A Hybrid Intrusion Detection System for Electric Vehicle Charging Infrastructure

• URL: http://arxiv.org/abs/2606.23236v1
• Date: Mon, 22 Jun 2026 12:23:05 GMT
• Title: A Hybrid Intrusion Detection System for Electric Vehicle Charging Infrastructure
• Abstract summary: This research addresses critical gaps in existing EVCS Intrusion Detection Systems.<n>It proposes a hybrid IDS that integrates attack detection on both the cyber and physical layer of the EVCS ecosystem.<n>The proposed hybrid IDS utilizes a dual-layer integration method, which combines network-based IDS (NIDS) and host-based IDS (HIDS)
• Score: 0.0
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: The integration of Electric Vehicle Charging Stations (EVCSs) into the smart grid necessitates sophisticated digital infrastructure for their management and coordination, which expands the attack surface and makes both the power grid and EVCSs vulnerable to cyberattacks. This research addresses critical gaps in existing EVCS Intrusion Detection Systems (IDS) by proposing a hybrid IDS that integrates attack detection on both the cyber and physical layer of the EVCS ecosystem. The proposed hybrid IDS utilizes a dual-layer integration method, which combines network-based IDS (NIDS) and host-based IDS (HIDS). This approach facilitates for comprehensive monitoring of both network traffic through the NIDS and host-level activities via the HIDS, effectively addressing the unique challenges posed by the interconnected nature of EVCS ecosystems. Utilizing the recent CICEVSE2024 dataset, the IDS presented in this work performs multiclass classification across various attack types, including False Data Injection Attacks (FDIAs), reconnaissance, denial of service, backdoor, and cryptojacking attacks. Experimental results demonstrate that our approach achieves excellent detection accuracy, with the NIDS component reaching 99.99\% accuracy for network-based attacks and the HIDS component achieving 83.47\% accuracy on FDIA, cryptojacking, backdoor, all DoS, all Recon except Slowloris Scan attacks. This dual-layer detection significantly outperforms single-source detection approaches previously presented in literature.

Related papers

• SoK: Harmonizing Attack Graphs and Intrusion Detection Systems [70.34940998791319]
  Attack Graphs (AGs) serve as the primary threat model for analyzing attacker strategies and informing any response.<n>Despite the conceptual connection being recognized in early research, the field of AG and IDS integration lacks a common structure.<n>This paper presents the first systematic analysis of AG-IDS integration, reviewing a 73 comprehensive works in literature.
  arXiv  Detail & Related papers  (2026-03-09T12:16:51Z)
• Hybrid IDS Using Signature-Based and Anomaly-Based Detection [0.0]
  Intrusion detection systems (IDS) are essential for protecting computer systems and networks against a wide range of cyber threats.<n>IDS are commonly categorized into two main types, each with its own strengths and limitations.<n>This paper presents a conceptual overview of Hybrid IDS, which integrate signature-based and anomaly-based detection techniques.
  arXiv  Detail & Related papers  (2026-01-17T10:19:57Z)
• CANDoSA: A Hardware Performance Counter-Based Intrusion Detection System for DoS Attacks on Automotive CAN bus [45.24207460381396]
  This paper presents a novel Intrusion Detection System (IDS) designed for the Controller Area Network (CAN) environment.<n>A RISC-V-based CAN receiver is simulated using the gem5 simulator, processing CAN frame payloads with AES-128 encryption as FreeRTOS tasks.<n>Results indicate that this approach could significantly improve CAN security and address emerging challenges in automotive cybersecurity.
  arXiv  Detail & Related papers  (2025-07-19T20:09:52Z)
• Cyber Attacks Detection, Prevention, and Source Localization in Digital Substation Communication using Hybrid Statistical-Deep Learning [39.58317527488534]
  This paper proposes a novel method using hybrid statistical-deep learning for the detection, prevention, and source localization of IEC 61850 SV injection attacks.<n>It effectively discards malicious SV frames with minimal processing overhead and latency, maintains robustness against communication network latency variation and time-synchronization issues.<n>Results demonstrate the method's suitability for practical deployment in IEC 61850-compliant digital substations.
  arXiv  Detail & Related papers  (2025-07-01T07:38:22Z)
• A Conditional Tabular GAN-Enhanced Intrusion Detection System for Rare Attacks in IoT Networks [1.1970409518725493]
  Internet of things (IoT) networks, boosted by 6G technology, are transforming various industries.<n>Their widespread adoption introduces significant security risks, particularly in detecting rare but potentially damaging cyber-attacks.<n>Traditional IDS often struggle with detecting rare attacks due to severe class imbalances in IoT data.
  arXiv  Detail & Related papers  (2025-02-09T21:13:11Z)
• Charging Ahead: A Hierarchical Adversarial Framework for Counteracting Advanced Cyber Threats in EV Charging Stations [1.873794246359724]
  Electric vehicles (EVs) provide false information to gain higher charging priority, potentially causing grid instability. This paper introduces a hierarchical adversarial framework using DRL (HADRL), which effectively detects stealthy cyberattacks on EV charging stations.
  arXiv  Detail & Related papers  (2024-07-04T08:23:03Z)
• Redefining DDoS Attack Detection Using A Dual-Space Prototypical Network-Based Approach [38.38311259444761]
  We introduce a new deep learning-based technique for detecting DDoS attacks. We propose a new dual-space prototypical network that leverages a unique dual-space loss function. This approach capitalizes on the strengths of representation learning within the latent space.
  arXiv  Detail & Related papers  (2024-06-04T03:22:52Z)
• FaultGuard: A Generative Approach to Resilient Fault Prediction in Smart Electrical Grids [53.2306792009435]
  FaultGuard is the first framework for fault type and zone classification resilient to adversarial attacks. We propose a low-complexity fault prediction model and an online adversarial training technique to enhance robustness. Our model outclasses the state-of-the-art for resilient fault prediction benchmarking, with an accuracy of up to 0.958.
  arXiv  Detail & Related papers  (2024-03-26T08:51:23Z)
• Effective Intrusion Detection in Heterogeneous Internet-of-Things Networks via Ensemble Knowledge Distillation-based Federated Learning [52.6706505729803]
  We introduce Federated Learning (FL) to collaboratively train a decentralized shared model of Intrusion Detection Systems (IDS) FLEKD enables a more flexible aggregation method than conventional model fusion techniques. Experiment results show that the proposed approach outperforms local training and traditional FL in terms of both speed and performance.
  arXiv  Detail & Related papers  (2024-01-22T14:16:37Z)
• A Transfer Learning and Optimized CNN Based Intrusion Detection System for Internet of Vehicles [10.350337750192997]
  In this paper, a transfer learning and ensemble learning-based IDS is proposed for Internet of Vehicles (IoV) systems. The proposed IDS has demonstrated over 99.25% detection rates and F1-scores on two public benchmark IoV security datasets. This shows the effectiveness of the proposed IDS for cyber-attack detection in both intra-vehicle and external vehicular networks.
  arXiv  Detail & Related papers  (2022-01-27T21:24:09Z)
• G-IDS: Generative Adversarial Networks Assisted Intrusion Detection System [1.5119440099674917]
  We propose a generative adversarial network (GAN) based intrusion detection system (G-IDS) G-IDS generates synthetic samples, and IDS gets trained on them along with the original ones. We find that our proposed G-IDS model performs much better in attack detection and model stabilization during the training process than a standalone IDS.
  arXiv  Detail & Related papers  (2020-06-01T02:42:46Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.