Hybrid AI Framework Brings Privacy-Preserving Intrusion Detection to Connected Cars

Modern cars are, in essence, rolling computer networks. Dozens of electronic control units, or ECUs, chatter constantly over the Controller Area Network, better known as CAN bus, coordinating everything from braking and steering to climate control and airbag deployment. That protocol was designed in the 1980s for reliability and low cost, not for security. It has no native authentication and no integrity protection, which means any attacker who gains a foothold on the bus can inject fake messages, spoof legitimate ECUs, replay old traffic, fuzz the network with garbage frames, or flood it with denial-of-service packets. A new study published in Multimedia Tools and Applications proposes a way to catch such attacks in real time while keeping driver data private and the model small enough to run on cheap automotive-grade hardware.

Researchers Hamed Alqahtani of King Khalid University in Saudi Arabia and Gulshan Kumar of Shaheed Bhagat Singh State University in India have unveiled FTL-IDS, a Federated Temporal-Aware Lightweight Intrusion Detection System. The framework is a deliberate co-design of four technologies that are usually pursued separately: multi-domain feature extraction from CAN traffic, a hybrid LSTM-Transformer temporal encoder, 8-bit quantization-aware training, and federated learning. According to the authors, existing intrusion detection systems tend to trade temporal modeling capability, privacy, or embedded efficiency against one another; the goal of FTL-IDS is to balance all three at once.

The feature engineering stage is where raw CAN traffic becomes machine-learnable. Rather than feeding raw frames into a neural network, the system organizes temporal, entropy, spectral, and payload-statistical features into fixed-length windows. Entropy features capture the randomness of message identifiers and payloads, which spikes during fuzzing or injection attacks. Spectral features expose periodic patterns that replay or denial-of-service attacks disrupt. Payload statistics reveal when a message’s data content deviates from what a given ECU normally transmits. This multi-domain representation gives the downstream model a rich but compact view of network behavior.

At the heart of the detector sits a hybrid deep learning architecture that splits the temporal modeling problem in two. A long short-term memory network, or LSTM, captures the local dynamics of CAN traffic, the short-range dependencies between consecutive frames that define normal in-vehicle behavior. A Transformer component then models longer-range dependencies across the window, using attention mechanisms to spot subtle patterns that unfold over longer horizons. This division of labor mirrors a broader trend in sequence modeling, where recurrent architectures handle fine-grained local structure while attention mechanisms excel at global context.

Deploying such a model inside a car, however, demands more than accuracy. Automotive ECUs have strict memory, compute, and latency budgets, so the researchers applied 8-bit quantization-aware training, a technique in which the neural network is trained with the constraints of low-precision arithmetic baked in from the start. The resulting quantized model occupies just 1.4 megabytes and achieves a forward-pass latency of 0.13 milliseconds per precomputed window on a Raspberry Pi 4B, a stand-in for resource-constrained embedded hardware. That footprint makes the approach realistic for integration alongside existing ECU software rather than requiring dedicated high-performance hardware.

Privacy is addressed through federated learning, a distributed training paradigm in which the model is trained across multiple clients, such as vehicles or fleet segments, without centralizing raw CAN traffic. Each client trains locally on its own data and shares only model updates, so sensitive driving behavior never leaves the vehicle. The federated version of FTL-IDS retains 99.10, 97.81, and 96.40 percent accuracy on the three evaluation datasets respectively, showing that distributed training costs only a modest amount of detection performance compared with centralized training.

The evaluation spanned three widely used benchmarks of increasing realism: the HCRL Car Hacking dataset, the ROAD dataset, and CAN-MIRGU. On these, FTL-IDS achieved accuracies of 99.71, 98.94, and 97.12 percent, with macro-F1 scores of 0.9978, 0.9817, and 0.9653. The authors also stress-tested the model against adversarial examples, carefully crafted inputs designed to fool machine learning classifiers. Under a fixed perturbation level of epsilon equal to 0.1, accuracies held at 95.2, 93.1, and 91.8 percent against the Fast Gradient Sign Method, and 92.8, 90.0, and 89.7 percent against the more aggressive Projected Gradient Descent attack. The system also incorporates explainability through SHAP and LIME analyses, aligning with a growing demand for interpretable security decisions in safety-critical domains.

The authors are candid about the limits of the work. The robustness study covers only FGSM and PGD attacks; the federated experiments use five simulated clients rather than a real fleet; and the reported latency excludes raw-log preprocessing and the computation of SHAP and LIME explanations. Validation on production-grade ECUs, along with broader adaptive, black-box, and certified robustness testing, remains necessary before the framework can be considered deployment-ready. Standards contexts such as AUTOSAR and ISO 26262, which govern automotive software architecture and functional safety, will ultimately shape how such detectors are certified.

Even with those caveats, the study offers a deployment-oriented baseline for CAN intrusion detection research, demonstrating that temporal representation, privacy-preserving training, and compact inference can be engineered to coexist. As vehicles become more connected and attack surfaces widen, frameworks like FTL-IDS suggest a path toward protecting in-vehicle networks without sacrificing either driver privacy or the real-time performance that automotive systems demand. The datasets used in the study are publicly available, allowing other researchers to build on and independently verify the results.

Subject of Research: A hybrid federated deep learning framework for lightweight, privacy-preserving intrusion detection in CAN-based in-vehicle networks.

Article Title: Federated temporal-aware lightweight intrusion detection system for CAN-based in-vehicle networks: A hybrid deep learning and privacy-preserving framework

Article References: Alqahtani, H., & Kumar, G. (2026). Federated temporal-aware lightweight intrusion detection system for CAN-based in-vehicle networks: A hybrid deep learning and privacy-preserving framework. Multimedia Tools and Applications, 85(10), Article 766. https://doi.org/10.1007/s11042-026-21937-9

Image Credits: AI Generated

DOI: 10.1007/s11042-026-21937-9

Keywords: automotive cybersecurity, intrusion detection system, CAN bus, federated learning, LSTM-Transformer, quantization-aware training, adversarial robustness, in-vehicle networks, controller area network, deep learning, embedded systems, privacy-preserving training