A Novel Intrusion Detection Method in Train-Ground Communication System

Abstract

At present, the train-ground communication system based on the wireless communication protocol is a very important component of communication-based train control (CBTC) systems in intelligent transportation. Its information security is worthy of attention. In order to guarantee the security of the train-ground communication system, this paper proposes an improved AdaBoost multi-classification intrusion detection method based on the n-gram model. First, the n-gram model is used to model the state transitions of the IEEE 802.11 protocol. Then, a typical normal behavior set and typical abnormal behavior sets are obtained by learning and they can portray typical behaviors of their respective classes. Furthermore, a similarity measure algorithm is proposed to construct AdaBoost weak classifiers, which improves the classification effect of AdaBoost algorithm. At last, an AdaBoost multi-classification algorithm is presented to detect and identify the attacks. Experiments prove that the algorithm can effectively detect and distinguish attack types in the train-ground communication system.

A Novel Intrusion Detection Model Using a Fusion of Network and Device States for Communication-Based Train Control Systems

“…However, the method can only detect data tampering attacks, which may not be effective against other anomalies. Gao proposes an improved Adaboost multi-classification IDS based on the n-gram model [27]. Experiments show that the IDSs can effectively detect attacks on the train-ground communication subsystem.…”