CONTROLLER AREA NETWORK BUS MONITOR
First Claim
1. A system to monitor a controller area network bus comprising:
- a processor to;
detect a message from a source electronic control unit in a vehicle;
calculate a location of the source electronic control unit based on at least two arrival times, the arrival times indicating a distance between a first monitor and the source electronic control unit;
detect that the message corresponds to a function controlled by a second electronic control unit; and
generate a warning that the message from the source electronic control unit is malicious.
1 Assignment
0 Petitions
Accused Products
Abstract
Techniques for monitoring a controller area network bus are described herein. In one example, a system comprises a processor that is to detect a message from a source electronic control unit in a vehicle and calculate a location of the source electronic control unit based on at least two arrival times, the arrival times indicating a distance between a first monitor and the source electronic control unit. The processor can also detect that the message corresponds to a function controlled by a second electronic control unit and generate a warning that the message from the source electronic control unit is malicious.
90 Citations
20 Claims
-
1. A system to monitor a controller area network bus comprising:
-
a processor to; detect a message from a source electronic control unit in a vehicle; calculate a location of the source electronic control unit based on at least two arrival times, the arrival times indicating a distance between a first monitor and the source electronic control unit; detect that the message corresponds to a function controlled by a second electronic control unit; and generate a warning that the message from the source electronic control unit is malicious. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A method for monitoring a controller area network bus comprising:
-
detecting, via a processor, a message transmitted by the controller area network from a source electronic control unit in a vehicle; calculating, via the processor, a location of the source electronic control unit based on at least two arrival times, the arrival times indicating a distance between a first monitor and the source electronic control unit based in part on a wave propagation speed; detecting, via the processor, that the message corresponds to a function controlled by a second electronic control unit; and generating, via the processor, a warning that the message from the source electronic control unit is malicious. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
-
15. A computer program product for monitoring a controller area network bus, the computer program product comprising a computer readable storage medium having program instructions embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the program instructions executable by a processor to cause the processor to:
-
detect, via the processor, a message from a source electronic control unit in a vehicle; calculate, via the processor, a location of the source electronic control unit based on at least two arrival times, the arrival times indicating a distance between a first monitor and the source electronic control unit based in part on a wave propagation speed; detect, via the processor, that the message corresponds to a function controlled by a second electronic control unit; and generate, via the processor, a warning that the message from the source electronic control unit is malicious. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification