eprintid: 10205836 rev_number: 9 eprint_status: archive userid: 699 dir: disk0/10/20/58/36 datestamp: 2025-03-10 14:59:11 lastmod: 2025-03-10 16:55:49 status_changed: 2025-03-10 14:59:11 type: article metadata_visibility: show sword_depositor: 699 creators_name: Solaas, John Roar Ventura creators_name: Mariconti, Enrico creators_name: Tuptuk, Nilufer title: Systematic Literature Review: Anomaly Detection in Connected and Autonomous Vehicles ispublished: pub divisions: UCL divisions: B04 divisions: F52 keywords: Connected and Autonomous Vehicles, Anomaly Detection, Intrusion Detection System, Artificial Intelligence note: This version is the author accepted manuscript. For information on re-use, please refer to the publisher’s terms and conditions. - This work was supported by the Engineering and Physical Sciences Research Council [EP/S022503/1]. For the purpose of open access, the author has applied a Creative Commons Attribution (CC BY) licence to any Author Accepted Manuscript version arising. abstract: This systematic literature review provides a structured and detailed overview of research on anomaly detection for connected and autonomous vehicles, focusing on the Artificial Intelligence methods employed, training approaches, and testing and evaluation techniques. The initial database search identified 2,160 articles, of which 203 were included in this review after rigorous screening and assessment. This study revealed that the most commonly used anomaly detection techniques employed are deep learning networks such as LSTM, CNN, and autoencoders, alongside one-class SVM. Most detection models were trained using real-world operational vehicle data, although anomalies, such as attacks and faults, were often injected artificially into the datasets. The models were evaluated primarily using five key evaluation metrics: recall, accuracy, precision, F1-score, and false positive rate. The most frequently used set of evaluation metrics for detection models were accuracy, precision, recall, and F1-score. The review makes several recommendations to improve future work related to anomaly detection models. It recommends providing comprehensive assessment of the anomaly detection models and emphasise the importance to share models publicly to facilitate collaboration within the research community and enable further validation. Recommendations also include the need for benchmarking datasets with predefined anomalies or cyberattacks (with comprehensive threat modelling) to test and improve the effectiveness of the proposed anomaly detection models. Future research should focus on the deployment of anomaly based detection in vehicles to evaluate their performance in real-world driving conditions, and explore systems using communication protocols beyond CAN, such as Ethernet and FlexRay. date: 2025-01 date_type: published publisher: Institute of Electrical and Electronics Engineers (IEEE) official_url: http://dx.doi.org/10.1109/tits.2024.3495031 oa_status: green full_text_type: other language: eng primo: open primo_central: open_green verified: verified_manual elements_id: 2340123 doi: 10.1109/tits.2024.3495031 lyricists_name: Solaas, John lyricists_name: Tuptuk, Nilufer lyricists_name: Mariconti, Enrico lyricists_id: JRVSO83 lyricists_id: NTUPT87 lyricists_id: EMARI32 actors_name: Tuptuk, Nilufer actors_id: NTUPT87 actors_role: owner funding_acknowledgements: EP/S022503/1 [Engineering and Physical Sciences Research Council] full_text_status: public publication: IEEE Transactions on Intelligent Transportation Systems volume: 26 number: 1 pagerange: 43 -58 issn: 1524-9050 citation: Solaas, John Roar Ventura; Mariconti, Enrico; Tuptuk, Nilufer; (2025) Systematic Literature Review: Anomaly Detection in Connected and Autonomous Vehicles. IEEE Transactions on Intelligent Transportation Systems , 26 (1) 43 -58. 10.1109/tits.2024.3495031 <https://doi.org/10.1109/tits.2024.3495031>. Green open access document_url: https://discovery.ucl.ac.uk/id/eprint/10205836/1/Systematic_Review__Anomaly_Detection_for_Connected_and_Autonomous_Vehicles.pdf