Denial of service response to the detection of illicit signals on the in-vehicle communication network
An in-vehicle communication network of a vehicle is monitored. An illicit signal is detected on the in-vehicle communication network. Whether the illicit signal satisfies a threshold severity condition is determined. A denial of service (DoS) operation with respect to at least part of the in-vehicle communication network is performed responsive to determining that the illicit signal satisfies the threshold severity condition.
1. A method, comprising:
monitoring an in-vehicle communication network of a vehicle;
detecting an illicit signal on the in-vehicle communication network;
determining, by a processing device, whether the illicit signal satisfies a threshold severity condition; and
responsive to determining that the illicit signal satisfies the threshold severity condition, performing a denial of service (DoS) operation with respect to at least part of the in-vehicle communication network, wherein the DoS operation renders inoperable communication on at least part of the in-vehicle communication network affected by the illicit signal.
2. The method of claim 1 , wherein the vehicle is an autonomous vehicle, and wherein the in-vehicle communication network comprises a redundant system comprising a first vehicle sub-system and a second vehicle sub-system configured to perform redundant vehicle operations using the in-vehicle communication network, wherein performing the DoS operation comprises:
disabling at least part of the first vehicle sub-system that is affected by the illicit signal while at least part of the second vehicle sub-system is enabled to perform the redundant vehicle operations that were previously performed by the first vehicle sub-system.
3. The method of claim 1 , wherein performing the DoS operation causes a reduction in functionality of the vehicle.
4. The method of claim 1 , wherein performing the DoS operation comprises reducing power to the at least part of the in-vehicle communication network to prevent communication on the at least part of the in-vehicle communication network affected by the illicit signal.
5. The method of claim 4 , wherein reducing the power to the at least part of the in-vehicle communication network comprises reducing the power to a node of the in-vehicle communication network.
6. The method of claim 4 , wherein performing the DoS operation comprises:
applying a fixed voltage to the at least part of a bus of the in-vehicle communication network.
7. The method of claim 1 , wherein performing the DoS operation comprises:
generating a plurality of signals to flood the at least part of the in-vehicle communication network; and
transmitting the plurality of signals on the at least part of the in-vehicle communication network affected by the illicit signal to flood the at least part of the in-vehicle communication network with the plurality of signals.
8. The method of claim 1 , wherein monitoring the in-vehicle communication network comprises:
receiving a message transmitted at the in-vehicle communication network;
determining one or more message identifiers associated with the message; and
wherein detecting the illicit signal on the in-vehicle communication network comprises:
identifying a source identifier of the one or more message identifiers; and
determining whether a source node identified by the source identifier transmitted the message on the in-vehicle communication network, wherein the illicit signal is detected by determining that the source node identified by the source identifier did not transmit the message.
9. The method of claim 8 , wherein determining that the illicit signal satisfies the threshold severity condition comprises:
identifying one or more characteristics corresponding to the illicit signal; and
determining that the illicit signal satisfies the threshold severity condition based on the one or more characteristics corresponding to the illicit signal.
10. The method of claim 9 , wherein the one or more characteristics corresponding to the illicit signal comprise at least one of the source identifier of the message, a content identifier of the message, a vehicle operational state, or a vehicle authorization state.
11. The method of claim 1 , wherein monitoring the in-vehicle communication network comprises:
monitoring a vehicle action that is performed based on control commands transmitted on the in-vehicle communication network.
12. The method of claim 11 , wherein detecting the illicit signal on the in-vehicle communication network comprises:
determining whether the performance of the vehicle action satisfies a threshold tolerance, wherein the illicit signal is detected responsive to determining that the performance of the vehicle action does not satisfy the threshold tolerance.
13. A system, comprising:
a memory; and
a processing device, coupled to the memory, to:
monitor an in-vehicle communication network of a vehicle;
detect an illicit signal on the in-vehicle communication network;
determine whether the illicit signal satisfies a threshold severity condition; and
responsive to determining that the illicit signal satisfies the threshold severity condition, perform a denial of service (DoS) operation with respect to at least part of the in-vehicle communication network, wherein the DoS operation renders inoperable communication on at least part of the in-vehicle communication network affected by the illicit signal.
14. The system of claim 13 , wherein the vehicle is an autonomous vehicle, and wherein the in-vehicle communication network comprises a redundant system comprising a first vehicle sub-system and a second vehicle sub-system configured to perform redundant vehicle operations using the in-vehicle communication network, wherein to perform the DoS operation, the processing device to:
disable at least part of the first vehicle sub-system that is affected by the illicit signal while at least part of the second vehicle sub-system is enabled to perform the redundant vehicle operations that were previously performed by the first vehicle sub-system.
15. The system of claim 13 , wherein to perform the DoS operation, the processing device to: reduce power to at least part of the in-vehicle communication network to prevent communication on the at least part of the in-vehicle communication network affected by the illicit signal.
16. The system of claim 13 , wherein to perform the DoS operation, the processing device to:
generate a plurality of signals to flood the at least part of the in-vehicle communication network; and
transmit the plurality of signals on the at least part of the in-vehicle communication network affected by the illicit signal to flood the at least part of the in-vehicle communication network with the plurality of signals.
17. A non-transitory computer-readable medium comprising instructions that, responsive to execution by a processing device, cause the processing device to perform operations comprising:
monitoring an in-vehicle communication network of a vehicle;
detecting an illicit signal on the in-vehicle communication network;
determining whether the illicit signal satisfies a threshold severity condition; and
responsive to determining that the illicit signal satisfies the threshold severity condition, performing a denial of service (DoS) operation with respect to at least part of the in-vehicle communication network, wherein the DoS operation renders inoperable communication on at least part of the in-vehicle communication network affected by the illicit signal.
18. The non-transitory computer-readable medium of claim 17 , wherein the vehicle is an autonomous vehicle, and wherein the in-vehicle communication network comprises a redundant system comprising a first vehicle sub-system and a second vehicle sub-system configured to perform redundant vehicle operations using the in-vehicle communication network, wherein to perform the DoS operation, the operations comprising:
disabling at least part of the first vehicle sub-system that is affected by the illicit signal while at least part of the second vehicle sub-system is enabled to perform the redundant vehicle operations that were previously performed by the first vehicle sub-system.
19. The non-transitory computer-readable medium of claim 17 , wherein performing the DoS operation causes a reduction in functionality of the vehicle.
20. The non-transitory computer-readable medium of claim 17 , wherein to perform the DoS operation, the operations comprising reducing power to the at least part of the in-vehicle communication network to prevent communication on the at least part of the in-vehicle communication network affected by the illicit signal.