Abstract In recent years, the rapid development of the intelligent connected vehicle industry has highlighted the critical importance of in-vehicle network security. The Controller Area Network(CAN) protocol is widely used as the core communication framework within in-vehicle systems. However, the CAN protocol lacks encryption and authentication mechanisms, making the network vulnerable to various security threats. Additionally, the rapid advancement of Vehicle-to-Everything communication has increased the frequency of interactions between vehicles and external environments, further exacerbating the security risks of the Internet of Vehicles (IoV) and highlighting the necessity of effective intrusion detection methods. Existing detection methods often face challenges like slow detection speeds and low accuracy. To overcome these limitations, this paper proposes a novel lightweight neural network model that integrates the Mamba architecture with Convolutional Neural Networks (CNNs) for IoV intrusion detection. In the in-vehicle scenario, a two-stage detection method combines single-message detection with message sequence detection. Single-message detection processes each message individually, enabling fine-grained intrusion detection. In contrast, message sequence detection leverages the periodic characteristics of CAN bus messages to detect anomalies in consecutive message sequences. In a complex external network environment, we employ a stacking ensemble approach and knowledge distillation to enhance and compress the model, resulting in a compact, high-performance, lightweight solution. Experimental results on four publicly available datasets show that our method has good detection performance and provides an effective solution to the security challenges in the IoV.
Feng et al. (Tue,) studied this question.