MIL-STD-1553, a standard that defines a communication bus for interconnected devices, is widely used in military and aerospace avionic platforms. Due to its lack of security mechanisms, MIL-STD-1553 is exposed to cyber threats. The methods previously proposed to address these threats are very limited, resulting in the need for more advanced techniques. Inspired by the defense in depth principle, we propose AnoMili, a protection system for the MIL-STD-1553 bus, which consists of: 1) a physical intrusion detection mechanism that detects unauthorized devices connected to the 1553 bus, even if they are passive (sniffing); 2) a device fingerprinting mechanism that protects against spoofing attacks (two approaches are proposed: prevention and detection); 3) a context-based anomaly detection mechanism; and 4) an anomaly explanation engine responsible for explaining the detected anomalies in real time. To the best of our knowledge, this is the first study in the transportation domain to design a real-time mechanism that produces human-actionable insights regarding the anomalies detected. We evaluate AnoMili's effectiveness and practicality in two real 1553 hardware-based test beds. The effectiveness of the anomaly explanation engine is also demonstrated. All the detection and prevention mechanisms employed had high detection rates (over 99.45%) with low false positive rates. The context-based anomaly detection mechanism obtained perfect results when evaluated on a dataset used in prior work.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    AnoMili: Spoofing Hardening and Explainable Anomaly Detection for the 1553 Military Avionic Bus


    Beteiligte:
    Levy, Efrat (Autor:in) / Maman, Nadav (Autor:in) / Shabtai, Asaf (Autor:in) / Elovici, Yuval (Autor:in)


    Erscheinungsdatum :

    01.12.2024


    Format / Umfang :

    3633944 byte




    Medientyp :

    Aufsatz (Zeitschrift)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Overview of military avionic requirements

    Little, R. / ERA Technology | British Library Conference Proceedings | 1992


    Cooling of Military Avionic Equipment

    SAE Technical Papers | 2015


    Anomaly Based Intrusion Detection for an Avionic Embedded System

    Damien, Alienor / Alata, Eric / Fumey, Marc et al. | SAE Technical Papers | 2018


    Anomaly Based Intrusion Detection for an Avionic Embedded System

    Damien, Alienor / Fumey, Marc / Alata, Eric et al. | British Library Conference Proceedings | 2018