Decision model for automotive intrusion detection systems (Englisch)

Over the last decades the automotive industry has gradually replaced and supplemented mechanical parts with electronics and software solutions. It is well known that the risks associated with the introduction of information technology into the vehicle are non-negligible. So far these risks have mainly been seen in the context of dependability. In recent time, apart from attributes like reliability and robustness, especially security-based aspects have gained a higher attention for research in the automotive domain. Intrusion Detection Systems (IDS) for vehicular systems represent one promising security measure motivating current investigations. This paper introduces a holistic concept for the handling of incidents recognized by IDS in the automotive domain. A two-stage decision model for in-vehicle IDS will be presented which determines different levels of reactions for identified incidents based on the severity of the event and the current driving situation. It also will be provided a classification of automotive attacks from a user point of view, derive a suitable application range of our model and illustrate the employment with a set of two exemplary scenarios using the navigation system as a hypothetic point of intrusion.