Papers › CAN bus intrusion detection based on auxiliary classifier GAN and out-of-distribution detection
CAN bus intrusion detection based on auxiliary classifier GAN and out-of-distribution detection
ZhaoQingling, ChenMingqiang, GuZonghua, LuanSiyu, ZengHaibo, Chakrabory Samarjit
Modern vehicles are prototypical Cyber-Physical Systems, where the in-vehicle Electrical/Electronic (E/E) system interacts closely with its physical surroundings. With the rapid advances in Connected and Automated Vehicles, the issue of automotive cyber-physical security is gaining increasing importance. The Controller Area Network (CAN) is a ubiquitous bus protocol present in almost all vehicles. Due to its broadcast nature, it is vulnerable to a range of attacks once the attacker gains access to the bus through either the physical or cyber part of the attack surface. We address the problem of Intrusion Detection on the CAN bus, and propose four methods based on the combination of one or more classifiers trained with Auxiliary Classifier Generative Adversarial Network (ACGAN), and the use of Out-of-Distribution (OOD) Detection to detect unknown attacks. Our work is the first and only technique that is able to detect both known and unknown attacks, and also assign fine-grained labels to detected known attacks. Experimental results demonstrate that the most effective method is a cascaded two-stage classification architecture, with the multi-class Auxiliary Classifier in the first stage, passing OOD samples to the binary Real/Fake Classifier in the second state.
Code
Repository list and official/mentioned flags are the archive's, frozen 2025-07-28. Reachability, where shown, is from one Syntology probe window (2026-09-16 to 2026-09-18); repositories not probed show nothing. GitHub stars are not tracked.
Code Syntology ran Syntology
Not run by Syntology. Nothing on this page verifies that the listed code works.
Tasks
1 archive task tag without a task page not shown.
Results from the paper archive 2025-07-28
No leaderboard rows for this paper in the archive.
Methods
Report a problem or propose a change · a person checks every report against the paper or source before anything changes; decisions are listed on /corrections