Abstract: A method for protection from cyber attacks in a vehicle communication network including the steps of executing a protection and monitoring procedure comprising: a learning step that includes: acquiring sets ({right arrow over (V)}IDk) of values of times of arrival (TSIDk) of messages (MSG) exchanged on the network, ordered according to a respective message identifier (IDk), computing one or more statistical parameters (?IDk, sIDk2) of the sets of arrival-time values (TSIDk), and subsequently obtaining statistical parameters ({right arrow over (?)}IDk) of confidence windows for one or more statistical parameters (?IDk, sIDk2) of the sets of arrival-time values (TS?IDk); and a subsequent classification and anomaly-detection step that includes: acquiring sets ({right arrow over (u)}IDk) of values of times of arrival (TS?IDk) at the device of messages (MSG?), computing corresponding one or more statistical parameters (??IDk,s?IDk2) of the sets of arrival-time values (TS?IDk) to obtain votes (V,W) of membership of

Abstract: A method for protection from cyber attacks in a CAN (Controller Area Network), of a vehicle including the steps of selecting periodic messages having a transmission periodicity, grouping the periodic messages, and performing an analysis of messages of the nodes that exchange the received periodic messages, which includes obtaining times of arrival at the respective nodes of a set of periodic messages that have the same message identifier, computing average-offset values over successive subsets, of a given number of messages, accumulating the average-offset values for each identifier to obtain accumulated-offset values, identifying linear parameters by computing an angular coefficient, of a regression, and an intercept, or identification error, computing a correlation coefficient of the average offset of pairs of messages identified as coming from the same node, determining whether the correlation coefficient is higher than a first given threshold, determining whether the angular coefficient between two consec

Abstract: A method for protection from cyber attacks in a communication network of a vehicle comprising: the steps of building sets of dominant voltage measurements for each message identifier associated to a message that is passing; extracting statistical features; supplying the statistical features for each message identifier that are available at each instant at input to a neural network of a pattern-recognition type; carrying out an operation of classification, or pattern recognition, supplying a prediction of a membership class corresponding to a given node on the basis of the statistical features supplied at input; evaluating whether the prediction supplied by the neural network corresponds to a given node that allows as admissible message identifier the message identifier at input and, if it does not, signalling an anomaly for the message identifier; and evaluating whether a number of anomalies signalled for said message identifier exceeds a given threshold.

Abstract: A method for protecting against cyber attacks in a communication network of a vehicle, including the steps of acquiring dominant voltage measurements; obtaining an electrical characteristic of nodes that transmit messages by acquiring consecutive groups of voltage measurements at receiving nodes and calculating a distribution thereof; calculating values of distribution statistics; calculating a cumulative voltage deviation for each value of statistic; and obtaining a voltage profile by adding the cumulative voltage deviations of each statistic, executing a malicious-node detection procedure and then executing a transmitting-node identification procedure including comparing the at least one characteristic parameter against all the corresponding characteristic parameters of all the messages, defining a range of variation of the characteristic parameter with respect to a given number of previous samples; and evaluating whether the value of the parameter falls within the range of variation of one of the messages

Abstract: The invention relates to integrated circuits, and more particularly, to systems, devices and methods of integrating a gyro sensing circuit with a gyroscope to detect a shock or a disturbance, and accurately differentiate rotation-based sense signals from noises introduced by the shock or disturbance. The gyro sensing circuit may be implemented in a differential or non-differential demodulation scheme, and comprises at least one demodulation unit and a peak detector. The at least one demodulation unit demodulates a gyro output signal provided by the gyroscope with a reference signal. In a demodulated gyro output signal, a shock signal or a gyro disturbance signal is substantially isolated out from interested gyro sense signals that are used to sense a rate of rotation. A peak detector samples the modulated gyro output signal, determines whether the signal exceeds a threshold level VTH and outputs a shock flag indicating a corresponding determination result.

Abstract: The invention relates to integrated circuits, and more particularly, to systems, devices and methods of integrating a gyro sensing circuit with a gyroscope to detect a shock or a disturbance, and accurately differentiate rotation-based sense signals from noises introduced by the shock or disturbance. The gyro sensing circuit may be implemented in a differential or non-differential demodulation scheme, and comprises at least one demodulation unit and a peak detector. The at least one demodulation unit demodulates a gyro output signal provided by the gyroscope with a reference signal. In a demodulated gyro output signal, a shock signal or a gyro disturbance signal is substantially isolated out from interested gyro sense signals that are used to sense a rate of rotation. A peak detector samples the modulated gyro output signal, determines whether the signal exceeds a threshold level VTH and outputs a shock flag indicating a corresponding determination result.