摘要
智能网联汽车的快速发展推动车载网络架构从传统CAN总线向高带宽、强拓展性的以太网转型。针对CAN总线入侵检测系统在车载以太网环境下的兼容性进行评估,既能有效利用现有安全资源、降低系统设计成本,又能为智能网联汽车安全架构顺利演进提供系统性解决方案。然而,由于CAN总线与车载以太网在通信特性、协议栈架构和数据传输机制等方面存在显著差异,如何实现安全资源的有效转化成为关键问题。为此,文章从跨协议适应性、检测方法兼容性、处理能力和扩展性4个维度,系统分析了现有CAN总线入侵检测系统的以太网兼容性,并提出多层级协议适配、检测方法改进、实时性与资源分配优化以及架构扩展性增强等优化策略。
The rapid development of intelligent connected vehicles has driven the evolution of in-vehicle network architectures from traditional CAN bus to Ethernet with higher bandwidth and stronger scalability.By evaluating the compatibility of the CAN bus intrusion detection system in the in-vehicle Ethernet environment,it is possible to maximize the utilization of existing security resources,providing a systematic solution for the evolution of the security architecture of intelligent connected vehicles while reducing system design costs.However,there are significant differences between CAN bus and in-vehicle Ethernet in terms of communication characteristics,protocol stacks,and data transmission mechanisms.To address the issue of security resource transformation,this paper comprehensively analyzed the Ethernet compatibility of existing CAN intrusion detection systems from four dimensions,including protocol adaptability,detection method compatibility,processing capacity,and expandability.Moreover,optimization strategies such as multi-level protocol adaptation,detection method improvement,real-time performance and resource optimization,and enhanced architecture expandability were proposed.
作者
曹越
方泊璎
魏高达
李金宇
杨洋
彭涛
CAO Yue;FANG Boying;WEI Gaoda;LI Jinyu;YANG Yang;PENG Tao(School of Cyber Science and Engineering,Wuhan University,Wuhan 430040,China;Wuhan INCHTEK Technology Co.,Ltd.,Wuhan 430056,China;Datang Interconnect Technology(Wuhan)Co.,Ltd.,Wuhan 430056,China;Hubei Provincial Engineering Research Center for Industrial Internet Integration Technology,Wuhan 430056,China)
出处
《信息网络安全》
北大核心
2025年第8期1175-1195,共21页
Netinfo Security
基金
国家重点研发计划[2024YFB3108400]
湖北省技术创新计划重大科技项目[2024BAA011]
武汉市人工智能创新专项[2023010402040020]。
关键词
智能网联汽车
CAN总线
以太网
入侵检测系统
兼容性
intelligent connected vehicles
CAN bus
Ethernet
intrusion detection system
compatibility
