Abstract: One embodiment provides an electronic control unit (ECU) for a vehicle. The ECU includes transceiver circuitry, voltage measurement circuitry and feature set circuitry. The transceiver circuitry is to at least one of send and/or receive a message. The voltage measurement circuitry is to determine at least one of a high bus line voltage (VCANH) value and/or a low bus line voltage (VCANL) value, for each zero bit of at least one zero bit of a received message. The received the message includes a plurality of bits. The feature set circuitry is to determine a value of at least one feature of a feature set based, at least in part, on at least one of a high acknowledge (ACK) threshold voltage (VthH) and/or a low ACK threshold voltage (VthL). The feature set includes at least one of an operating most frequently measured VCANH value (VfreqH2) of a number of VCANH values and/or an operating most frequently measured VCANL value (VfreqL2) of a number of VCANL values.

Abstract: Driver fingerprinting using sensor data was known to be feasible only with access to in-car data. This disclosure presents a novel technique for identifying a vehicle driver from only one vehicle turn and using zero-permission sensors residing in the mobile device. Through extensive evaluations, extracted features are shown to reflect only the drivers unique turning style and thus functions as the core of driver fingerprinting.

Abstract: Research efforts to detect and prevent possible attacks on vehicles have led to various defense schemes that are capable of preventing attacks and/or determining the presence/absence of an attack on the in-vehicle network. However, these efforts still cannot identify which Electronic Control Unit (ECU) on the in-vehicle network actually mounted the attack. Moreover, they cannot detect attacks by an adversary that impersonates ECUs injecting in-vehicle messages aperiodically. Identifying the source of an attack is essential for efficient forensic, isolation, security patch, etc. To fill these gaps, a method is presented for detecting and identifying compromised ECUs in a vehicle network.

Abstract: An anomaly-based intrusion detection system is presented for use in vehicle networks. The intrusion detection system measures and exploits the intervals of periodic in-vehicle messages for fingerprinting electronic control units. Fingerprints are then used for constructing a baseline of clock behaviors, for example with a Recursive Least Squares algorithm. Based on the baseline, the intrusion detection system uses cumulative sum to detect any abnormal shifts in the identification errors—a clear sign of an intrusion. This approach allows quick identification of in-vehicle network intrusions with low false positive rates.

Abstract: An important new vulnerability was discovered and is applicable to several in-vehicle networks including Control Area Network (CAN), the de facto standard in-vehicle network protocol. Specifically, a bus-off attack exploits the safe mode of CAN to disconnect or shut down uncompromised (healthy) ECUs. This is an important attack that must be thwarted, since once the attacker compromises an ECU, it is easy to mount the attack on safety-critical ECUs while its prevention/detection is very difficult. Based on analysis and experimental results, a mechanism to detect and/or prevent a bus-off attack is proposed and evaluated.

Abstract: An important new vulnerability was discovered and is applicable to several in-vehicle networks including Control Area Network (CAN), the de facto standard in-vehicle network protocol. Specifically, a bus-off attack exploits the safe mode of CAN to disconnect or shut down uncompromised (healthy) ECUs. This is an important attack that must be thwarted, since once the attacker compromises an ECU, it is easy to mount the attack on safety-critical ECUs while its prevention/detection is very difficult. Based on analysis and experimental results, a mechanism to detect and/or prevent a bus-off attack is proposed and evaluated.

Abstract: One embodiment provides an electronic control unit (ECU) for a vehicle. The ECU includes transceiver circuitry, voltage measurement circuitry and feature set circuitry. The transceiver circuitry is to at least one of send and/or receive a message. The voltage measurement circuitry is to determine at least one of a high bus line voltage (VCANH) value and/or a low bus line voltage (VCANL) value, for each zero bit of at least one zero bit of a received message. The received the message includes a plurality of bits. The feature set circuitry is to determine a value of at least one feature of a feature set based, at least in part, on at least one of a high acknowledge (ACK) threshold voltage (VthH) and/or a low ACK threshold voltage (VthL). The feature set includes at least one of an operating most frequently measured VCANH value (VfreqH2) of a number of VCANH values and/or an operating most frequently measured VCANL value (VfreqL2) of a number of VCANL values.

Abstract: One embodiment provides an electronic control unit (ECU) for a vehicle. The ECU includes transceiver circuitry, voltage measurement circuitry and feature set circuitry. The transceiver circuitry is to at least one of send and/or receive a message. The voltage measurement circuitry is to determine at least one of a high bus line voltage (VCANH) value and/or a low bus line voltage (VCANL) value, for each zero bit of at least one zero bit of a received message. The received the message includes a plurality of bits. The feature set circuitry is to determine a value of at least one feature of a feature set based, at least in part, on at least one of a high acknowledge (ACK) threshold voltage (VthH) and/or a low ACK threshold voltage (VthL). The feature set includes at least one of an operating most frequently measured VCANH value (VfreqH2) of a number of VCANH values and/or an operating most frequently measured VCANL value (VfreqL2) of a number of VCANL values.

Abstract: Research efforts to detect and prevent possible attacks on vehicles have led to various defense schemes that are capable of preventing attacks and/or determining the presence/absence of an attack on the in-vehicle network. However, these efforts still cannot identify which Electronic Control Unit (ECU) on the in-vehicle network actually mounted the attack. Moreover, they cannot detect attacks by an adversary that impersonates ECUs injecting in-vehicle messages aperiodically. Identifying the source of an attack is essential for efficient forensic, isolation, security patch, etc. To fill these gaps, a method is presented for detecting and identifying compromised ECUs in a vehicle network.

Abstract: Driver fingerprinting using sensor data was known to be feasible only with access to in-car data. This disclosure presents a novel technique for identifying a vehicle driver from only one vehicle turn and using zero-permission sensors residing in the mobile device. Through extensive evaluations, extracted features are shown to reflect only the drivers unique turning style and thus functions as the core of driver fingerprinting.

Abstract: One embodiment provides an electronic control unit (ECU) for a vehicle. The ECU includes transceiver circuitry, voltage measurement circuitry and feature set circuitry. The transceiver circuitry is to at least one of send and/or receive a message. The voltage measurement circuitry is to determine at least one of a high bus line voltage (VCANH) value and/or a low bus line voltage (VCANL) value, for each zero bit of at least one zero bit of a received message. The received the message includes a plurality of bits. The feature set circuitry is to determine a value of at least one feature of a feature set based, at least in part, on at least one of a high acknowledge (ACK) threshold voltage (VthH) and/or a low ACK threshold voltage (VthL). The feature set includes at least one of an operating most frequently measured VCANH value (VfreqH2) of a number of VCANH values and/or an operating most frequently measured VCANL value (VfreqL2) of a number of VCANL values.

Abstract: An anomaly-based intrusion detection system is presented for use in vehicle networks. The intrusion detection system measures and exploits the intervals of periodic in-vehicle messages for fingerprinting electronic control units. Fingerprints are then used for constructing a baseline of clock behaviors, for example with a Recursive Least Squares algorithm. Based on the baseline, the intrusion detection system uses cumulative sum to detect any abnormal shifts in the identification errors—a clear sign of an intrusion. This approach allows quick identification of in-vehicle network intrusions with low false positive rates.

Abstract: Disclosed is an operating method of a femto base station which includes broadcasting a plurality of public land mobile network (PLMN) identities; broadcasting a plurality of closed subscriber group (CSG) identities correlated with the plurality of PLMN identities; and establishing wireless communication with user equipment based on the broadcasted PLMN and CSG identities.

Abstract: Disclosed is a carrier wave allotting method of an operation and maintenance system in a wireless communication network. The carrier wave allotting method includes searching a wireless resource of the wireless communication network; updating cell information indicating information of cells of the wireless communication network; searching an access mode of a station connected with the operation and maintenance system; searching a wireless capacity of the station; and allotting a carrier wave to the station according to the wireless resource, the cell information, the access mode, and the wireless capacity.

Abstract: A method and an apparatus for controlling transmission power in a femto base station is provided. The method includes: predicting femto base station interference to be given from an adjacent femto base station to a terminal; predicting macro base station interference to be given from a macro base station to the terminal; determining transmission power for the terminal; and transmitting a downlink signal to the terminal on the basis of the transmission power, wherein the femto base station interference is predicted on the basis of a distance between serving femto base station and the adjacent femto base station and the transmission power of the adjacent femto base station, and the macro base station interference is predicted on the basis of a distance between serving femto base station and the macro base station and the transmission power of the macro base station.

Abstract: The present invention provides a method including two operations of a first operation and a second operation. The first operation may determine between a terminal located in a space including the small base station and a terminal located in a space excluding the small base station based on a value reported by a terminal. The second operation may be performed using information received from a neighboring macro base station in response to the determination failing to be performed in the first operation, thereby ultimately discriminating between an area including the small base station and an area excluding the small base station corresponding to a location of a terminal.

Abstract: Disclosed is a wireless communication base station which includes a plurality of radio units configured to transmit and receive a radio signal; and a digital unit connected to the plurality of radio units via cables and configured to operate a communication protocol. The digital unit controls the plurality of radio units according to a communication environment to be switched into a merge state in which the plurality of radio units forms a cell, or an independent state in which the plurality of radio units forms different cells, respectively.

Abstract: A method of operating a closed-mode base station, includes broadcasting an interference preamble for providing a notification of an interference situation via a broadcast of system information; checking current service status of the closed-mode base station when the interference situation is reported from a non-subscriber terminal entered a service area of the closed-mode base station; and avoiding the interference situation based on the checked current service status.

Abstract: Disclosed is a method of operating a femto base station (BS) in a wireless communication system, the method comprising: receiving an access request comprising a closed subscriber group (CSG) identifier (ID) from user equipment (UE); determining a number N of UE accessing the femto BS; ascertaining an access type to determine whether the UE is a CSG UE or a non-CSG UE of the femto BS on the basis of the CSG ID of the UE; and determining whether to admit access of the UE on the basis of the access type, the N and access admittable information, the access admittable information comprising UCSG, i.e., a maximum number of CSG UE of which access is admitted; UALL, i.e., a maximum number of non-CSG UE of which access is admitted; and UMAX, i.e., a maximum number of UE of which access is admitted.

Abstract: Provided are a mobile communication system comprising a femto base station for transmitting system information, and a terminal for receiving the system information from the femto base station. The terminal receives the system information from the femto base station, and during other times, receives data from a serving macro base station.