[论文解读] Cybersecurity Attacks in Vehicle-to-Infrastructure (V2I) Applications and their Prevention

Mhafuzul Islam, Mashrur Chowdhury+2 more|arXiv (Cornell University)|Nov 29, 2017

Vehicular Ad Hoc Networks (VANETs)参考文献 14被引用 3

一句话总结

本文提出CVGuard，一种新型的V2I网络安全架构，旨在检测并防范车联网环境中的网络攻击，特别是DDoS攻击。在Stop Sign Gap Assist（SSGA）应用上的评估显示，CVGuard在DDoS攻击期间将车辆间冲突减少了60%，证明了其在提升无信号交叉路口安全性方面的有效性。

ABSTRACT

A connected vehicle (CV) environment is composed of a diverse data collection, data communication and dissemination, and computing infrastructure systems that are vulnerable to the same cyberattacks as all traditional computing environments. Cyberattacks can jeopardize the expected safety, mobility, energy, and environmental benefits from connected vehicle applications. As cyberattacks can lead to severe traffic incidents, it has become one of the primary concerns in connected vehicle applications. In this paper, we investigate the impact of cyberattacks on the vehicle-to-infrastructure (V2I) network from a V2I application point of view. Then, we develop a novel V2I cybersecurity architecture, named CVGuard, which can detect and prevent cyberattacks on the V2I environment. In designing CVGuard, key challenges, such as scalability, resiliency and future usability were considered. A case study using a distributed denial of service (DDoS) on a V2I application, i.e., the Stop Sign Gap Assist (SSGA) application, shows that CVGuard was effective in mitigating the adverse effects created by a DDoS attack. In our case study, because of the DDoS attack, conflicts between the minor and major road vehicles occurred in an unsignalized intersection, which could have caused potential crashes. A reduction of conflicts between vehicles occurred because CVGuard was in operation. The reduction of conflicts was compared based on the number of conflicts before and after the implementation and operation of the CVGuard security platform. Analysis revealed that the strategies adopted by the CVGuard were successful in reducing the inter-vehicle conflicts by 60% where a DDoS attack compromised the SSGA application at an unsignalized intersection.

研究动机与目标

• 应对日益增长的车辆到基础设施（V2I）网络中网络攻击威胁，此类威胁危及安全、通行效率和环境效益。
• 识别并分析针对V2I应用的特定网络威胁，特别是影响无信号交叉路口交通安全部位的威胁。
• 设计一种可扩展、弹性且面向未来的网络安全框架，专为V2I环境量身定制，以确保在遭受攻击时仍能可靠运行。
• 通过一个涉及SSGA应用DDoS攻击的真实案例研究，证明所提出解决方案的实际有效性。

提出的方法

• 开发了CVGuard，一种集成检测与防护机制的V2I网络安全架构，用于检测车联网网络中的网络威胁。
• 在设计架构时充分考虑可扩展性、弹性与可扩展性，以支持不断演进的V2I应用。
• 实现基于V2I通信中流量模式异常偏离的实时异常检测，以识别DDoS攻击。
• 集成缓解策略，可在攻击期间动态调整通信协议并优先处理安全关键消息。
• 通过在无信号交叉路口对SSGA应用实施模拟DDoS攻击，对系统进行了评估。
• 量化了部署CVGuard前后车辆间冲突的减少情况，以衡量其有效性。

实验结果

研究问题

• RQ1 网络攻击，特别是DDoS攻击，如何影响V2I应用（如无信号交叉路口的Stop Sign Gap Assist，SSGA）的安全性和可靠性？
• RQ2 为确保V2I网络安全框架具备可扩展性、弹性与未来可用性，需要哪些架构组件？
• RQ3 像CVGuard这样的主动网络安全架构，在V2I应用遭受DDoS攻击期间，能在多大程度上减少车辆间冲突？
• RQ4 实时异常检测与动态缓解机制的集成，如何提升V2I通信在遭受攻击时的鲁棒性？

主要发现

• CVGuard成功缓解了DDoS攻击对SSGA应用的负面影响，将车辆间冲突减少了60%。
• DDoS攻击最初导致无信号交叉路口处次要道路与主要道路车辆之间发生冲突，增加了碰撞风险。
• 通过实时检测并响应异常流量模式，CVGuard的部署恢复了更安全的交通协调。
• 该架构表现出强大的可扩展性与弹性，在持续攻击条件下仍能维持功能。
• 案例研究证实，主动检测与缓解措施能显著提升V2I环境下的安全性。
• 定量分析表明，CVGuard的策略有效减少了冲突事件，验证了其在真实场景中的实际效用。