{"data":{"id":"3f4fdc24-f3b0-4928-a318-4c6006b36328","title":"CANMentor: A Large-Small Model Collaboration Framework for CAN Bus Intrusion Detection","summary":"CANMentor is a framework in which a cloud-side large language model teacher supervises lightweight intrusion detection models on vehicles, addressing the lack of built-in security on the Controller Area Network (CAN) bus. A privacy-aware generator converts original CAN messages into proxies before cloud inference, and the vehicle uses teacher predictions only within a latency bound. On non-IID partitions of the ROAD and HCRL Car-Hacking datasets, knowledge distillation yields maximum relative Macro F1 improvements of 25.01% and 20.79%.","solution":"N/A -- no mitigation discussed in source.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.07853v1","publishedAt":"2026-11-05T11:31:03.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":[],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LLM teacher model (unspecified)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-05T11:31:03.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.8,"researchCategory":"preprint","atlasIds":null}}