Vehicle-RNA: Reverse Engineering With Dynamic Time Warping for Automotive Protocol

초록

As modern vehicles evolve and offer advanced functions managed by numerous ECUs, the potential for security threats increases due to the presence of expanded threat surfaces. Although research into intrusion detection systems (IDSs) and automotive fuzzing has progressed, such systems often rely on publicly available controller area network (CAN) data because proprietary CAN databases (CAN DBCs) limit access to essential information. This hampers the ability to counter sophisticated attacks, highlighting the need for precise mapping of CAN IDs and payloads. CAN reverse engineering (RE) is crucial, but is challenged by time-consuming manual analysis and incomplete PID information. To overcome these limitations, we propose the Vehicle-RNA framework, which employs machine learning (ML) and dynamic time warping (DTW) to automate the identification of CAN ID functions. The Vehicle-RNA framework is particularly effective in scenarios with limited data, achieving an F1 -score of 0.9388 and accurately identifying ten CAN IDs previously unanalyzed by OpenDBC, which represents a significant advancement in automotive cybersecurity.

키워드