3189306419","https://openalex.org/W3194413837","https://openalex.org/W3195279647","https://openalex.org/W3197115256","https://openalex.org/W4205625641","https://openalex.org/W4206529651","https://openalex.org/W4237715024","https://openalex.org/W6713134421"],"related_works":["https://openalex.org/W2188559950","https://openalex.org/W2998478967","https://openalex.org/W2989910292","https://openalex.org/W4366990902","https://openalex.org/W4317732970","https://openalex.org/W4388550696","https://openalex.org/W4321636153","https://openalex.org/W2122022187","https://openalex.org/W4313289487","https://openalex.org/W2115529843"],"abstract_inverted_index":{"With":[0],"the":[1,36,43,90,95,100,152,162,183,241],"advancement":[2],"of":[3,61,66,94,148,165,217,244],"connected":[4],"and":[5,21,114,117,129,161,195,222,251],"automated":[6],"vehicles":[7,30],"(CAVs),":[8],"drivers":[9],"now":[10],"have":[11],"access":[12],"to":[13,57],"convenient":[14],"features":[15,144,185],"such":[16,77,191],"as":[17,192],"lane-keeping,":[18],"cruise":[19],"control,":[20],"more.":[22],"The":[23,200],"electronic":[24],"control":[25],"units":[26],"(ECUs)":[27],"equipped":[28],"within":[29],"communicate":[31],"with":[32,186,213],"each":[33],"other":[34],"through":[35],"controller":[37],"area":[38],"network":[39],"(CAN).":[40],"However,":[41],"since":[42],"CAN":[44,80,96,149,159,167,211],"does":[45],"not":[46],"possess":[47],"any":[48],"security":[49],"mechanisms,":[50],"it":[51],"becomes":[52],"a":[53,63,107,122,138,166],"target":[54],"for":[55,110,140],"adversaries":[56],"attack.":[58],"In":[59],"light":[60],"this,":[62],"significant":[64,123],"amount":[65],"research":[67],"regarding":[68],"intrusion":[69],"detection":[70,143,242],"systems":[71],"(IDSs)":[72],"has":[73],"focused":[74],"on":[75],"detecting":[76,111],"maliciously":[78,209],"injected":[79,210],"packets.":[81],"Nevertheless,":[82],"most":[83],"existing":[84,233],"machine":[85],"learning-based":[86,235],"IDSs":[87,236],"neither":[88],"calculate":[89],"exact":[91],"time":[92,243],"intervals":[93,105],"packets":[97,212],"nor":[98],"utilize":[99],"counter":[101,118,163],"information.":[102],"Precise":[103],"timing":[104],"are":[106,146,228],"crucial":[108],"feature":[109,124],"spoofing,":[112],"fuzzing,":[113],"replay":[115,130],"attacks,":[116],"information":[119,164],"is":[120],"also":[121],"that":[125,145,203],"can":[126,207],"detect":[127,208],"fuzzing":[128],"attacks.":[131],"Therefore,":[132],"in":[133,219,224,248],"this":[134],"paper,":[135],"we":[136,176,239],"propose":[137],"methodology":[139],"extracting":[141],"two":[142,157],"aware":[147],"frame":[150],"characteristics:":[151],"interframe":[153],"space":[154],"(IFS)":[155],"between":[156],"consecutive":[158],"packets,":[160],"data":[168,171],"payload":[169],"(i.e.,":[170],"field).":[172],"Using":[173],"these":[174],"features,":[175],"introduce":[177],"decision":[178,188],"tree-based":[179,189],"IDS.":[180],"We":[181],"evaluate":[182],"proposed":[184,205,246],"popular":[187],"models":[190],"random":[193],"forest":[194],"extreme":[196],"gradient":[197],"boosting":[198],"(XGBoost).":[199],"results":[201],"show":[202],"our":[204,245],"IDS":[206,247],"an":[214],"F1":[215],"score":[216],"99.54%":[218],"binary":[220],"classification":[221],"97.99%":[223],"multi-class":[225],"classification,":[226],"which":[227],"higher":[229],"scores":[230],"than":[231],"what":[232],"machine/deep":[234],"achieve.":[237],"Additionally,":[238],"measure":[240],"both":[249],"online":[250],"offline":[252],"testing":[253],"environments.":[254]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":5}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}