At the OmniAir Maryland Plugfest on Wednesday, June 3, with a focus on Cybersecurity, OmniTrust, and Leidos successfully demonstrated the first end-to-end over-the-air (OTA) misbehavior detection workflow, triggering a complete V2X security response pipeline after eight years of technology introduction and evolution. Rather than stopping at message generation and validation, the demonstration exercised the full operational chain, showing how misbehavior can be detected, reported, processed, and enforced across a live, interoperable environment.
The demonstrated workflow aligns with established V2X security standards: message signing and verification follow IEEE 1609.2; certificate provisioning and revocation are managed in accordance with IEEE 1609.2.1; and misbehavior reporting and processing are consistent with SAE J3287.
Qualcomm provided the V2X platform and misbehavior detection capabilities, OmniTrust supplied the Security Credential Management System (SCMS) services, and Leidos integrated the end-to-end workflow and validation processes.
During the verification demonstration, a misbehaving Basic Safety Message (BSM) broadcast via Cellular-V2X direct Radio is detected by the Misbehavior Detection and Reporting software. This triggers a sequence of automated security actions. A misbehavior report was generated and securely uploaded to a Security Credential Management System (SCMS) provider, where both the report and the associated BSM signature were validated. The SCMS provider then issued an updated Certificate Revocation List (CRL), which was distributed across the network. On-board units (OBUs) and roadside units (RSUs), including the originating device, successfully updated their CRLs, preventing the misbehaving device from signing or transmitting additional messages.
The most significant aspect of the demonstration was that every participating device independently received, processed, and enforced the updated CRL without interoperability issues. The exercise also included two distinct V2X modules built on different hardware platforms, Intelligent Transportation System (ITS) protocol stacks, and security implementations, validating cross-vendor interoperability under realistic operating conditions.
Building on this success, OmniTrust and Leidos utilized OmniAir’s test cases developed specifically for SAE J3287 standards, which verified interoperability for misbehavior detection and reporting (MBD/MBR) with multiple independent SCMS providers, including SAESOL Tech and Autocrypt.
These achievements directly support the broader objectives of the USDOT Misbehavior Test Tool, which is designed to verify V2X message integrity, identify anomalous behavior, and confirm that communications originate from trusted, properly credentialed sources. By enabling end-to-end misbehavior detection and response, the tool strengthens the integrity of safety-critical data and reinforces confidence in connected vehicle communications.
More broadly, this milestone highlights the value of industry collaboration in advancing interoperable V2X security. Rather than validating isolated components, the Plugfest testing exercised a complete security workflow spanning detection, reporting, credential management, and enforcement across multiple vendors and implementations. The successful execution of this end-to-end process represents an important step toward scalable, secure, and resilient connected-vehicle deployments, demonstrating that connected-vehicle systems can not only communicate effectively but also respond appropriately to security threats and misbehavior. With the methodology proven, misbehavior attributes can be expanded to encompass critical BSM elements, thereby providing trusted communications.
About OmniAir Consortium
OmniAir Consortium is the leading industry association promoting interoperability and certification for ITS, tolling, and connected vehicles. OmniAir’s membership includes public agencies, private companies, research institutions, and independent test laboratories. Learn more at www.omniair.org.
