Simulation Validation of a Next-Generation Security Architecture for the Adaptive AutoSAR Platform Integrating an AI-Based Intrusion Detection System(AI-IDPS) and Hybrid Access Control(FA-RBAC)
Jul 2026· International Conference on Ubiquitous and Future Networks· pp. 1262-1264· 0 citations· 9 references
Abstract
The rapid evolution of Software-Defined Vehicles (SDVs) and autonomous driving technologies has significantly increased in-vehicle communication complexity and cybersecurity vulnerabilities. While traditional static Role-Based Access Control (RBAC) is incapable of reflecting dynamic driving contexts, independent Attribute-Based Access Control (ABAC) introduces unsustainable computational overhead within AutoSAR environments. To address international regulations such as UNECE WP. 29 R155/156, ISO/SAE 21434, and ISO 24089, this paper proposes a threestage hybrid access control architecture. This framework integrates Flexible Attribute-based RBAC (FA-RBAC) and an AI-based Intrusion Detection System (AI-IDPS) into the Identity and Access Management (IAM) of the AutoSAR Adaptive Platform. Simulations verifying core SDV scenarios—including driving mode transitions, Over-The-Air (OTA) updates, V2X, and diagnostics—were conducted using a SOME/IP bridge between ROS2 and Adaptive AUTOSAR. The proposed model satisfied real-time constraints with a maximum latency of 7.2ms. Quantitative results further demonstrate a 98.5% detection rate for contextual zero-day attacks and a 60% reduction in the number of written policy rules (WPN).
An Intelligent Security Operations Automation Algorithm (ISOAA) for AI-enabled SOAR is proposed that achieves lower mean time to detect, lower mean time to respond, higher containment success, improved precision and recall, reduced false-positive automation, and lower compliance-breach rate than rule-based SOAR.
Ikenna Mbuko, O. Ijiga, L. Enyejo· International Journal of Eng...· 0 citations
A Security-by-Design and risk-based certification framework that combines a six-layer IoT-AI reference architecture with STRIDE-based threat analysis augmented to capture AI-specific threats, including prompt injection and data poisoning is proposed.
Iván Ortiz-Garcés, Roberto O. Andrade· Future Internet· 0 citations
This paper presents an AI-assisted CTI framework tailored to ICS and Industry 4.0 environments, integrating multi-source data ingestion, a Retrieval-Augmented Generation knowledge store, a modular chain-of-agents architecture, and an explicit human-in-the-loop verification gate.
A security framework for MCP-based multi-agent SOC pipelines, implemented as a middleware layer comprising a tool registration validator and five execution layers: access control, rate limiting, input validation, output validation, and audit logging, indicates that systematic middleware controls can secure MCP-based ag...
Rodrigo Tavares de Pina Simões, Xavier Larriva-Novo, Carmen Sánchez-Zas et al.· Applied Sciences· 0 citations
Results prove the combination of adaptive intelligence, secure virtualization, and dynamic policy enforcement boosts cybersecurity defenses in unique ways for programmable SDN and DCN infrastructures.
Hasan Alkahtani· JOIV: International Journal...· 0 citations
A GenAI-driven adaptive cybersecurity mesh architecture designed for real-time threat detection in distributed intelligent communication environments and demonstrates improved detection accuracy, reduced false positives, and lower response latency compared to baseline signature-based and centralised ML-based IDS models...