CAN-MIRGU: a comprehensive CAN bus attack dataset from moving vehicles for intrusion detection system evaluation.

Rajapaksha, Sampath; Madzudzo, Garikayi; Kalutarage, Harsha; Petrovski, Andrei; Al-Kadri, M.Omar

Abstract

The Controller Area Network (CAN Bus) has emerged as the de facto standard for in-vehicle communication. However, the CAN bus lacks security features, such as encryption and authentication, making it vulnerable to cyberattacks. In response, the current literature has prioritized the development of Intrusion Detection Systems (IDSs). Nevertheless, the progress of IDS research encounters significant obstacles due to the absence of high-quality, publicly available real CAN data, especially data featuring realistic, verified attacks. This scarcity primarily arises from the substantial cost and associated risks involved in generating real attack data on moving vehicles. Addressing this hallenge, this paper introduces a novel CAN bus attack dataset collected from a modern automobile equipped with autonomous driving capabilities, operating under real-world driving conditions. The dataset includes 17 hours of benign data, covering a wide range of scenarios, crucial for training IDSs. Additionally, it comprises 26 physically verified real injection attacks, including Denial-of-Service (DoS), fuzzing, replay, and spoofing, targeting 13 CAN IDs. Furthermore, the dataset encompasses 10 simulated masquerade and suspension attacks, offering 2 hours and 54 minutes of attack data. This comprehensive dataset facilitates rigorous testing and evaluation of various IDSs against a diverse array of realistic attacks, contributing to the enhancement of in-vehicle security.

Citation

RAJAPAKSHA, S., MADZUDZO, G., KALUTARAGE, H., PETROVSKI, A. and AL-KADRI, M.O. 2024. CAN-MIRGU: a comprehensive CAN bus attack dataset from moving vehicles for intrusion detection system evaluation. In Proceedings of the 2nd Vehicle security and privacy symposium 2024 (VehicleSec 2024), co-located with the 2024 Network and distributed system security symposium (NDSS 2024), 26 February - 01 March 2024, San Diego, CA, USA. San Diego, CA: NDSS [online], paper 43. Available from: https://doi.org/10.14722/vehiclesec.2024.23043

• Presentation Conference Type: Conference Paper (published)
• Conference Name: 2nd Vehicle security and privacy symposium 2024 (VehicleSec 2024), co-located with the 2024 Network and distributed system security symposium (NDSS 2024)
• Start Date: Feb 26, 2024
• End Date: Mar 1, 2024
• Acceptance Date: Sep 13, 2023
• Online Publication Date: Mar 1, 2024
• Publication Date: Dec 31, 2024
• Deposit Date: Nov 12, 2024
• Publicly Available Date: Nov 12, 2024
• Publisher: Network and Distributed System Security (NDSS)
• Peer Reviewed: Peer Reviewed
• ISBN: 9798989437276
• DOI: https://doi.org/10.14722/vehiclesec.2024.23043
• Keywords: In-vehicle communication; Security; Encryption; Authentication; Cyberattacks
• Public URL: https://rgu-repository.worktribe.com/output/2408143
• Publisher URL: www.ndss-symposium.org