M-CAN Intrusion Dataset
1. Dataset Release
This dataset is a M-CAN normal dataset and abnormal dataset containing attack messages. M-CAN is a bus-type topology in which various modules for interworking with navigation and in-vehicle multimedia communication devices communicate.
The normal dataset was extracted from the Genesis g80 during about 36 minutes. The attack dataset used the extracted normal dataset to inject DoS and Fuzzing attacks. The attack dataset is not extracted while directly injected into the vehicle, but packets are injected in the local computer.
2-1. data attributes
2-2. Attack type
Two attacks are provided: DoS, and Fuzzing. A DoS attack is an attack that denials service what the CAN bus protocol with meaningless messages by sending the fixed AID and payload. A fuzzing attack is an attack that causes unexpected behavior by sending a message with random AID, DLC, and payload values.
DoS: Injecting message of '0x00000000' CAN ID every 0.25 millisecond during 4 seconds. A total of 25 attacks were injected.
Fuzzing: Injects a message with random AID, DLC, and Payload values every 0.1 milliseconds during 1 seconds. A total of 10 attacks were injected.
2-3 Driving route
The normal dataset drive a round-trip one hour course around Korea University. We drive in the city, and one driver performed the dataset extraction. It is a one-hour course in total, and some were used to collect M-CAN and some B-CAN.