Attacks detection and cyber resilience: Securing in-vehicle controller area network

Nowadays, connected vehicles can communicate through wireless networks, road infrastructure, and other vehicles. The ECUs that control the behavior of each of these vehicles communicate through the CAN Bus, which is widely used in automotive, aerospace, and many other industries because of its low cost, error detection capability, and reliability. The CAN Bus protocol was designed more than 40 years ago and does not include security measures such as authentication, which makes it target unauthorized access and use. Researchers proposed two categories of solutions to address this problem: security extension for the CAN Bus and IDS solutions. Unlike the first category of solutions, the second category does not need to alter the CAN protocol and could be used for after-market vehicles. Currently, most existing practical IDS solutions (1) rely on the knowledge of the identities of the ECUs of the given vehicle, which is proprietary information, (2) evaluate their efficacy in terms of accuracy in detecting message injections offline, which limits the confidence in their use for real-time protection scenarios, and (3) do not assess their efficacy to preserve vehicle safety measures. This thesis proposes an IDS solution for connected vehicles, which is independent of the identities of the ECUs, assesses the performance of the IDS for real-time attack detection, and explores its use to avoid accidents through an extension to the adaptive cruise control mechanism as a real-time resilience mechanism to cyber-attacks. First, we represent the sequencing of the messages that the ECUs of a given vehicle exchange in the CAN Bus in successive time intervals as direct graphs and use the changes to the similarities of the successive graphs to detect malicious message injections into the CAN Bus. Secondly, we simulated four real-time IDS architecture alternatives for connected vehicles and evaluated their efficacy in terms of the percentage of messages lost due to the service/arrival rate of the CAN messages and attack identification time. Third, we showed through simulations that the injection of CAN messages could mislead the ACC system to induce a collision of the simulated vehicle with the nearby vehicle, and the capability of the proposed real-time IDS to avoid that by applying an emergency brake to avoid a crash when it detects CAN Bus message injection. The assessment of the IDS using datasets collected from a moving vehicle subjected to CAN Bus spoofing that changed its behavior and the evaluation of the efficacy of ACC extension to avoid accidents using the proposed IDS demonstrate the possibility of using machine-learning IDS for resilience to cyber-attacks on connected vehicles. The evaluation of the efficacy of the real-time IDS and ACC extension using simulations may not be sufficient to justify their use in practice. Further research needs to be performed to assess the efficacy of the proposed solutions for resilience to cyber-attacks in real scenarios

Improvement and Evaluation of Resilience of Adaptive Cruise Control Against Spoofing Attacks Using Intrusion Detection System

The Adaptive Cruise Control (ACC) system automatically adjusts the vehicle speed to maintain a safe distance between the vehicle and the lead (ahead) vehicle. The controller's decision to accelerate or decelerate is computed using the target speed of the vehicle and the difference between the vehicle's distance to the lead vehicle and the safe distance from that vehicle. Spoofing the vehicle speed communicated through the Controller Area Network (CAN) of the vehicle impacts negatively the capability of the ACC (Proportional-Integral-Derivative variant) to prevent crashes with the lead vehicle. The paper reports about extending the ACC with a real-time Intrusion Detection System (IDS) capable of detecting speed spoofing attacks with reasonable response time and detection rate, and simulating the proposed extension using the CARLA simulation platform. The results of the simulation are: (1) spoofing the vehicle speed can foil the ACC to falsely accelerate, causing accidents, and (2) extending ACC with ML-based IDS to trigger the brakes when an accident is imminent may mitigate the problem. The findings suggest exploring the capabilities of ML-based IDS to support the resilience mechanisms in mitigating cyber-attacks on vehicles.This preprint Jedh, M.B.,ben Othmane, L., Somani, A.K., Improvement and Evaluation of Resilience of Adaptive Cruise Control Against Spoofing Attacks Using Intrusion Detection System, is available through ArXiv(arXiv:2302.00876); https://doi.org/10.48550/arXiv.2302.00876 . Posted with permission. CC BY-NC-ND 4.0 DEED Attribution-NonCommercial-NoDerivs 4.0 Internationa

PIXE as a complement to ICP-OES trace metal analysis in Sudanese medicinal plants.

This paper compares trace element concentrations (Ca, K, Sr, Fe, Mn, Zn, Ni, Cu, Co and Cr) in 27 Sudanese medical plants determined in parallel by PIXE and ICP-OES to get information on which technique is preferable at different matrices and element concentrations. PIXE correlates well to ICP-OES for Sr, Mn, Ca, K, Zn and Fe determinations. ICP-OES seems to be the superior technique over PIXE when measuring low concentrated elements (chromium, cobalt, nickel and copper) in the medicinal plants

Evaluation of the results of management of frozen shoulder using the arthroscopic capsular release

BACKGROUND: The aim of treatment of frozen shoulder is to regain a painless and functional shoulder range of shoulder motion. In this study we evaluated the results of using the arthroscopic technique for the release of the shoulder joint capsule in patients with a diagnosis of frozen shoulder. MATERIAL AND METHODS: The study included 40 patients with frozen shoulder. They were operated upon with the use of electrocautery for the release of the shoulder joint capsule. The group consisted of 29 women and 11 men with a mean age of 48.2 years (range 38-62). RESULTS: Preoperatively, the mean Constant and Murly shoulder score was 36.35 (range 21-51). At the end of the follow up period, the mean score was 85.8 (range 62 to 98). The difference between the means of pre- and postoperative total score was statistically significant (t =10.85 and p=0.0001). 22 patients (55%) had excellent results, 14 patients (35%) had good results, 4 patients (10%) had fair results and none had poor results. The 4 cases with fair results were all female, all had insulin-dependent diabetes mellitus and were > 50 years old. CONCLUSIONS: 1. Arthroscopic capsular release is an effective and safe method for the treatment of refractory frozen shoulder. 2. It achieves dramatic pain and motion improvement post-operatively, allowing very early postoperative rehabilitation

Clinical Presentation of Epilepsy among Adult Sudanese Epileptic Patients Seen In Sheik Mohamed Kheirs Friday Epileptic Clinic-SUDAN

Objective: To study the pattern of clinical presentation of epilepsy among adult Sudanese epileptic patients. Methods: 120 patients with epilepsy were included in a prospective cross-sectional study. Setting: The study was conducted at Sheik Mohamed Kheir Friday Epileptic Clinic .Duration: May 2003 Oct 2006. Results: Males were (54.15%) while females were (45.85%). In 80 patients (67%) no cause was identified. Cerebrovascular accident was found to be the commonest risk factor, 24 patients (20%) had a family history of epilepsy.103 patients had generalized epilepsy while 18 patients had focal epilepsy. The prodromal symptoms and neurological signs were common among patients with partial epilepsy. 78 patients (64.8%) showed abnormal EEG. 12 patients (10%) with generalize epilepsy had abnormal CT of the brain, while 50% of those who had focal epilepsy had abnormal CT of the brain. Conclusion: Generalized epilepsy is more common than partial epilepsy. Prodromal symptoms and neurological signs were common among patients with partial epilepsy. EEG and CT Brain play an important role in supporting the diagnosis of epilepsy Sudan Joural of Medical Studies Vol. 2 (1) 2007: pp. 21-2