{"id":"https://openalex.org/W2605933137","doi":"https://doi.org/10.1145/3064814.3064816","title":"Modeling inter-signal arrival times for accurate detection of CAN bus signal injection attacks","display_name":"Modeling inter-signal arrival times for accurate detection of CAN bus signal injection attacks","publication_year":2017,"publication_date":"2017-04-04","ids":{"openalex":"https://openalex.org/W2605933137","doi":"https://doi.org/10.1145/3064814.3064816","mag":"2605933137"},"language":"en","primary_location":{"id":"doi:10.1145/3064814.3064816","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3064814.3064816","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3064816&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th Annual Conference on Cyber and Information Security Research","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"http://dl.acm.org/ft_gateway.cfm?id=3064816&type=pdf","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101882464","display_name":"Michael Moore","orcid":"https://orcid.org/0000-0003-2748-9988"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Michael R. Moore","raw_affiliation_strings":["Oak Ridge National Laboratory"],"affiliations":[{"raw_affiliation_string":"Oak Ridge National Laboratory","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012446017","display_name":"Robert A. Bridges","orcid":"https://orcid.org/0000-0001-7962-6329"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert A. Bridges","raw_affiliation_strings":["Oak Ridge National Laboratory"],"affiliations":[{"raw_affiliation_string":"Oak Ridge National Laboratory","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046043455","display_name":"Frank L. Combs","orcid":null},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Frank L. Combs","raw_affiliation_strings":["Oak Ridge National Laboratory"],"affiliations":[{"raw_affiliation_string":"Oak Ridge National Laboratory","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003403640","display_name":"Michael S. Starr","orcid":null},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Michael S. Starr","raw_affiliation_strings":["Oak Ridge National Laboratory"],"affiliations":[{"raw_affiliation_string":"Oak Ridge National Laboratory","institution_ids":["https://openalex.org/I1289243028"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017277237","display_name":"Stacy Prowell","orcid":"https://orcid.org/0000-0002-2104-5641"},"institutions":[{"id":"https://openalex.org/I1289243028","display_name":"Oak Ridge National Laboratory","ror":"https://ror.org/01qz5mb56","country_code":"US","type":"facility","lineage":["https://openalex.org/I1289243028","https://openalex.org/I1330989302","https://openalex.org/I39565521","https://openalex.org/I4210159294"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stacy J. Prowell","raw_affiliation_strings":["Oak Ridge National Laboratory"],"affiliations":[{"raw_affiliation_string":"Oak Ridge National Laboratory","institution_ids":["https://openalex.org/I1289243028"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5101882464"],"corresponding_institution_ids":["https://openalex.org/I1289243028"],"apc_list":null,"apc_paid":null,"fwci":8.6184,"has_fulltext":true,"cited_by_count":133,"citation_normalized_percentile":{"value":0.9813629,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11099","display_name":"Autonomous Vehicle Technology and Safety","score":0.9923999905586243,"subfield":{"id":"https://openalex.org/subfields/2203","display_name":"Automotive Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10933","display_name":"Real-Time Systems Scheduling","score":0.9024999737739563,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/can-bus","display_name":"CAN bus","score":0.7667571902275085},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6714040637016296},{"id":"https://openalex.org/keywords/signal","display_name":"SIGNAL (programming language)","score":0.6692449450492859},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6161141991615295},{"id":"https://openalex.org/keywords/controller","display_name":"Controller (irrigation)","score":0.5881038904190063},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5543375611305237},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.5159600377082825},{"id":"https://openalex.org/keywords/control-bus","display_name":"Control bus","score":0.42054125666618347},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.3455910384654999},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3315797448158264},{"id":"https://openalex.org/keywords/computer-hardware","display_name":"Computer hardware","score":0.26775452494621277},{"id":"https://openalex.org/keywords/system-bus","display_name":"System bus","score":0.2606044113636017},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21290487051010132},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.1332799792289734}],"concepts":[{"id":"https://openalex.org/C201762086","wikidata":"https://www.wikidata.org/wiki/Q728183","display_name":"CAN bus","level":2,"score":0.7667571902275085},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6714040637016296},{"id":"https://openalex.org/C2779843651","wikidata":"https://www.wikidata.org/wiki/Q7390335","display_name":"SIGNAL (programming language)","level":2,"score":0.6692449450492859},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6161141991615295},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.5881038904190063},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5543375611305237},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.5159600377082825},{"id":"https://openalex.org/C203315745","wikidata":"https://www.wikidata.org/wiki/Q2235486","display_name":"Control bus","level":3,"score":0.42054125666618347},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.3455910384654999},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3315797448158264},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.26775452494621277},{"id":"https://openalex.org/C136321198","wikidata":"https://www.wikidata.org/wiki/Q2377054","display_name":"System bus","level":2,"score":0.2606044113636017},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21290487051010132},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.1332799792289734},{"id":"https://openalex.org/C6557445","wikidata":"https://www.wikidata.org/wiki/Q173113","display_name":"Agronomy","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3064814.3064816","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3064814.3064816","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3064816&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th Annual Conference on Cyber and Information Security Research","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3064814.3064816","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3064814.3064816","pdf_url":"http://dl.acm.org/ft_gateway.cfm?id=3064816&type=pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 12th Annual Conference on Cyber and Information Security Research","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6700000166893005,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G8906985441","display_name":null,"funder_award_id":"00OR22725","funder_id":"https://openalex.org/F4320306084","funder_display_name":"U.S. Department of Energy"}],"funders":[{"id":"https://openalex.org/F4320306084","display_name":"U.S. Department of Energy","ror":"https://ror.org/01bj3aw27"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2605933137.pdf","grobid_xml":"https://content.openalex.org/works/W2605933137.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W1992900191","https://openalex.org/W1993470778","https://openalex.org/W2005891720","https://openalex.org/W2069035496","https://openalex.org/W2116520617","https://openalex.org/W2133854595","https://openalex.org/W2148974412","https://openalex.org/W2153861733","https://openalex.org/W2155998722","https://openalex.org/W2350778671","https://openalex.org/W4248940585"],"related_works":["https://openalex.org/W2072822197","https://openalex.org/W2354086613","https://openalex.org/W2352926601","https://openalex.org/W2286629889","https://openalex.org/W4284887633","https://openalex.org/W2376927707","https://openalex.org/W2614336368","https://openalex.org/W2559881466","https://openalex.org/W2373349544","https://openalex.org/W2241256031"],"abstract_inverted_index":{"Modern":[0],"vehicles":[1,50],"rely":[2],"on":[3],"hundreds":[4],"of":[5,81,125,139],"on-board":[6,26],"electronic":[7],"control":[8,21,53],"units":[9],"(ECUs)":[10],"communicating":[11],"over":[12],"in-vehicle":[13],"networks.":[14],"As":[15],"external":[16],"interfaces":[17],"to":[18,55],"the":[19,25,43,46,62,66,103,144],"car":[20],"networks":[22,54],"(such":[23],"as":[24,91],"diagnostic":[27],"(OBD)":[28],"port,":[29],"auxiliary":[30],"media":[31],"ports,":[32],"etc.)":[33],"become":[34],"common,":[35],"and":[36,131],"vehicle-to-vehicle":[37],"/":[38,135],"vehicle-to-infrastructure":[39],"technology":[40],"is":[41],"in":[42,112],"near":[44],"future,":[45],"attack":[47],"surface":[48],"for":[49,64,95],"grows,":[51],"exposing":[52],"potentially":[56],"life-critical":[57],"attacks.":[58],"This":[59],"paper":[60,101],"addresses":[61],"need":[63],"securing":[65],"controller":[67],"area":[68],"network":[69],"(CAN)":[70],"bus":[71,97],"by":[72],"detecting":[73],"anomalous":[74],"traffic":[75],"patterns":[76],"via":[77],"unusual":[78],"refresh":[79],"rates":[80,138],"certain":[82],"commands.":[83],"While":[84],"previous":[85],"works":[86],"have":[87],"identified":[88],"signal":[89],"frequency":[90],"an":[92],"important":[93],"feature":[94],"CAN":[96],"intrusion":[98],"detection,":[99],"this":[100],"provides":[102],"first":[104],"such":[105],"algorithm":[106,120],"with":[107],"experiments":[108],"using":[109],"three":[110],"attacks":[111],"five":[113,123,145],"(total)":[114],"scenarios.":[115],"Our":[116],"data-driven":[117],"anomaly":[118],"detection":[119],"requires":[121],"only":[122],"seconds":[124],"training":[126],"time":[127],"(on":[128],"normal":[129],"data)":[130],"achieves":[132],"true":[133],"positive":[134],"false":[136],"discovery":[137],"0.9998/0.00298,":[140],"respectively":[141],"(micro-averaged":[142],"across":[143],"experimental":[146],"tests).":[147]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":11},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":24},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":18},{"year":2020,"cited_by_count":15},{"year":2019,"cited_by_count":25},{"year":2018,"cited_by_count":14},{"year":2017,"cited_by_count":5}],"updated_date":"2026-04-13T07:58:08.660418","created_date":"2025-10-10T00:00:00"}