METHOD AND SYSTEM FOR REFLECTOMETRY BASED COMMUNICATION NETWORK MONITORING, INTRUSION DETECTION, AND MESSAGE AUTHENTICATION

摘要

Systems and methods are provided for monitoring and detecting intrusions and authenticating messages on a communication network of a vehicle. A plurality of signals transmitted over communications network between an electronic control module and a remote electronic module are monitored. Reflectometry feature sets are extracted from the plurality of signals and compared to a repository of predetermined communication network feature sets to generate a mismatch value. The mismatch value is compared to a predetermined threshold range and an authenticated event occurs when the mismatch value is within the predetermined threshold range. When the mismatch value is outside the predetermined threshold range, a flagged event occurs and is recorded.

主权项

1. A method of monitoring and detecting intrusions on an communications network, comprising:
monitoring, with a reflectometer, a plurality of communication channels on the communication network, the communication channels each transmitting a plurality of signals between an electronic control module and a remote electronic control module; extracting a reflectometry feature set from each of the plurality of signals transmitted over each of the communication channels; comparing the extracted reflectometry feature sets to a repository of predetermined communication network feature sets to generate a mismatch value; determining that an authenticated event has occurred when the mismatch value is within a predetermined threshold range and continuing to monitor the plurality of communication channels; determining that a flagged event has occurred when the mismatch value is outside the predetermined threshold range; and recording the flagged event in a memory module.