The paper presents a digital‑twin (DT) based intrusion detection system (IDS) for vehicle powertrain CAN bus traffic, modeling physical relationships among decoded signals to detect payload‑manipulation attacks that preserve normal timing and sequencing. Using a shared‑encoder LSTM trained on 17 Hyundai/Kia CAN signals, the DT flags anomalies when residuals exceed a threshold, achieving high detection rates (up to 94.6%) for stealthy attacks such as continuous drift and masquerade, while a range‑and‑plausibility baseline fails to detect them. The study demonstrates that learning coupled vehicle dynamics enables detection of payload‑level attacks that evade traditional timing‑based IDSs, though false positives remain a challenge.
By Araf Rahman, M Sabbir Salek, Mashrur Chowdhury
arXiv:2608. 05548v1 Announce Type: cross Abstract: Modern vehicles rely on the Controller Area Network (CAN) bus, whose design prioritizes low cost and real-time performance but provides no message authentication or encryption.
By Chandan Hegde, Mukundh R Reddy
arXiv:2606. 18599v1 Announce Type: cross Abstract: The Controller Area Network (CAN) protocol is the primary communication standard for Electronic Control Units (ECUs) in modern vehicles, but its lack of encryption and authentication exposes it to a range of security threats.
By Qiqi Liu, Runhan Song, Lei Cui, Heng Zhang, Yuyan Sun, Limin Sun
arXiv:2606. 28625v1 Announce Type: cross Abstract: Connected Vehicles (CVs) rely extensively on communication technologies to enable data-driven predictive analyses for enhancing performance and safety.
By Mohammad Imtiaz Hasan, Abyad Enan, Jean Michel Tine, Araf Rahman, M Sabbir Salek, Mashrur Chowdhury
SPADE is a labelled, multi‑modal, simulation‑based dataset for detecting attacks on Signal Phase and Timing (SPaT) messages from the perspective of connected vehicles. It contains 1.89 million timestep records generated by injecting six classes of application‑layer attacks and one benign class into the SAE J2735 SPaT protocol, across multiple intersection geometries, operating conditions, and random seeds. Each record fuses SPaT fields, onboard camera confidence scores, and cooperative V2V peer data into 40 features, enabling deep‑learning intrusion detection systems to distinguish deliberate attacks from environmental noise.
The paper introduces SPADE, a labelled, multi‑modal dataset for detecting attacks on Signal Phase and Timing (SPaT) messages from the perspective of connected vehicles. Generated via Eclipse MOSAIC, SPADE includes 1.89 million timestep records across six attack classes and one benign class, combining SPaT fields, camera confidence scores, and V2V peer data over 40 features. The dataset, along with generation code and scenario configurations, is publicly released on GitHub to enable reproducible deep‑learning intrusion detection research in C‑V2X security.
By James Di Novo, Hany Ragab, Sylvain P. Leblanc
arXiv:2606. 30430v1 Announce Type: cross Abstract: The increasing connectivity of modern vehicles has made securing in-vehicle communication networks a critical challenge.
By Beatrix Koltai, Gergely Acs, Andras Gazdag
arXiv:2610.07489v1 Announce Type: cross
Abstract: Increasing connectivity to the outside world and the lack of inbuilt security mechanisms have made legacy intra-vehicular networks vulnerable to cybe...
By Shashwat Khandelwal, Shanker Shreejith
arXiv:2608. 16159v1 Announce Type: cross Abstract: Digital Twins (DTs) are increasingly used to monitor and analyze Cyber Physical Systems (CPS).
By Konstantinos E. Kampourakis, Vasileios Gkioulos, Sokratis Katsikas
The paper introduces a privacy‑preserving anomaly detection framework for in‑vehicle networks that uses a Temporal Transformer CAN Encoder with Federated Lightweight Heads. It captures subtle temporal and contextual irregularities in CAN bus traffic by learning signal evolution over time, while federated learning allows multiple vehicles or ECUs to collaboratively improve a shared model without sharing raw data. Experiments on open‑source datasets demonstrate robust detection performance with maintained efficiency and privacy.
By Konstantinos Gyftodimos, Kyriakos Chiotis, Elena Politi, George Dimitrakopoulos, Eirini Liotou
Modern vehicles rely on large numbers of Electronic Control Units (ECUs) that constantly exchange information over the Controller Area Network (CAN) bus. Due to the rapidity, structure, and repetition...
arXiv:2601. 01701v2 Announce Type: replace-cross Abstract: Anomaly detection is increasingly becoming crucial for maintaining the safety, reliability, and efficiency of industrial systems.
By Mohammed Ayalew Belay, Adil Rasheed, Pierluigi Salvo Rossi