Papers › Deep Multimodal Learning for Real-Time DDoS Attacks Detection in Internet of Vehicles

Deep Multimodal Learning for Real-Time DDoS Attacks Detection in Internet of Vehicles

25 Jan 2025arXiv:2501.15252archive 2025-07-28

Mohamed Ababsa, Soheyb Ribouh, Abdelhamid Malki, Lyes Khoukhi

The progress and integration of intelligent transport systems (ITS) have therefore been central to creating safer and more efficient transport networks. The Internet of Vehicles (IoV) has the potential to improve road safety and provide comfort to travelers. However, this technology is exposed to a variety of security vulnerabilities that malicious actors could exploit. One of the most serious threats to IoV is the Distributed Denial of Service (DDoS) attack, which could be used to disrupt traffic flow, disable communication between vehicles, or even cause accidents. In this paper, we propose a novel Deep Multimodal Learning (DML) approach for detecting DDoS attacks in IoV, addressing a critical aspect of cybersecurity in intelligent transport systems. Our proposed DML model integrates Long Short-Term Memory (LSTM) and Gated Recurrent Unit (GRU), enhanced by Attention and Gating mechanisms, and Multi-Layer Perceptron (MLP) with a multimodal intermediate fusion architecture. This innovative method effectively identifies and mitigates DDoS attacks in real-time by utilizing the Framework for Misbehavior Detection (F2MD) to generate a synthetic dataset, thereby overcoming the limitations of the existing Vehicular Reference Misbehavior (VeReMi) extension dataset. The proposed approach is evaluated in real-time across different simulated real-world scenario with 10\%, 30%, and 50% attacker densities. The proposed DML model achieves an average accuracy of 96.63\%, outperforming the classical Machine Learning (ML) approaches and state-of-the-art methods which demonstrate significant efficacy and reliability in protecting vehicular networks from malicious cyber-attacks.

PaperPDFCode

Code

Repository list and official/mentioned flags are the archive's, frozen 2025-07-28. Reachability, where shown, is from one Syntology probe window (2026-09-16 to 2026-09-18); repositories not probed show nothing. GitHub stars are not tracked.

Code Syntology ran Syntology

Not run by Syntology. Nothing on this page verifies that the listed code works.

Results from the paper archive 2025-07-28

No leaderboard rows for this paper in the archive.

Methods

AttentionSoftmax

1 archive method tag without a method page not shown.

Report a problem or propose a change · a person checks every report against the paper or source before anything changes; decisions are listed on /corrections