Invention Reference Number
This invention introduces a novel framework for detecting masquerade attacks in the CAN bus using graph machine learning (ML). We hypothesize that the integration of shallow graph embeddings with time series features derived from CAN frames enhances the detection of masquerade attacks. By representing CAN bus frames as message sequence graphs (MSGs) and enriching each node with contextual statistical attributes from time series, we can enhance detection capabilities across various attack patterns compared to using only graph-based features. This method ensures a comprehensive and dynamic analysis of CAN frame interactions, improving robustness and efficiency.
Contact
To learn more about this technology, email partnerships@ornl.gov or call 865-574-1051.