Blockchain integration for in-vehicle CAN bus intrusion detection systems with ISO/SAE 21434 compliant reporting

Area of Science:

• Cybersecurity
• Automotive Systems Engineering
• Network Security

Background:

• Increasing vehicle connectivity and vulnerabilities necessitate robust Intrusion Detection Systems (IDS).
• Resource-intensive IDS can leverage powerful Android head units and cloud computing for in-vehicle networks.

Purpose of the Study:

• To develop a hybrid IDS combining local head unit processing with cloud-based analysis for enhanced vehicle security.
• To establish a continuously updated cloud service for detecting evolving cyber threats in automotive environments.

Main Methods:

• Implementing a dual-component IDS: a local instance on Android head units and a centralized cloud instance.
• Utilizing cloud services for advanced threat detection and analysis across groups of similar vehicles.
• Employing an incident response team for attack verification and impact assessment, with Blockchain for secure, traceable reporting compliant with ISO/SAE 21434.

Main Results:

• A functional hybrid IDS architecture capable of monitoring in-vehicle network traffic.
• A cloud-based threat intelligence system updated with current attack vectors.
• Secure and transparent incident reporting through Blockchain, adhering to automotive cybersecurity standards.

Conclusions:

• The proposed hybrid IDS effectively enhances the security of connected vehicles by combining edge and cloud capabilities.
• Continuous updates and expert analysis ensure the system's resilience against emerging automotive cyber threats.
• Blockchain integration provides a transparent and traceable method for incident reporting, aligning with ISO/SAE 21434 standards.