A Measurement Methodology for Alarm Timing in Passive Automotive Ethernet Protocol Monitoring: Onset, Activation Burden, and Recovery
编号:132
访问权限:仅限参会人
更新:2026-10-14 17:05:18 浏览:6次
口头报告
摘要
Abstract—Passive protocol monitoring in automotive Ethernet requires timely alarms, limited activation during normal operation, and prompt recovery after anomalies. Conventional detection scores do not separately quantify these aspects, which can conceal the cost of persistent alarms. This paper presents a measurement methodology that defines strict onset delay, normal activation duty cycle, and recovery delay as separate measurands. It characterizes their dependence on evaluation parameters and timing resolution, analyzes timestamp-quantization uncertainty, and links the first alarm to protocol evidence. Seven-dimensional evidence is constructed in 100-millisecond bins, and nine decision rules are compared under a common normal-data calibration constraint. In a held-out TOW-IDS case study, both matched-input pairs of instantaneous and accumulation rules match all five annotated attack events, with identical onset delays within each pair; accumulation incurs approximately seven times the normal activation duration, and the C7 accumulation rule also shows longer measured recovery tails. In a controlled offline test with one-millisecond timestamp quantization, an accumulation rule achieves higher pointwise F1 than its instantaneous counterpart while matching none of the five events under the strict onset criterion and remaining active during 84.6 percent of normal exposure. These case-study results show that evaluation conventions can change rule rankings. Joint measurement of onset, activation burden, and recovery reveals costs hidden by individual scores and provides a transparent basis for comparing monitoring rules and selecting operating points.
关键词
Keywords—measurement methodology, alarm timing, timestamp resolution, measurement uncertainty, automotive Ethernet, protocol monitoring
稿件作者
Jian Wu
School of Computer Science,Northwestern Polytechnical University;Xi'an Aeronautics Computing Technique Research Institue
Wei Niu
Xi'an Aeronautics Computing Technique Research Institue
Tianhao He
Xi'an Aeronautics Computing Technique Research Institue
发表评论