Learning-Based Intrusion Detection Systems for In-Vehicle CAN Networks: A Comprehensive Survey with Deployment and Real-Time Considerations
DOI:
https://doi.org/10.5753/jbcs.2026.6140Keywords:
Controller Area Network, Intrusion Detection System, Machine Learning, Deep Learning, Automotive Cybersecurity, Cyberattacks, CAN Bus Security, Hybrid, Vehicle NetworksAbstract
The Controller Area Network (CAN) bus continues to serve as the core communication backbone of modern vehicles. However, its original design did not incorporate fundamental security mechanisms, leaving in-vehicle networks vulnerable to cyberattacks such as spoofing, replay, message injection, and denial-of-service. As a result, Intrusion Detection Systems (IDSs) have become an essential component of automotive cybersecurity, providing continuous monitoring of CAN traffic to identify malicious behavior. In recent years, researchers have increasingly turned to intelligent IDS solutions based on Machine Learning (ML), Deep Learning (DL), and hybrid learning approaches to enhance detection capability. Although many of these studies report impressive detection accuracy, their evaluation practices often vary significantly, and claims related to real-time performance or lightweight deployment are frequently made without sufficient practical validation. This survey provides a structured, deployment-focused review of learning-based IDSs for CAN bus security published between 2019 and 2025. Building on prior surveys that emphasize detection accuracy and high-level method categorization, this work evaluates IDS approaches from a practical perspective by considering detection performance alongside computational efficiency, real-time feasibility, and deployment readiness in resource-constrained automotive environments. ML-based, DL-based, and hybrid IDS approaches are organized within a unified taxonomy and systematically compared across model architectures, attack scenarios, datasets, real-time feasibility, lightweight design claims, and validation strategies. A key contribution of this survey is the introduction of explicit and consistent criteria for labeling IDSs as lightweight, real-time, or deployable, based only on substantiated evidence such as ECU-oriented runtime analysis, embedded evaluation, or real-vehicle experimentation. Through a set of unified comparative tables, the survey highlights common evaluation gaps, and mismatches between reported performance and practical feasibility.
Downloads
References
Abdullah, D. M. and Abdulazeez, A. M. (2021). Machine learning applications based on svm classification a review. Qubahan Academic Journal, 1(2):81-90. DOI: 10.48161/qaj.v1n2a50.
Aksu, D. and Aydin, M. A. (2022). Mga-ids: Optimal feature subset selection for anomaly detection framework on in-vehicle networks-can bus based on genetic algorithm and intrusion detection approach. Computers & Security, 118:102717. DOI: 10.1016/j.cose.2022.102717.
Al-Aql, N. and Al-Shammari, A. (2024). Hybrid rnn-lstm networks for enhanced intrusion detection in vehicle can systems. Journal of Electrical Systems, 33(1):1-8. DOI: 10.52783/jes.3318.
Al Isawi, O. A., Al Jaafari, K. A., and Al Sumaiti, A. S. (2025). Electric vehicles can bus cyber attacks detection using adaptive neuro fuzzy inference system. IEEE Access. DOI: 10.1109/access.2025.3550970.
Al-Jarrah, O. Y., Maple, C., Dianati, M., Oxtoby, D., and Mouzakitis, A. (2019). Intrusion detection systems for intra-vehicle networks: A review. Ieee Access, 7:21266-21289. DOI: 10.1109/access.2019.2894183.
Al Maruf, M. and Azim, A. (2024). Anomaly detection and functional testing for automotive can communication. In 2024 IEEE International Systems Conference (SysCon), pages 1-8. IEEE. DOI: 10.1109/syscon61195.2024.10553463.
Al-Saud, M., Eltamaly, A. M., Mohamed, M. A., and Kavousi-Fard, A. (2019). An intelligent data-driven model to secure intravehicle communications based on machine learning. IEEE Transactions on Industrial Electronics, 67(6):5112-5119. DOI: 10.1109/tie.2019.2924870.
Alalwany, E. and Mahgoub, I. (2024). An effective ensemble learning-based real-time intrusion detection scheme for an in-vehicle network. Electronics, 13(5):919. DOI: 10.3390/electronics13050919.
Alfardus, A. and Rawat, D. B. (2021). Intrusion detection system for can bus in-vehicle network based on machine learning algorithms. In 2021 IEEE 12th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON), pages 0944-0949. IEEE. DOI: 10.1109/uemcon53757.2021.9666745.
Aliwa, E., Rana, O., Perera, C., and Burnap, P. (2021). Cyberattacks and countermeasures for in-vehicle networks. ACM computing surveys (CSUR), 54(1):1-37. DOI: 10.1145/3431233.
Aljabri, W., Hamid, M. A., and Mosli, R. (2025). Enhancing real-time intrusion detection system for in-vehicle networks by employing novel feature engineering techniques and lightweight modeling. Ad Hoc Networks, 169:103737. DOI: 10.1016/j.adhoc.2024.103737.
Alkhatib, N., Mushtaq, M., Ghauch, H., and Danger, J.-L. (2022). Can-bert do it? controller area network intrusion detection system based on bert language model. In 2022 IEEE/ACS 19th International Conference on Computer Systems and Applications (AICCSA), pages 1-8. IEEE. DOI: 10.1109/aiccsa56895.2022.10017800.
Almehdhar, M., Albaseer, A., Khan, M. A., Abdallah, M., Menouar, H., Al-Kuwari, S., and Al-Fuqaha, A. (2024). Deep learning in the fast lane: A survey on advanced intrusion detection systems for intelligent vehicle networks. IEEE Open Journal of Vehicular Technology. DOI: 10.1109/ojvt.2024.3422253.
Althunayyan, M., Javed, A., and Rana, O. (2024). A robust multi-stage intrusion detection system for in-vehicle network security using hierarchical federated learning. arXiv preprint arXiv:2408.08433. DOI: 10.1016/j.vehcom.2024.100837.
Althunayyan, M., Javed, A., and Rana, O. (2025). A survey of learning-based intrusion detection systems for in-vehicle network. arXiv preprint arXiv:2505.11551. DOI: 10.48550/arxiv.2505.11551.
Amato, F., Coppolino, L., Mercaldo, F., Moscato, F., Nardone, R., and Santone, A. (2021). Can-bus attack detection with deep learning. IEEE Transactions on Intelligent Transportation Systems, 22(8):5081-5090. DOI: 10.1109/tits.2020.3046974.
Anjum, A., Agbaje, P., Hounsinou, S., and Olufowobi, H. (2022). In-vehicle network anomaly detection using extreme gradient boosting machine. In 2022 11th Mediterranean Conference on Embedded Computing (MECO), pages 1-6. IEEE. DOI: 10.1109/meco55406.2022.9797224.
Avatefipour, O., Al-Sumaiti, A. S., El-Sherbeeny, A. M., Awwad, E. M., Elmeligy, M. A., Mohamed, M. A., and Malik, H. (2019). An intelligent secured framework for cyberattack detection in electric vehicles’ can bus using machine learning. Ieee Access, 7:127580-127592. DOI: 10.1109/access.2019.2937576.
Avatefipour, O. and Malik, H. (2018). State-of-the-art survey on in-vehicle network communication (can-bus) security and vulnerabilities. arXiv preprint arXiv:1802.01725. DOI: 10.48550/arxiv.1802.01725.
Azzarà, D. (2023). Candemonium: an evaluation test bed for objective can intrusion detection systems benchmarking. Available at:[link].
Balasubramanian, K., Baragur, A. G., Donadel, D., Sahabandu, D., Brighente, A., Ramasubramanian, B., Conti, M., and Poovendran, R. (2025). Canlp: Intrusion detection for controller area networks using natural language processing and embedded machine learning. IEEE Transactions on Dependable and Secure Computing. DOI: 10.1109/tdsc.2025.3596516.
Bari, B. S., Yelamarthi, K., and Ghafoor, S. (2023). Intrusion detection in vehicle controller area network (can) bus using machine learning: A comparative performance study. Sensors, 23(7):3610. DOI: 10.3390/s23073610.
Bonomo, J. P. A., Volpato, J. V., De Carvalho, R. S., and Gracioli, G. (2024). Machine learning-based intrusion detection for automotive can networks on embedded platforms. In 2024 XIV Brazilian Symposium on Computing Systems Engineering (SBESC), pages 1-6. IEEE. DOI: 10.1109/sbesc65055.2024.10771926.
Bozdal, M., Samie, M., and Jennions, I. (2018). A survey on can bus protocol: Attacks, challenges, and potential solutions. In 2018 International Conference on Computing, Electronics & Communications Engineering (iCCECE), pages 201-205. IEEE. DOI: 10.1109/iccecome.2018.8658720.
Breiman, L. (2001). Random forests. Machine learning, 45(1):5-32. DOI: 10.1023/a:1010933404324.
Casillo, M., Coppolino, L., D’Antonio, S., and Mazzeo, G. (2019). Embedded intrusion detection for controller area network. IEEE Transactions on Vehicular Technology, 68(11):11329-11341. DOI: 10.1109/ICSRS48664.2019.8987605.
Cena, G., Seno, L., and Scanzio, S. (2025). Robust multicast origin authentication in macsec and cansec for automotive scenarios. arXiv preprint arXiv:2502.20555. DOI: 10.48550/arxiv.2502.20555.
Chen, T., He, T., Benesty, M., Khotilovich, V., Tang, Y., Cho, H., Chen, K., Mitchell, R., Cano, I., Zhou, T., et al. (2015). Xgboost: extreme gradient boosting. R package version 0.4-2, 1(4):1-4. DOI: 10.32614/cran.package.xgboost.
Chougule, A., Kulkarni, I., Alladi, T., Chamola, V., and Yu, F. R. (2024). Hybridsecnet: In-vehicle security on controller area networks through a hybrid two-step lstm-cnn model. IEEE Transactions on Vehicular Technology. DOI: 10.1109/tvt.2024.3413849.
Cortes, C. and Vapnik, V. (1995). Support-vector networks. Machine learning, 20(3):273-297. DOI: 10.1007/bf00994018.
Cover, T. and Hart, P. (1967). Nearest neighbor pattern classification. IEEE transactions on information theory, 13(1):21-27. DOI: 10.1109/tit.1967.1053964.
De Araujo-Filho, P. F., Pinheiro, A. J., Kaddoum, G., Campelo, D. R., and Soares, F. L. (2021). An efficient intrusion prevention system for can: Hindering cyber-attacks with a low-cost platform. IEEE Access, 9:166855-166869. DOI: 10.1109/access.2021.3136147.
Desta, A. K., Ohira, S., Arai, I., and Fujikawa, K. (2022). Rec-cnn: In-vehicle networks intrusion detection using convolutional neural networks trained on recurrence plots. Vehicular Communications, 35:100470. DOI: 10.1016/j.vehcom.2022.100470.
Devnath, M. K. (2023). Gcnids: Graph convolutional network-based intrusion detection system for can bus. DOI: 10.48550/arxiv.2309.10173.
Dosovitskiy, A., Ros, G., Codevilla, F., Lopez, A., and Koltun, V. (2017). Carla: An open urban driving simulator. In Conference on robot learning, pages 1-16. PMLR. DOI: 10.48550/arxiv.1711.03938.
Driouch, O., Bah, S., and Guennoun, Z. (2024). Cansat-ids: An adaptive distributed intrusion detection system for satellites, based on combined classification of can traffic. Computers & Security, 146:104033. DOI: 10.1016/j.cose.2024.104033.
Duda, R. O., Hart, P. E., et al. (2006). Pattern classification. John Wiley & Sons. DOI: 10.1007/978-1-4419-1428-6_5195.
Dupont, G., den Hartog, J., Etalle, S., and Lekidis, A. (2019a). A survey of network intrusion detection systems for controller area network. In 2019 IEEE International Conference on Vehicular Electronics and Safety (ICVES), pages 1-6. IEEE. DOI: 10.1109/icves.2019.8906465.
Dupont, G., Lekidis, A., Den Hartog, J., and Etalle, S. (2019b). Automotive controller area network (can) bus intrusion dataset v2. 4TU. Centre for Research Data. DOI: 10.4121/uuid:b74b4928-c377-4585-9432-2004dfa20a5d.
Dwivedi, A. K. (2022). Anomaly detection in intra-vehicle networks. arXiv preprint arXiv:2205.03537. DOI: 10.48550/arxiv.2205.03537.
El-Fatyany, A., Wang, X., Lu, L., and Ren, K. (2025). Ef-ids: An efficient intrusion detection system with enriched features for can bus in modern vehicles. Journal of Systems Architecture, page 103646. DOI: 10.1016/j.sysarc.2025.103646.
Elman, J. L. (1990). Finding structure in time. Cognitive science, 14(2):179-211. DOI: 10.1207/s15516709cog1402_1.
Fakhfakh, F., Tounsi, M., and Mosbah, M. (2022). Cybersecurity attacks on can bus based vehicles: a review and open challenges. Library hi tech, 40(5):1179-1203. DOI: 10.1108/lht-01-2021-0013.
Gao, K., Huang, H., Liu, L., Du, R., and Zhang, J. (2023). A multi-attention based cnn-bilstm intrusion detection model for in-vehicle networks. In 2023 IEEE Intl Conf on Parallel & Distributed Processing with Applications, Big Data & Cloud Computing, Sustainable Computing & Communications, Social Computing & Networking (ISPA/BDCloud/SocialCom/SustainCom), pages 809-816. IEEE. DOI: 10.1109/ispa-bdcloud-socialcom-sustaincom59178.2023.00138.
Gazdag, A., Ferenc, R., and Buttyán, L. (2023). Crysys dataset of can traffic logs containing fabrication and masquerade attacks. Scientific Data, 10(1):903. DOI: 10.1038/s41597-023-02716-9.
Guezzaz, A., Benkirane, S., Azrour, M., and Khurram, S. (2021). A reliable network intrusion detection approach using decision tree with enhanced data quality. Security and Communication Networks, 2021:1230593. DOI: 10.1155/2021/1230593.
Gundu, R. and Maleki, M. (2022). Securing can bus in connected and autonomous vehicles using supervised machine learning approaches. In 2022 IEEE International Conference on Electro Information Technology (eIT), pages 042-046. IEEE. DOI: 10.1109/eit53891.2022.9813985.
Han, M. L., Kwak, B. I., and Kim, H. K. (2018). Anomaly intrusion detection method for vehicular networks based on survival analysis. Vehicular communications, 14:52-63. DOI: 10.1016/j.vehcom.2018.09.004.
Hanselmann, M., Strauss, T., Dormann, K., and Ulmer, H. (2020). Canet: An unsupervised intrusion detection system for high dimensional can bus data. Ieee Access, 8:58194-58205. DOI: 10.1109/access.2020.2982544.
He, T., Zhang, L., Kong, F., and Salekin, A. (2020). Exploring inherent sensor redundancy for automotive anomaly detection. In 2020 57th ACM/IEEE Design Automation Conference (DAC), pages 1-6. IEEE. DOI: 10.1109/dac18072.2020.9218557.
He, Y., Jia, Z., Hu, M., Cui, C., Cheng, Y., and Yang, Y. (2021). The hybrid similar neighborhood robust factorization machine model for can bus intrusion detection in the in-vehicle network. IEEE Transactions on Intelligent Transportation Systems, 23(9):16833-16841. DOI: 10.1109/tits.2021.3113638.
Hochreiter, S. and Schmidhuber, J. (1997). Long short-term memory. Neural computation, 9(8):1735-1780. DOI: 10.1162/neco.1997.9.8.1735.
Hossain, M. D., Inoue, H., Ochiai, H., Fall, D., and Kadobayashi, Y. (2020a). An effective in-vehicle can bus intrusion detection system using cnn deep learning approach. In GLOBECOM 2020-2020 IEEE global communications conference, pages 1-6. IEEE. DOI: 10.1109/globecom42002.2020.9322395.
Hossain, M. D., Inoue, H., Ochiai, H., Fall, D., and Kadobayashi, Y. (2020b). Lstm-based intrusion detection system for in-vehicle can bus communications. Ieee Access, 8:185489-185502. DOI: 10.1109/access.2020.3029307.
Im, H., Lee, D., and Lee, S. (2024). A novel architecture for an intrusion detection system utilizing cross-check filters for in-vehicle networks. Sensors, 24(9):2807. DOI: 10.3390/s24092807.
Islam, S. H., Kumar, S., Immanuel, V. J., Sonthalia, P., Mondal, S., and Pal, A. (2024). Securing connected vehicles: An evaluation framework for can bus-enabled in-vehicle communications. In Proceedings of the 3rd International Conference on Computing Advancements, pages 162-168. DOI: 10.1145/3723178.3723200.
Kalkan, S. C. and Sahingoz, O. K. (2020). In-vehicle intrusion detection system on controller area network with machine learning models. In 2020 11th international conference on computing, communication and networking technologies (ICCCNT), pages 1-6. IEEE. DOI: 10.1109/icccnt49239.2020.9225442.
Kang, H., Vo, T., Kim, H. K., and Hong, J. B. (2024). Canival: A multimodal approach to intrusion detection on the vehicle can bus. Vehicular Communications, 50:100845. DOI: 10.1016/j.vehcom.2024.100845.
Kang, T. U., Song, H. M., Jeong, S., and Kim, H. K. (2018). Automated reverse engineering and attack for can using obd-ii. In 2018 IEEE 88th Vehicular Technology Conference (VTC-Fall), pages 1-7. IEEE. DOI: 10.1109/vtcfall.2018.8690781.
Karopoulos, G., Kambourakis, G., Chatzoglou, E., Hernández-Ramos, J. L., and Kouliaridis, V. (2022). Demystifying in-vehicle intrusion detection systems: A survey of surveys and a meta-taxonomy. Electronics, 11(7):1072. DOI: 10.3390/electronics11071072.
Khan, M. H., Javed, A. R., Iqbal, Z., Asim, M., and Awad, A. I. (2024). Divacan: Detecting in-vehicle intrusion attacks on a controller area network using ensemble learning. Computers & Security, 139:103712. DOI: 10.1016/j.cose.2024.103712.
Kheddar, H. (2025). Transformers and large language models for efficient intrusion detection systems: A comprehensive survey. Information Fusion, page 103347. DOI: 10.1016/j.inffus.2025.103347.
Kheddar, H., Dawoud, D. W., Awad, A. I., Himeur, Y., and Khan, M. K. (2024). Reinforcement-learning-based intrusion detection in communication networks: A review. IEEE Communications Surveys & Tutorials. DOI: 10.1109/comst.2024.3484491.
Kheddar, H., Himeur, Y., and Awad, A. I. (2023). Deep transfer learning applications in intrusion detection systems: A comprehensive review. arXiv preprint arXiv:2304.10550. DOI: 10.48550/arXiv.2304.10550.
Khraisat, A., Gondal, I., Vamplew, P., and Kamruzzaman, J. (2019). Survey of intrusion detection systems: techniques, datasets and challenges. Cybersecurity, 2(1):1-22. DOI: 10.1186/s42400-019-0038-7.
Kim, D., Im, H., and Lee, S. (2025). Adaptive autoencoder-based intrusion detection system with single threshold for can networks. Sensors, 25(13):4174. DOI: 10.3390/s25134174.
Koscher, K., Czeskis, A., Roesner, F., Patel, S., Kohno, T., Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., et al. (2010). Experimental security analysis of a modern automobile. In 2010 IEEE symposium on security and privacy, pages 447-462. IEEE. DOI: 10.1109/sp.2010.34.
Kumar, S. V., Singh, B., Batra, R., and Bhagat, A. K. (2024). An ai-powered security system for can bus attacks identification in electric automobiles. Proceedings on Engineering, 6(1):221-230. DOI: 10.24874/pes.si.24.02.005.
LeCun, Y., Bottou, L., Bengio, Y., and Haffner, P. (2002). Gradient-based learning applied to document recognition. Proceedings of the IEEE, 86(11):2278-2324. DOI: 10.1109/5.726791.
Lee, H., Jeong, S. H., and Kim, H. K. (2017). Otids: A novel intrusion detection system for in-vehicle network by using remote frame. In 2017 15th Annual Conference on Privacy, Security and Trust (PST), pages 57-5709. IEEE. DOI: 10.1109/pst.2017.00017.
Levy, E., Shabtai, A., Groza, B., Murvay, P.-S., and Elovici, Y. (2023). Can-loc: Spoofing detection and physical intrusion localization on an in-vehicle can bus based on deep features of voltage signals. IEEE Transactions on Information Forensics and Security. DOI: 10.1109/tifs.2023.3297444.
Li, J., Ersotelos, N., Bottarelli, M., and Epiphaniou, G. (2023). Evaluation of machine learning and deep learning-based intrusion detection systems in in-vehicle networks. In International Conference on AI and the Digital Economy (CADE 2023), volume 2023, pages 103-108. IET. DOI: 10.1049/icp.2023.2579.
Li, X., Zhang, H., Miao, Y., Ma, S., Ma, J., Liu, X., and Choo, K.-K. R. (2021). Can bus messages abnormal detection using improved svdd in internet of vehicles. IEEE Internet of Things Journal, 9(5):3359-3371. DOI: 10.1109/jiot.2021.3098221.
Lin, H.-C., Wang, P., Chao, K.-M., Lin, W.-H., and Chen, J.-H. (2022). Using deep learning networks to identify cyber attacks on intrusion detection for in-vehicle networks. Electronics, 11(14):2180. DOI: 10.3390/electronics11142180.
Lokman, S.-F., Othman, A. T., and Abu-Bakar, M.-H. (2019). Intrusion detection system for automotive controller area network (can) bus system: a review. EURASIP Journal on Wireless Communications and Networking, 2019(1):1-17. DOI: 10.1186/s13638-019-1484-3.
Lotto, A., Marchiori, F., Brighente, A., and Conti, M. (2024a). A survey and comparative analysis of security properties of can authentication protocols. IEEE Communications Surveys & Tutorials. DOI: 10.1109/comst.2024.3486367.
Lotto, A., Marchiori, F., Brighente, A., and Conti, M. (2024b). A survey and comparative analysis of security properties of can authentication protocols. arXiv preprint arXiv:2401.10736. DOI: 10.1109/comst.2024.3486367.
Ma, H., Cao, J., Mi, B., Huang, D., Liu, Y., and Li, S. (2022). A gru-based lightweight system for can intrusion detection in real time. Security and Communication Networks, 2022(1):5827056. DOI: 10.1155/2022/5827056.
Mehedi, S. T., Anwar, A., Rahman, Z., and Ahmed, K. (2021). Deep transfer learning based intrusion detection system for electric vehicular networks. Sensors, 21(14):4736. DOI: 10.3390/s21144736.
Miller, C. and Valasek, C. (2015). Remote exploitation of an unaltered passenger vehicle. Black Hat USA, 2015(S 91):1-91. Available at:[link].
Moulahi, T., Zidi, S., Alabdulatif, A., and Atiquzzaman, M. (2021). Comparative performance evaluation of intrusion detection based on machine learning in in-vehicle controller area network bus. IEEE Access, 9:99595-99605. DOI: 10.1109/access.2021.3095962.
Nagarajan, J., Mansourian, P., Shahid, M. A., Jaekel, A., Saini, I., Zhang, N., and Kneppers, M. (2023). Machine learning based intrusion detection systems for connected autonomous vehicles: A survey. Peer-to-Peer Networking and Applications, 16(5):2153-2185. DOI: 10.1007/s12083-023-01508-7.
Narasimhan, H., Ravi, V., and Mohammad, N. (2021). Unsupervised deep learning approach for in-vehicle intrusion detection system. IEEE Consumer Electronics Magazine, 12(1):103-108. DOI: 10.1109/mce.2021.3116923.
National Highway Traffic Safety Administration (2020). Cybersecurity Best Practices for the Safety of Modern Vehicles. Technical report, U.S. Department of Transportation. Available at:[link]. Accessed: 2025-01-07.
Nazakat, I. and Khurshid, K. (2019). Intrusion detection system for in-vehicular communication. In 2019 15th International Conference on Emerging Technologies (ICET), pages 1-6. IEEE. DOI: 10.1109/icet48972.2019.8994327.
Nichelini, A., Pozzoli, C. A., Longari, S., Carminati, M., and Zanero, S. (2023). Canova: a hybrid intrusion detection framework based on automatic signal classification for can. Computers & Security, 128:103166. DOI: 10.1016/j.cose.2023.103166.
Palanca, A., Evenchick, E., Maggi, F., and Zanero, S. (2017). A stealth, selective, link-layer denial-of-service attack against automotive networks. In Detection of Intrusions and Malware, and Vulnerability Assessment: 14th International Conference, DIMVA 2017, Bonn, Germany, July 6-7, 2017, Proceedings 14, pages 185-206. Springer. DOI: 10.1007/978-3-319-60876-1_9.
Palma, Á., Antunes, M., Bernardino, J., and Alves, A. (2025). Multi-class intrusion detection in internet of vehicles: Optimizing machine learning models on imbalanced data. Future Internet, 17(4):162. DOI: 10.3390/fi17040162.
Presi, T. (2013). Design and development of pic microcontroller based vehicle monitoring system using controller area network (can) protocol. In 2013 International Conference on Information Communication and Embedded Systems (ICICES), pages 1070-1076. IEEE. DOI: 10.1109/icices.2013.6508232.
Purohit, S. and Govindarasu, M. (2022). Ml-based anomaly detection for intra-vehicular can-bus networks. In 2022 IEEE International Conference on Cyber Security and Resilience (CSR), pages 233-238. IEEE. DOI: 10.1109/csr54599.2022.9850292.
Quinlan, J. R. (1986). Induction of decision trees. Machine learning, 1(1):81-106. DOI: 10.1023/a:1022643204877.
Rai, R., Grover, J., Sharma, P., and Pareek, A. (2025). Securing the can bus using deep learning for intrusion detection in vehicles. Scientific Reports, 15(1):13820. DOI: 10.1038/s41598-025-98433-x.
Rajapaksha, S., Kalutarage, H., Al-Kadri, M. O., Madzudzo, G., and Petrovski, A. V. (2022). Keep the moving vehicle secure: Context-aware intrusion detection system for in-vehicle can bus security. In 2022 14th International Conference on Cyber Conflict: Keep Moving!(CyCon), volume 700, pages 309-330. IEEE. DOI: 10.23919/cycon55549.2022.9811048.
Rajapaksha, S., Kalutarage, H., Al-Kadri, M. O., Petrovski, A., Madzudzo, G., and Cheah, M. (2023). Ai-based intrusion detection systems for in-vehicle networks: A survey. ACM Computing Surveys, 56(2). DOI: 10.1145/3570954.
Rangsikunpum, A., Amiri, S., and Ost, L. (2024). An fpga-based intrusion detection system using binarised neural network for can bus systems. In 2024 IEEE International Conference on Industrial Technology (ICIT), pages 1-6. IEEE. DOI: 10.1109/icit58233.2024.10540960.
Rendel, J., Balte, W., Kurunathan, H., Ali, H. I., Roque, A. D. S., De Morais, W. O., and Fazeli, M. (2025). Zerocan: Anomaly-based zero-day attack detection in vehicular can bus networks. In 2025 33rd Euromicro International Conference on Parallel, Distributed, and Network-Based Processing (PDP), pages 121-128. IEEE. DOI: 10.1109/pdp66500.2025.00025.
Samir, S. B. H., Raissa, M., Touati, H., Hadded, M., and Ghazzai, H. (2024). Machine learning-based intrusion detection for securing in-vehicle can bus communication. SN Computer Science, 5(8):1082. DOI: 10.1007/s42979-024-03465-1.
Seo, E., Song, H. M., and Kim, H. K. (2018). Gids: Gan based intrusion detection system for in-vehicle network. In 2018 16th Annual Conference on Privacy, Security and Trust (PST), pages 1-6. DOI: 10.1109/pst.2018.8514157.
Sharmin, S. and Mansor, H. (2021). Intrusion detection on the in-vehicle network using machine learning. In 2021 3rd International Cyber Resilience Conference (CRC), pages 1-6. IEEE. DOI: 10.1109/crc50527.2021.9392627.
Sharmin, S., Mansor, H., Abdul Kadir, A. F., and Aziz, N. A. (2024). Benchmarking frameworks and comparative studies of controller area network (can) intrusion detection systems: A review. Journal of Computer Security, 32(5):477-507. DOI: 10.3233/jcs-230027.
Shi, J., Xie, Z., Dong, L., Jiang, X., and Jin, X. (2024). Ids-dec: A novel intrusion detection for can bus traffic based on deep embedded clustering. Vehicular Communications, 49:100830. DOI: 10.1016/j.vehcom.2024.100830.
Siddiqui, H., Kibriya, H., Khan, W. Z., Siddiqui, S. T., Rana, N., and Tahir, A. (2025). Detecting can bus attacks in autonomous vehicles using deep learning. In 2025 International Conference on Emerging Technologies in Electronics, Computing, and Communication (ICETECC), pages 1-6. IEEE. DOI: 10.1109/icetecc65365.2025.11070252.
Song, H. M. and Kim, H. K. (2021). Discovering can specification using on-board diagnostics. IEEE Design & Test, 38(3):93-103. DOI: 10.1109/MDAT.2020.3011036.
Song, H. M., Woo, J., and Kim, H. K. (2020). In-vehicle network intrusion detection using deep convolutional neural network. Vehicular Communications, 21:100198. DOI: 10.1016/j.vehcom.2019.100198.
Specification, C. (1991). Bosch. Robert Bosch GmbH, Postfach, 50:15. DOI: 10.1365/s40112-014-0662-2.
Sun, H., Huang, W., Weng, J., Liu, Z., Tan, W., He, Z., Chen, M., Wu, B., Li, L., and Peng, X. (2024). Ccid-can: Cross-chain intrusion detection on can bus for autonomous vehicles. IEEE Internet of Things Journal, 11(15):26146-26159. DOI: 10.1109/jiot.2024.3393122.
Talebi, S. (2015). A security evaluation and internal penetration testing of the can-bus. Available at:[link].
Tanksale, V. (2019). Intrusion detection for controller area network using support vector machines. In 2019 IEEE 16th international conference on mobile ad hoc and sensor systems workshops (MASSW), pages 121-126. IEEE. DOI: 10.1109/massw.2019.00032.
Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A. N., Kaiser, Ł., and Polosukhin, I. (2017). Attention is all you need. Advances in neural information processing systems, 30. DOI: 10.65215/ctdc8e75.
Vector Informatik (2023). Canoe: Test and simulation tool for automotive networks. Available at:[link]. Accessed 2026.
Walid, M. A. A., Devnath, M. K., Muiz, B., Melon, M. M. H., Barman, P. K., and Barman, P. K. (2024). Efficient graph-based intrusion detection for can bus security with minimal training data. In 2024 6th International Conference on Sustainable Technologies for Industry 5.0 (STI), pages 1-6. IEEE. DOI: 10.1109/sti64222.2024.10951138.
Wang, Q., Lu, Z., and Qu, G. (2018). An entropy analysis based intrusion detection system for controller area network in vehicles. arXiv preprint arXiv:1808.04046. DOI: 10.1109/socc.2018.8618564.
Wang, X., Zhao, J., Liu, P., Yao, N., and Xu, Z. (2025). Can bus intrusion detection based on deep learning with data augmentation for connected autonomous vehicles. IEEE Transactions on Vehicular Technology. DOI: 10.1109/tvt.2025.3603056.
Wei, P., Wang, B., Dai, X., Li, L., and He, F. (2023). A novel intrusion detection model for the can bus packet of in-vehicle network based on attention mechanism and autoencoder. Digital Communications and Networks, 9(1):14-21. DOI: 10.1016/j.dcan.2022.04.021.
Wu, W., Li, R., Xie, G., An, J., Bai, Y., Zhou, J., and Li, K. (2019). A survey of intrusion detection for in-vehicle networks. IEEE Transactions on Intelligent Transportation Systems, 21(3):919-933. DOI: 10.1109/tits.2019.2908074.
Wu, Y. and Tao, X. (2024). Network traffic anomaly detection in can bus based on ensemble learning. In 2024 4th International Conference on Machine Learning and Intelligent Systems Engineering (MLISE), pages 240-245. IEEE. DOI: 10.1109/mlise62164.2024.10674157.
Xin, Y., Wang, X., Lu, L., Zhuo, S., Jiang, Y., Singh, A. K., Ren, K., Yang, M., and Wu, K. (2025). Luft-can: A lightweight unsupervised learning based intrusion detection system with frequency-time analysis for vehicular can bus. Journal of Systems Architecture, page 103567. DOI: 10.1016/j.sysarc.2025.103567.
Xu, B., Cao, F., Li, X., Tian, S., Deng, W., and Yue, S. (2025a). Bepcd: an ensemble learning-based intrusion detection framework for in-vehicle can bus. PeerJ Computer Science, 11:e3108. DOI: 10.7717/peerj-cs.3108.
Xu, H., Shi, X., Liu, H., Wang, Y., Lu, J., Zeng, H., Li, R., and Wu, D. (2025b). Mulsam: Multidimensional attention with hardware acceleration for efficient intrusion detection on vehicular can bus. IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems. DOI: 10.1109/tcad.2025.3541566.
Xun, Y., Deng, Z., Liu, J., and Zhao, Y. (2023). Side channel analysis: A novel intrusion detection system based on vehicle voltage signals. IEEE Transactions on Vehicular Technology, 72(6):7240-7250. DOI: 10.1109/tvt.2023.3236820.
Xun, Y., Zhao, Y., and Liu, J. (2021). Vehicleeids: A novel external intrusion detection system based on vehicle voltage signals. IEEE Internet of Things Journal, 9(3):2124-2133. DOI: 10.1109/jiot.2021.3090397.
Yang, L., Moubayed, A., Hamieh, I., and Shami, A. (2019). Tree-based intelligent intrusion detection system in internet of vehicles. In 2019 IEEE global communications conference (GLOBECOM), pages 1-6. IEEE. DOI: 10.1109/globecom38437.2019.9013892.
Young, C., Zambreno, J., Olufowobi, H., and Bloom, G. (2019). Survey of automotive controller area network intrusion detection systems. IEEE Design & Test, 36(6):48-55. DOI: 10.1109/mdat.2019.2899062.
Zhang, H., Zeng, K., and Lin, S. (2023). Federated graph neural network for fast anomaly detection in controller area networks. IEEE Transactions on Information Forensics and Security, 18:1566-1579. DOI: 10.1109/tifs.2023.3240291.
Zhang, L., Yan, X., and Ma, D. (2024). Efficient and effective in-vehicle intrusion detection system using binarized convolutional neural network. In IEEE INFOCOM 2024-IEEE Conference on Computer Communications, pages 2299-2307. IEEE. DOI: 10.1109/infocom52122.2024.10621400.
Zhao, H., Wang, Y., Cheng, A., Wang, S., Yuan, J., and Wang, H. (2024). Safeguarding gru-based intrusion detection systems from adversarial attacks with dynamic label watermark in can bus communication. IEEE Internet of Things Journal. DOI: 10.1109/jiot.2024.3524504.
Zhou, J., Li, S., Cao, Y., Hadi, H. J., and Lin, H. (2024). Robust intrusion detection system in can bus through multi-scale feature fusion. In ICC 2024-IEEE International Conference on Communications, pages 1316-1321. IEEE. DOI: 10.1109/icc51166.2024.10623113.
Zhou, Y. and Wang, Y. (2018). Effective intrusion detection system using xgboost. Information, 9(7):149. DOI: 10.3390/info9070149.
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Athar Ghadi, Tauheed Khan Mohd
This work is licensed under a Creative Commons Attribution 4.0 International License.
