MIL-STD-1553, a standard that defines a communication bus for interconnected devices, is widely used in military and aerospace avionic platforms. Due to its lack of security mechanisms, MIL-STD-1553 is exposed to cyber threats. The methods previously proposed to address these threats are very limited, resulting in the need for more advanced techniques. Inspired by the defense in depth principle, we propose AnoMili, a protection system for the MIL-STD-1553 bus, which consists of: 1) a physical intrusion detection mechanism that detects unauthorized devices connected to the 1553 bus, even if they are passive (sniffing); 2) a device fingerprinting mechanism that protects against spoofing attacks (two approaches are proposed: prevention and detection); 3) a context-based anomaly detection mechanism; and 4) an anomaly explanation engine responsible for explaining the detected anomalies in real time. To the best of our knowledge, this is the first study in the transportation domain to design a real-time mechanism that produces human-actionable insights regarding the anomalies detected. We evaluate AnoMili's effectiveness and practicality in two real 1553 hardware-based test beds. The effectiveness of the anomaly explanation engine is also demonstrated. All the detection and prevention mechanisms employed had high detection rates (over 99.45%) with low false positive rates. The context-based anomaly detection mechanism obtained perfect results when evaluated on a dataset used in prior work.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    AnoMili: Spoofing Hardening and Explainable Anomaly Detection for the 1553 Military Avionic Bus


    Contributors:
    Levy, Efrat (author) / Maman, Nadav (author) / Shabtai, Asaf (author) / Elovici, Yuval (author)


    Publication date :

    2024-12-01


    Size :

    3633944 byte




    Type of media :

    Article (Journal)


    Type of material :

    Electronic Resource


    Language :

    English



    Overview of military avionic requirements

    Little, R. / ERA Technology | British Library Conference Proceedings | 1992


    Cooling of Military Avionic Equipment

    SAE Technical Papers | 2015


    Anomaly Based Intrusion Detection for an Avionic Embedded System

    Damien, Alienor / Alata, Eric / Fumey, Marc et al. | SAE Technical Papers | 2018


    Anomaly Based Intrusion Detection for an Avionic Embedded System

    Damien, Alienor / Fumey, Marc / Alata, Eric et al. | British Library Conference Proceedings | 2018