|
Work item:
|
X.ipscv
|
|
Subject/title:
|
Methodologies of intrusion prevention systems for connected vehicles
|
|
Status:
|
[Carried to next study period]
|
|
Approval process:
|
AAP
|
|
Type of work item:
|
Recommendation
|
|
Version:
|
New
|
|
Equivalent number:
|
-
|
|
Timing:
|
-
|
|
Liaison:
|
-
|
|
Supporting members:
|
-
|
|
Summary:
|
The main goal of the Recommendation is protecting in-vehicle networks (IVNs) and further connected and autonomous vehicles from internal and external attacks by detection and prevention. By using a programmable switch with access control functionality and collaboration with IDSes, the proposed framework allows a standardized way of communication and prevention strategy to connected vehicles. Prior IDS for vehicles have some limitations, e.g., lack of computation power and unable to mitigate intrusion due to characteristics of protocol and bus topology. On the other hand, the hybrid IVNs, Ethernet, or automotive Ethernet are not discussed adequately against intrusion. In this draft Recommendation, the IVN contains one or more programmable switch with access control functionality. The proposed framework has following collaboration strategies; (1) An in-vehicle switch handles all incoming packets if the switch knows how to handle the packets. If there are unknown packets incoming, the switch queries an outside switch controller to find out how to handle this traffic. (2) The external IDS determines whether the vehicle is under attack, and if it is determined as an attack, the external IDS updates the rules on the internal switch to remedy such attack. (3) When there is similar intrusion in the future, the internal switch simply remedies such attack so that the vehicle keeps driving securely and safely.
|
|
Comment:
|
-
|
|
Reference(s):
|
|
|
Historic references:
|
|
Contact(s):
|
|
| ITU-T A.5 justification(s): |
|
|
|
|
First registration in the WP:
2019-09-11 13:07:44
|
|
Last update:
2021-09-10 15:43:54
|
