{"id":"https://openalex.org/W4293057679","doi":"https://doi.org/10.1109/vtc2022-spring54318.2022.9860928","title":"SOME/IP Intrusion Detection System Using Real-Time and Retroactive Anomaly Detection","display_name":"SOME/IP Intrusion Detection System Using Real-Time and Retroactive Anomaly Detection","publication_year":2022,"publication_date":"2022-06-01","ids":{"openalex":"https://openalex.org/W4293057679","doi":"https://doi.org/10.1109/vtc2022-spring54318.2022.9860928"},"language":"en","primary_location":{"id":"doi:10.1109/vtc2022-spring54318.2022.9860928","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vtc2022-spring54318.2022.9860928","pdf_url":null,"source":{"id":"https://openalex.org/S4363607744","display_name":"2022 IEEE 95th Vehicular Technology Conference: (VTC2022-Spring)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 95th Vehicular Technology Conference: (VTC2022-Spring)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008262167","display_name":"Takuma Koyama","orcid":"https://orcid.org/0009-0008-4026-6387"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Takuma Koyama","raw_affiliation_strings":["NTT Social Informatics Laboratories,Tokyo,Japan","NTT Social Informatics Laboratories, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Social Informatics Laboratories,Tokyo,Japan","institution_ids":[]},{"raw_affiliation_string":"NTT Social Informatics Laboratories, Tokyo, Japan","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029317814","display_name":"M. Tanaka","orcid":"https://orcid.org/0000-0002-9311-2831"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Masashi Tanaka","raw_affiliation_strings":["NTT Social Informatics Laboratories,Tokyo,Japan","NTT Social Informatics Laboratories, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Social Informatics Laboratories,Tokyo,Japan","institution_ids":[]},{"raw_affiliation_string":"NTT Social Informatics Laboratories, Tokyo, Japan","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083297081","display_name":"Asami Miyajima","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Asami Miyajima","raw_affiliation_strings":["NTT Social Informatics Laboratories,Tokyo,Japan","NTT Social Informatics Laboratories, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NTT Social Informatics Laboratories,Tokyo,Japan","institution_ids":[]},{"raw_affiliation_string":"NTT Social Informatics Laboratories, Tokyo, Japan","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025974330","display_name":"Shintaro Ukai","orcid":null},"institutions":[{"id":"https://openalex.org/I4210132650","display_name":"Denso (Japan)","ror":"https://ror.org/04hkpfa76","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210132650"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Shintaro Ukai","raw_affiliation_strings":["DENSO CORPORATION,Aichi,Japan","DENSO CORPORATION, Aichi, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DENSO CORPORATION,Aichi,Japan","institution_ids":["https://openalex.org/I4210132650"]},{"raw_affiliation_string":"DENSO CORPORATION, Aichi, Japan","institution_ids":["https://openalex.org/I4210132650"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020557440","display_name":"Takeshi Sugashima","orcid":null},"institutions":[{"id":"https://openalex.org/I4210132650","display_name":"Denso (Japan)","ror":"https://ror.org/04hkpfa76","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210132650"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Takeshi Sugashima","raw_affiliation_strings":["DENSO CORPORATION,Aichi,Japan","DENSO CORPORATION, Aichi, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DENSO CORPORATION,Aichi,Japan","institution_ids":["https://openalex.org/I4210132650"]},{"raw_affiliation_string":"DENSO CORPORATION, Aichi, Japan","institution_ids":["https://openalex.org/I4210132650"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083285142","display_name":"Masumi Egawa","orcid":null},"institutions":[{"id":"https://openalex.org/I4210132650","display_name":"Denso (Japan)","ror":"https://ror.org/04hkpfa76","country_code":"JP","type":"company","lineage":["https://openalex.org/I4210132650"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Masumi Egawa","raw_affiliation_strings":["DENSO CORPORATION,Aichi,Japan","DENSO CORPORATION, Aichi, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"DENSO CORPORATION,Aichi,Japan","institution_ids":["https://openalex.org/I4210132650"]},{"raw_affiliation_string":"DENSO CORPORATION, Aichi, Japan","institution_ids":["https://openalex.org/I4210132650"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.8705,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.92619071,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9952999949455261,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8116059303283691},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.772536039352417},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7082703113555908},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6868988275527954},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5813559889793396},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.556342363357544},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection-system","display_name":"Anomaly-based intrusion detection system","score":0.5051673054695129},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.5021212100982666},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.47365912795066833},{"id":"https://openalex.org/keywords/ethernet","display_name":"Ethernet","score":0.4533698558807373},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4443846344947815},{"id":"https://openalex.org/keywords/internet-protocol","display_name":"Internet Protocol","score":0.43016955256462097},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.22064635157585144},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1672571897506714},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.09168979525566101}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8116059303283691},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.772536039352417},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7082703113555908},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6868988275527954},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5813559889793396},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.556342363357544},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.5051673054695129},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.5021212100982666},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.47365912795066833},{"id":"https://openalex.org/C172173386","wikidata":"https://www.wikidata.org/wiki/Q79984","display_name":"Ethernet","level":2,"score":0.4533698558807373},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4443846344947815},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.43016955256462097},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.22064635157585144},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1672571897506714},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.09168979525566101}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/vtc2022-spring54318.2022.9860928","is_oa":false,"landing_page_url":"https://doi.org/10.1109/vtc2022-spring54318.2022.9860928","pdf_url":null,"source":{"id":"https://openalex.org/S4363607744","display_name":"2022 IEEE 95th Vehicular Technology Conference: (VTC2022-Spring)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE 95th Vehicular Technology Conference: (VTC2022-Spring)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2296701710","https://openalex.org/W2461378669","https://openalex.org/W2464037380","https://openalex.org/W2471211154","https://openalex.org/W2545810962","https://openalex.org/W2592742990","https://openalex.org/W3092567164","https://openalex.org/W3092575991","https://openalex.org/W3111699215","https://openalex.org/W3134635753","https://openalex.org/W3193366147","https://openalex.org/W3194562905","https://openalex.org/W4205488935","https://openalex.org/W6719536112"],"related_works":["https://openalex.org/W2742053845","https://openalex.org/W2582350182","https://openalex.org/W2363068348","https://openalex.org/W2183239701","https://openalex.org/W2108033333","https://openalex.org/W2901647851","https://openalex.org/W2368329025","https://openalex.org/W2061466315","https://openalex.org/W3157271777","https://openalex.org/W2355532322"],"abstract_inverted_index":{"As":[0],"the":[1,73,146,156,178,194],"amount":[2],"of":[3,8,75,81,190,202,209],"in-vehicle":[4,9],"data":[5,64],"and":[6,15,40,56,60,65,84,90,204],"number":[7],"functions":[10],"have":[11,18],"increased,":[12],"automotive":[13],"Ethernet":[14],"IP-based":[16],"protocols":[17],"been":[19],"adopted":[20],"in":[21,135],"vehicles.":[22],"The":[23,109,131],"scalable":[24,45],"service-oriented":[25],"middleware":[26],"over":[27],"IP":[28],"(SOME/IP)":[29],"protocol":[30],"is":[31,111],"designed":[32],"for":[33,41,88,145,183,193],"sending":[34],"periodic":[35],"or":[36,43],"direct":[37],"control":[38],"messages":[39],"updating":[42],"appending":[44],"functions.":[46],"International":[47],"regulation":[48],"UN":[49],"R-155":[50],"requires":[51],"security":[52],"monitoring":[53],"to":[54,125,150],"analyze":[55],"detect":[57],"cyber-threats,":[58],"vulnerabilities,":[59],"cyber-attacks":[61],"from":[62,72,152,168],"vehicle":[63],"logs.":[66],"SOME/IP":[67,118,175],"also":[68],"should":[69],"be":[70],"monitored":[71],"perspective":[74],"security.":[76],"We":[77],"report":[78],"a":[79,112,121,187,198,205],"classification":[80],"use":[82],"cases":[83],"possible":[85],"attack":[86,132],"patterns":[87,133],"SOME/IP,":[89],"we":[91,185],"propose":[92],"an":[93,173],"intrusion":[94],"detection":[95,107,148,161,191],"system":[96],"(IDS)":[97],"that":[98,115,142],"achieves":[99],"high":[100,188],"accuracy":[101,192],"by":[102,162],"combining":[103],"two":[104],"whitelist-based":[105],"anomaly":[106],"algorithms.":[108],"first":[110],"real-time":[113,147],"algorithm":[114,149,158,180],"compares":[116],"received":[117],"packets":[119,141,165],"with":[120,197],"normal":[122,153],"communication":[123],"model":[124],"determine":[126],"whether":[127,164],"they":[128],"are":[129,143,166],"anomalies.":[130],"covered":[134],"this":[136],"paper":[137],"include":[138],"sophisticated":[139],"malicious":[140],"difficult":[144],"distinguish":[151],"packets.":[154],"Hence,":[155],"second":[157],"performs":[159],"retroactive":[160,179],"determining":[163],"anomalous":[167],"long-term":[169],"time":[170],"characteristics":[171],"spanning":[172],"entire":[174],"session.":[176],"Although":[177],"takes":[181],"longer":[182],"detection,":[184],"confirm":[186],"level":[189],"proposed":[195],"IDS,":[196],"true":[199],"positive":[200,207],"rate":[201,208],"0.91":[203],"false":[206],"0.052.":[210]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}