| NSF Org: |
CNS Division Of Computer and Network Systems |
| Recipient: |
|
| Initial Amendment Date: | September 1, 2016 |
| Latest Amendment Date: | May 5, 2017 |
| Award Number: | 1645987 |
| Award Instrument: | Standard Grant |
| Program Manager: |
Ralph Wachter
rwachter@nsf.gov (703)292-8950 CNS Division Of Computer and Network Systems CSE Directorate for Computer and Information Science and Engineering |
| Start Date: | October 1, 2016 |
| End Date: | September 30, 2020 (Estimated) |
| Total Intended Award Amount: | $190,449.00 |
| Total Awarded Amount to Date: | $206,449.00 |
| Funds Obligated to Date: |
FY 2017 = $16,000.00 |
| History of Investigator: |
|
| Recipient Sponsored Research Office: |
1350 BEARDSHEAR HALL AMES IA US 50011-2103 (515)294-5225 |
| Sponsor Congressional District: |
|
| Primary Place of Performance: |
1138 Pearson Ames IA US 50011-2207 |
| Primary Place of
Performance Congressional District: |
|
| Unique Entity Identifier (UEI): |
|
| Parent UEI: |
|
| NSF Program(s): |
Special Projects - CNS, CPS-Cyber-Physical Systems |
| Primary Program Source: |
01001718DB NSF RESEARCH & RELATED ACTIVIT |
| Program Reference Code(s): |
|
| Program Element Code(s): |
|
| Award Agency Code: | 4900 |
| Fund Agency Code: | 4900 |
| Assistance Listing Number(s): | 47.070 |
ABSTRACT
The security of every vehicle on the road is necessary to ensure the safety of every person on or near roadways, whether a motorist, bicyclist, or pedestrian. Features such as infotainment, telematics, and driver assistance greatly increase the complexity of vehicles: top-of-the-line cars contain over 200 computers and 100 million lines of software code. With rising complexity comes rising costs to ensure safety and security. This project investigates novel methods to improve vehicular security by detecting malicious cyber attacks against a moving automobile and responding to those attacks in a manner that ensures the safety of humans in close proximity to the vehicle.
The objective of this project is to protect in-vehicle networks from remote cyber attacks. The method of protection is a distributed in-vehicle network intrusion detection system (IDS) using information flow tracking and sensor data provenance in the cyber domain with novel approaches to address the physical uncertainty and time constraints of an automotive control system. When an intrusion is detected, the IDS triggers a fail-operational mode change to provide graceful degradation of service and initiate recovery without compromising human safety. Specific research aims of this project are to explore the design space of fail-operational IDS for automotive in-vehicle networks, to evaluate security and resiliency of an automobile using a fail-operational IDS, and to generalize fundamentals of a fail-operational IDS to other cyber-physical systems.
PUBLICATIONS PRODUCED AS A RESULT OF THIS RESEARCH
Note:
When clicking on a Digital Object Identifier (DOI) number, you will be taken to an external
site maintained by the publisher. Some full text articles may not yet be available without a
charge during the embargo (administrative interval).
Some links on this page may take you to non-federal websites. Their policies may differ from
this site.
PROJECT OUTCOMES REPORT
Disclaimer
This Project Outcomes Report for the General Public is displayed verbatim as submitted by the Principal Investigator (PI) for this award. Any opinions, findings, and conclusions or recommendations expressed in this Report are those of the PI and do not necessarily reflect the views of the National Science Foundation; NSF has not approved or endorsed its content.
This project’s primary objective was to explore approaches to protect in-vehicle networks from cyber attacks. Towards this objective, we developed an in-vehicle Intrusion Detection System (IDS) that combined information flow tracking techniques in the cyber domain with tracking of low-level timing characteristics in the physical domain. Research thrusts included an exploration of the design space of statistical, rule-based, and supervised learning based approaches to detecting intrusions on the Controller Area Network (CAN) bus. The intended use case of the IDS is to detect an intrusion and trigger a fail-operational mode change to provide graceful degradation of driving service and initiate recovery without compromising human safety. The proposed approach was validated using data captured with actual vehicle testbeds. An outcome of this research is an advancement in the understanding of IDS design in safety-critical systems, as well as an increased ability to detect, mitigate, and recover from remote cyber attacks in automotive systems.
This project generated and shared research artifacts in the form of publicly-available publications, software code, and automotive control bus data. The project also included integrative educational components for both graduate and undergraduate students through research mentorship (supporting 1 PhD student and 2 undergraduate students), new classroom modules introducing cybersecurity of automotive networks to students studying computer engineering, capstone design projects related to cyber-physical systems, and mentoring in open-source software development.
Last Modified: 10/20/2020
Modified by: Joseph A Zambreno
Please report errors in award information by writing to: awardsearch@nsf.gov.
