{"id":"https://openalex.org/W4317659178","doi":"https://doi.org/10.1145/3566132","title":"DT-DS: CAN Intrusion Detection with Decision Tree Ensembles","display_name":"DT-DS: CAN Intrusion Detection with Decision Tree Ensembles","publication_year":2023,"publication_date":"2023-01-21","ids":{"openalex":"https://openalex.org/W4317659178","doi":"https://doi.org/10.1145/3566132"},"language":"en","primary_location":{"id":"doi:10.1145/3566132","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3566132","pdf_url":null,"source":{"id":"https://openalex.org/S2506189754","display_name":"ACM Transactions on Cyber-Physical Systems","issn_l":"2378-962X","issn":["2378-962X","2378-9638"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Cyber-Physical Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.82308/10627","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010320214","display_name":"Jarul Mehta","orcid":"https://orcid.org/0000-0003-2240-6178"},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Jarul Mehta","raw_affiliation_strings":["McGill University, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0000-0003-2240-6178","affiliations":[{"raw_affiliation_string":"McGill University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101555791","display_name":"Guillaume Richard","orcid":"https://orcid.org/0000-0002-9393-3664"},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Guillaume Richard","raw_affiliation_strings":["McGill University, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0000-0002-9393-3664","affiliations":[{"raw_affiliation_string":"McGill University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5040757409","display_name":"Loren Lugosch","orcid":"https://orcid.org/0000-0002-5024-8667"},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Loren Lugosch","raw_affiliation_strings":["McGill University, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0000-0002-5024-8667","affiliations":[{"raw_affiliation_string":"McGill University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083022909","display_name":"Derek Yu","orcid":"https://orcid.org/0000-0002-7150-4631"},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Derek Yu","raw_affiliation_strings":["McGill University, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0000-0002-7150-4631","affiliations":[{"raw_affiliation_string":"McGill University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I5023651"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034701871","display_name":"Brett H. Meyer","orcid":"https://orcid.org/0000-0002-6650-3298"},"institutions":[{"id":"https://openalex.org/I5023651","display_name":"McGill University","ror":"https://ror.org/01pxwe438","country_code":"CA","type":"education","lineage":["https://openalex.org/I5023651"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Brett H. Meyer","raw_affiliation_strings":["McGill University, Montreal, Quebec, Canada"],"raw_orcid":"https://orcid.org/0000-0002-6650-3298","affiliations":[{"raw_affiliation_string":"McGill University, Montreal, Quebec, Canada","institution_ids":["https://openalex.org/I5023651"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5010320214"],"corresponding_institution_ids":["https://openalex.org/I5023651"],"apc_list":null,"apc_paid":null,"fwci":0.6231,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.65824344,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"7","issue":"1","first_page":"1","last_page":"27"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10761","display_name":"Vehicular Ad Hoc Networks (VANETs)","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adaboost","display_name":"AdaBoost","score":0.7801066040992737},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7703002691268921},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.7222881317138672},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.6698922514915466},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.6280064582824707},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5655942559242249},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.5463954210281372},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.5346433520317078},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.527141809463501},{"id":"https://openalex.org/keywords/gradient-boosting","display_name":"Gradient boosting","score":0.5253649950027466},{"id":"https://openalex.org/keywords/f1-score","display_name":"F1 score","score":0.511585533618927},{"id":"https://openalex.org/keywords/tree","display_name":"Tree (set theory)","score":0.43047699332237244},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.33276569843292236},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.2905493974685669},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.09985512495040894}],"concepts":[{"id":"https://openalex.org/C141404830","wikidata":"https://www.wikidata.org/wiki/Q2823869","display_name":"AdaBoost","level":3,"score":0.7801066040992737},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7703002691268921},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.7222881317138672},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.6698922514915466},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6280064582824707},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5655942559242249},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.5463954210281372},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5346433520317078},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.527141809463501},{"id":"https://openalex.org/C70153297","wikidata":"https://www.wikidata.org/wiki/Q5591907","display_name":"Gradient boosting","level":3,"score":0.5253649950027466},{"id":"https://openalex.org/C148524875","wikidata":"https://www.wikidata.org/wiki/Q6975395","display_name":"F1 score","level":2,"score":0.511585533618927},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.43047699332237244},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33276569843292236},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2905493974685669},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.09985512495040894},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/3566132","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3566132","pdf_url":null,"source":{"id":"https://openalex.org/S2506189754","display_name":"ACM Transactions on Cyber-Physical Systems","issn_l":"2378-962X","issn":["2378-962X","2378-9638"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ACM Transactions on Cyber-Physical Systems","raw_type":"journal-article"},{"id":"pmh:doi:10.82308/10627","is_oa":false,"landing_page_url":"https://hdl.handle.net/20.500.14905/109706","pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"https://vocabularies.coar-repositories.org/resource_types/c_46ec/"},{"id":"pmh:oai:escholarship.mcgill.ca:f4752n789","is_oa":false,"landing_page_url":"https://escholarship.mcgill.ca/concern/theses/f4752n789","pdf_url":null,"source":{"id":"https://openalex.org/S4306401568","display_name":"eScholarship@McGill (McGill)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I5023651","host_organization_name":"McGill University","host_organization_lineage":["https://openalex.org/I5023651"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Thesis"},{"id":"doi:10.82308/10627","is_oa":true,"landing_page_url":"https://doi.org/10.82308/10627","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"thesis"}],"best_oa_location":{"id":"doi:10.82308/10627","is_oa":true,"landing_page_url":"https://doi.org/10.82308/10627","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"thesis"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G7576198368","display_name":null,"funder_award_id":"RGPIN-2018-05668","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"}],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W649534773","https://openalex.org/W1629374427","https://openalex.org/W1898119115","https://openalex.org/W1988790447","https://openalex.org/W1988918299","https://openalex.org/W1992900191","https://openalex.org/W2033751220","https://openalex.org/W2052673017","https://openalex.org/W2068748869","https://openalex.org/W2080575300","https://openalex.org/W2106958114","https://openalex.org/W2116520617","https://openalex.org/W2117189409","https://openalex.org/W2133854595","https://openalex.org/W2153919695","https://openalex.org/W2166668397","https://openalex.org/W2286343943","https://openalex.org/W2296701710","https://openalex.org/W2461378669","https://openalex.org/W2490042896","https://openalex.org/W2536935267","https://openalex.org/W2538902806","https://openalex.org/W2545810962","https://openalex.org/W2550909413","https://openalex.org/W2561675875","https://openalex.org/W2574198446","https://openalex.org/W2604623014","https://openalex.org/W2605933137","https://openalex.org/W2703342623","https://openalex.org/W2732717245","https://openalex.org/W2734682423","https://openalex.org/W2739928414","https://openalex.org/W2745106069","https://openalex.org/W2790772609","https://openalex.org/W2792633639","https://openalex.org/W2883344982","https://openalex.org/W2890419336","https://openalex.org/W2905368200","https://openalex.org/W2913402274","https://openalex.org/W2925076195","https://openalex.org/W2963510861","https://openalex.org/W2964052849","https://openalex.org/W2990569032","https://openalex.org/W2997591727","https://openalex.org/W3015001872","https://openalex.org/W3018640761","https://openalex.org/W3036013726","https://openalex.org/W3106212564","https://openalex.org/W3113318921","https://openalex.org/W6912899586"],"related_works":["https://openalex.org/W4298012357","https://openalex.org/W3100297620","https://openalex.org/W4296081764","https://openalex.org/W4206556944","https://openalex.org/W3204641204","https://openalex.org/W4293069612","https://openalex.org/W4323060081","https://openalex.org/W4360897561","https://openalex.org/W3204021295","https://openalex.org/W4375930479"],"abstract_inverted_index":{"The":[0,84,267],"controller":[1],"area":[2,176],"network":[3],"(CAN)":[4],"protocol,":[5],"used":[6,131],"in":[7,60,77,137,209,237,258,301,325],"many":[8],"modern":[9],"vehicles":[10],"for":[11,25,249],"real-time":[12],"inter-device":[13],"communications,":[14],"is":[15,91,316],"known":[16],"to":[17,39,57,74,132,159],"have":[18,37,68],"cybersecurity":[19],"vulnerabilities,":[20],"putting":[21],"passengers":[22],"at":[23,231],"risk":[24],"data":[26],"exfiltration":[27],"and":[28,46,80,128,153,156,188,193,223,294],"control":[29],"system":[30],"sabotage.":[31],"To":[32],"address":[33],"this":[34,111],"issue,":[35],"researchers":[36],"proposed":[38],"utilize":[40],"security":[41],"measures":[42],"based":[43],"on":[44,63,96],"cryptography":[45],"message":[47,201],"authentication;":[48],"unfortunately,":[49],"such":[50,291],"approaches":[51,290],"are":[52,108],"often":[53],"too":[54],"computationally":[55],"expensive":[56],"be":[58],"deployed":[59],"real":[61],"time":[62,307],"CAN":[64,78,255],"devices.":[65],"Additionally,":[66,282],"they":[67,93,101],"developed":[69],"machine":[70],"learning":[71,117],"(ML)":[72],"techniques":[73,90,121],"detect":[75,133],"anomalies":[76,107],"traffic":[79,257],"thereby":[81],"prevent":[82],"attacks.":[83],"main":[85],"disadvantage":[86],"of":[87,146,181,221,229,234,239,246,276,288,304,313,323],"existing":[88],"ML-based":[89],"that":[92,104,115,135,165,205,285],"either":[94],"depend":[95],"additional":[97],"computational":[98],"hardware":[99],"or":[100],"heuristically":[102],"assume":[103],"all":[105],"communication":[106,256],"malicious.":[109],"In":[110,309],"article,":[112],"we":[113,283],"show":[114],"tree-based":[116,148],"ensembles":[118],"outperform":[119],"anomaly-based":[120],"like":[122],"AutoRegressive":[123],"Integrated":[124],"Moving":[125],"Average":[126],"(ARIMA)":[127],"Z-Score":[129,295],"when":[130,198],"attacks":[134,275],"result":[136],"increased":[138,235],"bus":[139],"utilization.":[140],"We":[141,163,203,242],"evaluated":[142,271],"the":[143,166,210,213,232,244,247,273,286,302,305,311,326],"detection":[144,228,238],"capacity":[145],"three":[147],"ensembles,":[149],"Adaboost,":[150],"gradient":[151,186],"boosting,":[152],"random":[154,189],"forests,":[155],"collectively":[157],"refer":[158],"these":[160],"as":[161,292],"DT-DS.":[162],"conclude":[164],"decision":[167],"tree":[168],"ensemble":[169],"with":[170,174,191,206,298,318],"Adaboost":[171],"performs":[172],"best":[173],"an":[175,207,217,263,320],"under":[177],"curve":[178],"(AUC)":[179],"score":[180,220],"0.999,":[182,222],"closely":[183],"followed":[184],"by":[185],"boosting":[187],"forests":[190],"0.997":[192],"0.991":[194],"AUC":[195,219,327],"scores,":[196],"respectively,":[197],"trained":[199],"using":[200,262],"profiles.":[202],"observe":[204],"increase":[208],"observation":[211,306],"window,":[212],"DT-DS":[214,314],"models":[215,315],"present":[216],"average":[218,321],"offer":[224],"a":[225,277,299],"nearly":[226],"perfect":[227],"attacks,":[230],"cost":[233],"latency":[236],"attacked":[240],"messages.":[241],"evaluate":[243],"performance":[245,287,312],"IDS":[248,268,289],"Aeronautical":[250],"Radio,":[251],"Incorporated\u2013":[252],"(ARINC)":[253],"encoded":[254],"avionic":[259],"systems,":[260],"generated":[261],"aerospace":[264],"testbench,":[265],"ARINC-825TBv2.":[266],"has":[269],"been":[270],"against":[272],"active":[274],"state-of-the-art":[278],"predictive":[279],"attacker":[280],"model.":[281],"observed":[284],"ARIMA":[293],"degrade":[296],"considerably":[297],"decrease":[300],"size":[303],"window.":[308],"contrast,":[310],"consistent,":[317],"only":[319],"drop":[322],"0.005":[324],"score.":[328]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2}],"updated_date":"2026-05-23T08:51:43.019350","created_date":"2025-10-10T00:00:00"}