
via Sécurité publique Canada
Army researchers developed a new machine learning-based framework to enhance the security of computer networks inside vehicles without undermining performance.
With the widespread prevalence of modern automobiles that entrust control to onboard computers, this research looks toward to a larger Army effort to invest in greater cybersecurity protection measures for its aerial and land platforms, especially heavy vehicles.
In collaboration with an international team of experts from Virginia Tech, the University of Queensland and Gwangju Institute of Science and Technology, researchers at the U.S. Army Combat Capabilities Development Command, known as DEVCOM, Army Research Laboratory devised a technique called DESOLATOR to help optimize a well-known cybersecurity strategy known as the moving target defense.
“The idea is that it’s hard to hit a moving target,” said Dr. Terrence Moore, Army mathematician. “If everything is static, the adversary can take their time looking at everything and choosing their targets. But if you shuffle the IP addresses fast enough, then the information assigned to the IP quickly becomes lost, and the adversary has to look for it again.”
DESOLATOR, which stands for deep reinforcement learning-based resource allocation and moving target defense deployment framework, helps the in-vehicle network identify the optimal IP shuffling frequency and bandwidth allocation to deliver effective, long-term moving target defense.
According to Army computer scientist and program lead Dr. Frederica Free-Nelson, achievement of the former keeps uncertainty high enough to thwart potential attackers without it becoming too costly to maintain, while attainment of the latter prevents slowdowns in critical areas of the network with high priority.
“This level of fortification of prioritized assets on a network is an integral component for any kind of network protection,” Nelson said. “The technology facilitates a lightweight protection whereby fewer resources are used for maximized protection. The utility of fewer resources to protect mission systems and connected devices in vehicles while maintaining the same quality of service is an added benefit.”
The research team used deep reinforcement learning to gradually shape the behavior of the algorithm based on various reward functions, such as exposure time and the number of dropped packets, to ensure that DESOLATOR took both security and efficiency into equal consideration.
“Existing legacy in-vehicle networks are very efficient, but they weren’t really designed with security in mind,” Moore said. “Nowadays, there’s a lot of research out there that looks solely at either enhancing performance or enhancing security. Looking at both performance and security is in itself a little rare, especially for in-vehicle networks.”
In addition, DESOLATOR is not limited to identifying the optimal IP shuffling frequency and bandwidth allocation. Since this approach exists as a machine learning-based framework, other researchers can modify the technique to pursue different goals within the problem space.
“This ability to retool the technology is very valuable not only for extending the research but also marrying the capability to other cyber capabilities for optimal cybersecurity protection,” Nelson said.
Researchers detail information about their approach in the research paper, DESOLATER: Deep Reinforcement Learning-Based Resource Allocation and Moving Target Defense Deployment Framework, in the peer-reviewed journal IEEE Access.
Original Article: New cybersecurity technique keeps hackers guessing
More from: United States Army Research Laboratory | Virginia Polytechnic Institute and State University | University of Queensland | Gwangju Institute of Science and Technology
The Latest Updates from Bing News & Google News
Go deeper with Bing News on:
Cybersecurity protection for vehicles
- Top 5 cybercrimes to watch out for in 2023
The risk of cyberattacks will continue to increase in 2023, with five potential threats to businesses, individuals and the country sticking out above the rest.
- Secure Vehicle Smart Cockpit Environment Being Showcased at CES 2023 by Automotive Cybersecurity Leader, VicOne
With VicOne’s cybersecurity solutions, automotive manufacturers (OEMs) can offer car users protection with seamless connectivity to their mobile phone apps LAS VEGAS, January 03, 2023--(BUSINESS ...
- C2A Security To Showcase Automotive Cybersecurity DevOps Platform at CES In Las Vegas, January 5-8
C2A Security, a leading provider of automated cybersecurity solutions for connected, autonomous, and electric vehicles will showcase its flagship product, EVSec, during the Consumer Electronics Show ( ...
- Taking on solar’s cybersecurity challenges
Small solar PV systems and other DERs are not currently required to follow cybersecurity standards. That's adding to the grid's vulnerability.
- C2A Security to Showcase Revolutionary Automotive Cybersecurity DevOps Platform at CES in Las Vegas, January 5-8
C2A Security, a leading provider of automated cybersecurity solutions for connected, autonomous, and electric vehicles will showcase its flagship product, EVSec, during the Consumer Electronics Show ( ...
Go deeper with Google Headlines on:
Cybersecurity protection for vehicles
[google_news title=”” keyword=”cybersecurity protection for vehicles” num_posts=”5″ blurb_length=”0″ show_thumb=”left”]
Go deeper with Bing News on:
Network protection
- Network Security Market (New Report) is thriving worldwide 2023 to 2029 | 101 Pages Report
Jan 06, 2023 (The Expresswire) -- "Pre and Post-COVID Research is Covered and Report Customization is Available | Latest 101 Pages Report" The New Report ...
- Network Security Appliance Market Latest Research, Industry Analysis, Driver, Trends, Business Overview, Key Value, Demand and Forecast 2023-2028
Pages Report] Rising demand for Internet & Communication Industry will drive the Network Security Appliance segment growth over the next five years. Global Market Analysis for ...
- Evolving Security for Protecting Today’s Retail Network Architecture
To protect private data and networks, all organizations should work toward a common goal — implementing an approach that combines the crucial elements of retail network architecture, security and ...
- Network Protection and Endpoint Protection Are Not Enough; Storage Protection is Needed
Considerable network protection technologies and endpoint protection technologies were already applied, but they were insufficient to prevent ransomware or malware that mutates countless times in ...
- Global Network Security Market Report 2022: 5G Rollout Continues to Present New Opportunities
The "Global Network Security Market, By Type, By Industry, By Enterprise Size, By Deployment & By Region- Forecast and Analysis 2022-2028" report has been added to ResearchAndMarkets.com's ...
Go deeper with Google Headlines on:
Network protection
[google_news title=”” keyword=”network protection” num_posts=”5″ blurb_length=”0″ show_thumb=”left”]