Suricata-based SOME/IP intrusion detection system design and implementation

Shan Ding; Yuwei Cao; Raotao Deng

doi:10.1117/12.3030661

5 June 2024 Suricata-based SOME/IP intrusion detection system design and implementation

Shan Ding, Yuwei Cao, Raotao Deng

Proceedings Volume 13163, Fourth International Conference on Mechanical, Electronics, and Electrical and Automation Control (METMS 2024); 131637L (2024) https://doi.org/10.1117/12.3030661
Event: International Conference on Mechanical, Electronics, and Electrical and Automation Control (METMS 2024), 2024, Xi'an, China

Abstract

As the automotive industry continues to evolve towards electrification, interconnectivity, intellectualization, and sharing, the electronic and electrical architecture within vehicles is increasingly integrating with cloud-based systems. Despite its numerous advantages, SOME/IP, a protocol widely employed in vehicular network systems, is not without its security risks. This paper presents the design of an IDS for SOME/IP based on Suricata, capable of identifying and parsing SOME/IP traffic, scrutinizing various fields, and generating alerts in response to anomalous traffic patterns. Experimental testing was conducted to evaluate the system’s ability to detect replay attacks, header anomalies, and SOME/IP-SD feature anomalies. Results indicate that the proposed intrusion detection system can effectively identify these types of attacks, thereby enhancing the security of SOME/IP communications within vehicular environments.

(2024) Published by SPIE. Downloading of the abstract is permitted for personal use only.

Citation Download Citation

Shan Ding, Yuwei Cao, and Raotao Deng "Suricata-based SOME/IP intrusion detection system design and implementation", Proc. SPIE 13163, Fourth International Conference on Mechanical, Electronics, and Electrical and Automation Control (METMS 2024), 131637L (5 June 2024); https://doi.org/10.1117/12.3030661

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available

Members: $17.00

Non-members: $21.00 ADD TO CART

PROCEEDINGS
7 PAGES

DOWNLOAD PAPER SAVE TO MY LIBRARY

GET CITATION

RIGHTS & PERMISSIONS

Get copyright permission Get copyright permission on Copyright Marketplace

KEYWORDS

Computer intrusion detection

Telecommunications

Information security

Network security

Counterfeit detection

Compliance

Data communications

Keywords/Phrases

Search In:

Publication Years