Active attack detection in autonomous vehicle networks

An apparatus, comprising:

• a plurality of electronic control units of an autonomous vehicle communicably coupled by a network;
• and
• logic, at least a portion of which is implemented in hardware, the logic to:
• receive an indication from a first electronic control unit (ECU) of the plurality of ECUs specifying to transmit a first data frame via the network;
• determine, based on a message identifier (ID) of the first ECU, whether a transmit window for the first ECU is open;
• permit the first ECU to transmit the first data frame via the network based on a determination that the transmit window for the first ECU is open;
• determine whether the first ECU is subject to a flooding attack when the first ECU transmits the first data frame during the transmit window;
• determine whether the first ECU is subject to a suspension attack when the first ECU does not transmit the first data frame during the transmit window;
• and
• generate an alert in response to a flooding attack or a suspension attack.

A method, comprising:

• receiving, by logic implemented at least partially in hardware, an indication from a first electronic control unit (ECU) of a plurality of ECUs specifying to transmit a first data frame via a network of an autonomous vehicle;
• determining, by the logic based on a message identifier (ID) of the first ECU, whether a transmit window for the first ECU is open;
• permitting, by the logic, the first ECU to transmit the first data frame via the network based on a determination that the transmit window for the first ECU is open;
• determining, by the logic, whether the first ECU is subject to a flooding attack when the first ECU transmits the first data frame during the transmit window;
• determining, by the logic, whether the first ECU is subject to a suspension attack when the first ECU does not transmit the first data frame during the transmit window;
• and
• generating, by the logic, an alert in response to a flooding attack or a suspension attack.