Exemplary automotive attack scenarios: Trojan horses for Electronic Throttle Control System (ETC) and replay attacks on the power window system

VDI Berichte

Volumn , Issue 2016, 2007, Pages 165-183

  Hoppe, Tobias ^a   Kiltz, Stefan ^a   Lang, Andreas ^a   Dittmann, Jana ^a  

^a OTTO VON GUERICKE UNIVERSITY   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

CAR-TO-CAR (C2C) COMMUNICATION; ELECTRONIC THROTTLE CONTROL (ETC); POWER WINDOW SYSTEMS;

AUTOMOBILE PARTS AND EQUIPMENT; COMPUTER SIMULATION; ELECTRONIC CRIME COUNTERMEASURES; HARDWARE; INFORMATION TECHNOLOGY; SECURITY SYSTEMS;

CONTROL SYSTEMS;

EID: 37149003756     PISSN: 00835560     EISSN: None     Source Type: Book Series    
DOI: None     Document Type: Review

References (23)

1. HOPPE, Tobias ; DITTMANN, Jana: Sniffing/Replay Attacks on CAN Buses: A Simulated Attack on the Electric Window Lift Classified using an Adapted CERT Taxonomy. To appear in: 2nd Workshop on Embedded Systems Security (WESS'2007), A Workshop of the IEEE/ACM EMSOFT'2007 and the Embedded Systems Week October 4, 2007, 2007
2. LANG, Andreas ; DITTMANN, Jana ; KILTZ, Stefan ; HOPPE, Tobias: Future Perspectives: The Car and its IP-Address - A Potential Safety and Security Risk Assessment. To appear in: SafeComp 2007, Nuremberg, Germany; 18.-21. September2007, 2007
3. HOWARD, John D. ; LONGSTAFF, Thomas A.: A Common Language for Computer Security Incidents (SAND98-8667) / Sandia National Laboratories. 1998 (ISBN 0-201-63346-9). - Forschungsbericht
4. ANDERSON, Ross: Security engineering - A Guide to building dependable distributed systems. Wiley Publishing, 2001 (0-471-38922-6)
5. NIST: An Introduction to Computer Security: The NIST Handbook / National Institute for Standards and Technology. 1996. - NIST Special Publication 800-12
6. BISHOP, Matt: Computer Security - Art and Science. Addison-Wesley, 2003 (ISBN 0-201-44099-7)
7. BAZAZ, Anil ; ARTHUR, James D.: On Vulnerabilities, Constraints and Assumptions. http://arxiv.org/pdf/cs.CR/0509076. Version: 2005
8. AUSTRALIA, Nation L.: Authenticity. http://www.nla.gov. au/padi/topics/4.html. Version: 2005
9. SCHNEIER, Bruce: Secrets and lies - Digital security in a networked world. Wiley Computer Publishing, 2004 (ISBN 0-471-25311-1)
10. AVIZIENIS, Algirdas ; LAPRIE, Jean-Claude ; RANDELL, Brian ; LANDWEHR, Carl: Basic Concepts and Taxonomy of Dependable and Secure Computing, http://csdl.computer.org/comp/ trans/tq/2004/01/q0002.pdf. Version: 2004
11. KAISER, Jörg: Grundlagen zuverlässiger fehlertoleranter Systeme. 2007
12. INNOVATION ELECTRONICS (UK) LTD, HSL: A methodology for the assignment of safety integrity levels (SILs) to safety-related control functions implemented by safety-related electrical, electronic and programmable electronic control systems of machines / Health and Safety Laboratory. 2004. - Forschungsbericht
13. MISRA: Development guidelines for vehicle based software / MISRA. 2001 (ISBN 0 9524156 0 7). - Forschungsbericht
14. WETTER, Dirk: Monokulturen, Zecken und Kuckuckseier. In: iX 03 (2005), S. 12
15. KILTZ, Stefan ; LANG, Andreas ; DITTMANN, Jana: Klassifizierung der Eigenschaften von Trojanischen Pferden. In: Patrick Horster (Ed.), DACH Security 2006, Bestandsaufnahme, Konzepte, Anwendungen, Perspektiven. 2006, S. 351-361
16. JANCZEWSKI, Lech J. ; COLARIK, Andrew M.: Cyber Warfare and Cyber Terrorism. Hershey, PA : Premier Reference Source, 2007. - ISBN: 978-159140991-5
17. HOPPE, Toblas C: Evaluierung der Bedrohungssituation von Computerzecken, Otto-von-Guericke Universität Magdeburg, Fakultät für Informatik, Diplomarbeit, 2006
18. MOST: MOST Cooperation, http://www.mostcooperation.com/. Version:2007
19. ANDREA BARISANI, Daniele B.: Unusual Car Navigation Tricks: Injecting RDS-TMC Traffic Information Signals. In: CanSecWest Vancouver, 2007
20. FLEXRAY: FlexRay - The communication system for advanced automotive control applications. http://www.flexray.com/. Version: 2007
21. HIS: Herstellerinitiative Software, http://www.automotive-his.de/. Version:2007
22. TCG: Trusted Computing Group. https://www.trustedcomputinggroup. org/home/. Version: 2007
23. Vector Informatik, http://www.vector-informatik.com/. Version: 2007