IDEAS home Printed from https://ideas.repec.org/a/gam/jftint/v16y2024i6p185-d1400625.html
   My bibliography  Save this article

HP-LSTM: Hawkes Process–LSTM-Based Detection of DDoS Attack for In-Vehicle Network

Author

Listed:
  • Xingyu Li

    (The School of Computer Engineering and Science, Shanghai University, Shanghai 200444, China)

  • Ruifeng Li

    (The School of Computer Engineering and Science, Shanghai University, Shanghai 200444, China)

  • Yanchen Liu

    (The School of Computer Engineering and Science, Shanghai University, Shanghai 200444, China)

Abstract

Connected and autonomous vehicles (CAVs) are advancing at a fast speed with the improvement of the automotive industry, which opens up new possibilities for different attacks. A Distributed Denial-of-Service (DDoS) attacker floods the in-vehicle network with fake messages, resulting in the failure of driving assistance systems and impairment of vehicle control functionalities, seriously disrupting the normal operation of the vehicle. In this paper, we propose a novel DDoS attack detection method for in-vehicle Ethernet Scalable service-Oriented Middleware over IP (SOME/IP), which integrates the Hawkes process with Long Short-Term Memory networks (LSTMs) to capture the dynamic behavioral features of the attacker. Specifically, we employ the Hawkes process to capture features of the DDoS attack, with its parameters reflecting the dynamism and self-exciting properties of the attack events. Subsequently, we propose a novel deep learning network structure, an HP-LSTM block, inspired by the Hawkes process, while employing a residual attention block to enhance the model’s detection efficiency and accuracy. Additionally, due to the scarcity of publicly available datasets for SOME/IP, we employed a mature SOME/IP generator to create a dataset for evaluating the validity of the proposed detection model. Finally, extensive experiments were conducted to demonstrate the effectiveness of the proposed DDoS attack detection method.

Suggested Citation

  • Xingyu Li & Ruifeng Li & Yanchen Liu, 2024. "HP-LSTM: Hawkes Process–LSTM-Based Detection of DDoS Attack for In-Vehicle Network," Future Internet, MDPI, vol. 16(6), pages 1-21, May.
  • Handle: RePEc:gam:jftint:v:16:y:2024:i:6:p:185-:d:1400625
    as

    Download full text from publisher

    File URL: https://www.mdpi.com/1999-5903/16/6/185/pdf
    Download Restriction: no

    File URL: https://www.mdpi.com/1999-5903/16/6/185/
    Download Restriction: no
    ---><---

    More about this item

    Keywords

    Hawkes process; LSTM; DDoS; SOME/IP;
    All these keywords.

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:gam:jftint:v:16:y:2024:i:6:p:185-:d:1400625. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    We have no bibliographic references for this item. You can help adding them by using this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: MDPI Indexing Manager (email available below). General contact details of provider: https://www.mdpi.com .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.