A Measurement Methodology for Alarm Timing in Passive Automotive Ethernet Protocol Monitoring: Onset, Activation Burden, and Recovery
编号:132 访问权限:仅限参会人 更新:2026-10-14 17:05:18 浏览:6次 口头报告

报告开始:暂无开始时间(Asia/Shanghai)

报告时间:暂无持续时间

所在会场:[暂无会议] [暂无会议段]

暂无文件

摘要
Abstract—Passive protocol monitoring in automotive Ethernet requires timely alarms, limited activation during normal operation, and prompt recovery after anomalies. Conventional detection scores do not separately quantify these aspects, which can conceal the cost of persistent alarms. This paper presents a measurement methodology that defines strict onset delay, normal activation duty cycle, and recovery delay as separate measurands. It characterizes their dependence on evaluation parameters and timing resolution, analyzes timestamp-quantization uncertainty, and links the first alarm to protocol evidence. Seven-dimensional evidence is constructed in 100-millisecond bins, and nine decision rules are compared under a common normal-data calibration constraint. In a held-out TOW-IDS case study, both matched-input pairs of instantaneous and accumulation rules match all five annotated attack events, with identical onset delays within each pair; accumulation incurs approximately seven times the normal activation duration, and the C7 accumulation rule also shows longer measured recovery tails. In a controlled offline test with one-millisecond timestamp quantization, an accumulation rule achieves higher pointwise F1 than its instantaneous counterpart while matching none of the five events under the strict onset criterion and remaining active during 84.6 percent of normal exposure. These case-study results show that evaluation conventions can change rule rankings. Joint measurement of onset, activation burden, and recovery reveals costs hidden by individual scores and provides a transparent basis for comparing monitoring rules and selecting operating points.
 
关键词
Keywords—measurement methodology, alarm timing, timestamp resolution, measurement uncertainty, automotive Ethernet, protocol monitoring
报告人
Jian Wu
none School of Computer Science,Northwestern Polytechnical University;Xi'an Aeronautics Computing Technique Research Institue

稿件作者
Jian Wu School of Computer Science,Northwestern Polytechnical University;Xi'an Aeronautics Computing Technique Research Institue
Wei Niu Xi'an Aeronautics Computing Technique Research Institue
Tianhao He Xi'an Aeronautics Computing Technique Research Institue
发表评论
验证码 看不清楚,更换一张
全部评论
重要日期
  • 会议日期

    11月06日

    2026

    至

    11月08日

    2026

  • 10月15日 2026

    初稿截稿日期

主办单位
IEEE Instrumentation and Measurement Society
承办单位
Sichuan University
移动端
在手机上打开
小程序
打开微信小程序
客服
扫码或点此咨询