Experimental security analysis of a modern automobile

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2010, Pages 447-462

  Koscher, Karl ^a   Czeskis, Alexei ^a   Roesner, Franziska ^a   Patel, Shwetak ^a   Kohno, Tadayoshi ^a   Checkoway, Stephen ^b   McCoy, Damon ^b   Kantor, Brian ^b   Anderson, Danny ^b   Snachám, Hovav ^b   Savage, Stefan ^b  

^a University of Washington   (United States)

^b UNIVERSITY OF CALIFORNIA   (United States)

Author keywords

Automobiles; Communication standards; Communication system security; Computer security; Data buses

Indexed keywords

COMMUNICATION STANDARDS; COMMUNICATION SYSTEM SECURITY; COMPUTER SECURITY; DATA BUS; DATA BUSES;

COMMUNICATION SYSTEMS; COMPUTER CONTROL SYSTEMS; COORDINATION REACTIONS; DIESEL ENGINES; DIGITAL COMPUTERS; DIGITAL DEVICES; ELECTRONICS INDUSTRY; FRICTION MATERIALS; POWER ELECTRONICS; SECURITY SYSTEMS;

NETWORK SECURITY;

EID: 77955201139     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2010.34     Document Type: Conference Paper

References (28)

1. Autosar: Automotive open system architecture. http://www. autosar.org/.
2. A. Bellissimo, J. Burgess, and K. Fu. Secure software updates: Disappointments and new challenges. In Proceedings of HotSec 2006, pages 37-13. USENIX, July 2006.
3. S. Bono, M. Green, A. Stubblefield, A. Juels, A. D. Rubin, and M. Szydlo. Security analysis of a cryptographicallyenabled RFID device. In P. McDaniel, editor, Proceedings of USENIX Security 2005. USENIX, Aug. 2005.
4. Bureau of Transportation Statistics. National Transportation Statistics (Table 1-11: Number of U.S. Aircraft, Vehicles, Vessels, and Other Conveyances), 2008. http://www.bts.gov/publications/national-transportation- statistics/html/table-01-l 1 .html.
5. CAMP Vehicle Safety Communications 2 Consortium. Cooperative intersection collision avoidance system limited to stop sign and traffic signal violations midterm phase i report, Oct. 2008. Online: http://www.nhtsa.dot.gov/staticfiles/ DOT/NHTSA/NRD/ Multimedia/PDFs/Crash%20Avoidance/2008/811048.pdf.
6. CAMP Vehicle Safety Communications 2 Consortium. Vehicle safety communications -applications first annual report, Sept. 2008. Online: http://www.intellidriveusa.org/ documents/09042008-vsc-a-report.pdf.
7. CAMP Vehicle Safety Communications Consortium. Vehicle safety communications project task 3 final report, Mar.2005.Online:http://www. intellidriveusa.org/documents/ vehicle-safety.pdf.
8. R. Charette. This car runs on code. Online: http://www. spectrum.ieee.org/feb09/7649, Feb. 2009.
9. DARPA. Grand challenge. http://www.darpa.mil/ grandchallenge/index.asp.
10. A. Edwards. Exclusive: Twitter integration coming to OnStar. Online: http://www.gearlive.com/news/article/ q109- exclusive-twitter- integration-coming- to- onstar/, Mar. 2009.
11. T. Eisenbarth, T. Kasper, A. Moradi, C. Paar, M. Salmasizadeh, and M. Manzuri Shalmani. On the power of power analysis in the real world: A complete break of the KeeLoq code hopping scheme. In D. Wagner, editor, Proceedings of Crypto 2008, volume 5157 of LNCS, pages 203-20. SpringerVerlag, Aug. 2008.
12. P. Eisenstein. GM Hy-Wire drive-by-wire hybrid fuel cell vehicle. Online: http://www.popularmechanics.com/automotive/ new-cars/1266806.html, Aug. 2002.
13. B. Emaus. Hitchhiker's Guide to the Automotive Embedded Software Universe, 2005. Keynote Presentation at SEAS'05 Workshop, available at: http://www.inf.ethz.ch/personal/ pretscha/events/seas05/bruce-emaus-keynote- 050521.pdf.
14. A. Goodwin. Ford Unveils Open-Source Sync Developer Platform. Online: http://reviews.cnet.com/8301-13746- 7-10385619-48.html, Oct. 2009.
15. T. Hoppe, S. Kiltz, and J. Dittmann. Security threats to automotive CAN networks - practical examples and selected short-term countermeasures. In SAFECOMP, 2008.
16. S. Indesteege, N. Keller, O. Dunkelman, E. Biham, and B. Preneel. A practical attack on KeeLoq. In N. Smart, editor, Proceedings of Eurocrypt 2008, volume 4965 of LNCS, pages 1-18. Springer-Verlag, Apr. 2008.
17. ISO. ISO 11898-1:2003 - Road vehicles - Controller area network. International Organization for Standardization, Geneva, Switzerland, 2003.
18. R Kargl, P. Papadimitratos, L. Buttyan, M. Muter, E. Schoch, B. Wiedersheim, T.-V. Thong, G. Calandriello, A. Held, A. Kung, and J.-P. Hubaux. Secure vehicular communication systems: implementation, performance, and research challenges. IEEE Communications Magazine, 46(11):110-118, 2008.
19. U. E. Larson and D. K. Nilsson. Securing vehicles against cyber attacks. In CSIIRW '08: Proceedings of the 4th annual workshop on Cyber security and information intelligence research, pages 1-3, New York, NY, USA, 2008. ACM.
20. M. Mansur. TunerPro - Professional Automobile Tuning Software, http://www.tunerpro.net/.
21. M. Melosi. The automobile and the environment in American history. Online: http://www.autolife.umd.umich.edu/ Environment/E-Overview/E-Overview. htm, 2004.
22. S. Mollman. From cars to TVs, apps are spreading to the real world. Online: http://www.cnn.com/2009/TECH/10/08/apps. realworld/, Oct. 2009.
23. L. E. M. Systems. PCLink - Link ECU Tuning Software. http://www.linkecu. com/pclink/PCLink.
24. P. R. Thorn and C. A. MacCarley. A spy under the hood: Controlling risk and automotive EDR. Risk Management, February 2008.
25. Virginia Tech Transportation Institute. Intersection collision avoidance -violation task 5 final report, Apr. 2007. Online: http://www.intellidriveusa. org/documents/ final-report-04-2007.pdf.
26. M. Wolf, A. Weimerskirch, and C. Paar. Security in automotive bus systems. In Proceedings of the Workshop on Embedded Security in Cars 2004, 2004.
27. M. Wolf, A. Weimerskirch, and T. Wollinger. State of the art: Embedding security in vehicles. EURASIP Journal on Embedded Systems, 2007.
28. Y. Zhao. Telematics: safe and fun driving. Intelligent Systems, IEEE, 17(1):10-14, Jan/Feb 2002.