Preprint
Aug 2026
Behavioral Residualization for Unsupervised Intrusion Detection in Automotive CAN Networks
Per-ID behavioral residualization is presented, a CAN-specific representation that extracts fourteen temporal, protocol, and payload features from sliding windows and residualizes them against each arbitration ID's normal baseline, which improves mean F1 in the majority of evaluations.
Chandan Hegde, M. R. Reddy
· 0 citations