CPS: Breakthrough: Collaborative Research: Track and Fallback: Intrusion Detection to Counteract Carjack Hacks with Fail-Operational Feedback

为了确保道路上或附近每个人的安全，道路上的每一辆车的安全都是必要的，无论是驾车者、骑自行车的人还是行人。信息娱乐、远程信息处理和驾驶员辅助等功能极大地增加了车辆的复杂性：顶级汽车包含200多台计算机和1亿行软件代码。随着复杂性的增加，确保安全和安保的成本也在上升。该项目研究提高车辆安全性的新方法，通过检测针对移动汽车的恶意网络攻击，并以确保靠近车辆的人的安全的方式响应这些攻击。该项目的目标是保护车载网络免受远程网络攻击。这种保护方法是一种分布式车载网络入侵检测系统(IDS)，它使用网络领域的信息流跟踪和传感器数据来源，并采用新的方法来解决汽车控制系统的物理不确定性和时间限制。当检测到入侵时，入侵检测系统会触发故障操作模式更改，以提供正常的服务降级并启动恢复，而不会危及人的安全。本项目的具体研究目标是探索用于汽车车载网络的故障操作入侵检测系统的设计空间，使用故障操作入侵检测系统评估汽车的安全性和弹性，并将故障操作入侵检测系统的基本原理推广到其他网络物理系统。

The security of every vehicle on the road is necessary to ensure the safety of every person on or near roadways, whether a motorist, bicyclist, or pedestrian. Features such as infotainment, telematics, and driver assistance greatly increase the complexity of vehicles: top-of-the-line cars contain over 200 computers and 100 million lines of software code. With rising complexity comes rising costs to ensure safety and security. This project investigates novel methods to improve vehicular security by detecting malicious cyber attacks against a moving automobile and responding to those attacks in a manner that ensures the safety of humans in close proximity to the vehicle.The objective of this project is to protect in-vehicle networks from remote cyber attacks. The method of protection is a distributed in-vehicle network intrusion detection system (IDS) using information flow tracking and sensor data provenance in the cyber domain with novel approaches to address the physical uncertainty and time constraints of an automotive control system. When an intrusion is detected, the IDS triggers a fail-operational mode change to provide graceful degradation of service and initiate recovery without compromising human safety. Specific research aims of this project are to explore the design space of fail-operational IDS for automotive in-vehicle networks, to evaluate security and resiliency of an automobile using a fail-operational IDS, and to generalize fundamentals of a fail-operational IDS to other cyber-physical systems.