Fuzzing CAN packets into automobiles

Proceedings - International Conference on Advanced Information Networking and Applications, AINA

Volumn 2015-April, Issue , 2015, Pages 817-821

  Lee, Hyeryun ^a   Choi, Kyunghee ^a   Chung, Kihyun ^a   Kim, Jaein ^b   Yim, Kangbin ^b  

^a Ajou University   (South Korea)

^b Soonchunhyang University   (South Korea)

Author keywords

Automobile; CAN; Cyber attack; ECU; Fuzzing

Indexed keywords

COMPUTER CRIME; CONTROL SYSTEMS; NETWORK SECURITY;

ATTACK PACKETS; CYBER-ATTACKS; ELECTRICAL CONTROL UNITS; FUZZING; IN-DEPTH KNOWLEDGE; NETWORK VULNERABILITY; STANDARD PROTOCOLS; WIRELESS CHANNEL;

AUTOMOBILES;

EID: 84946221802     PISSN: 1550445X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AINA.2015.274     Document Type: Conference Paper

References (15)

1. Karl Koscher, Alexei Czeskis, and Franziska Roesner, Experimental Security Analysis of a Modern Automobile, IEEE Symposium on Security and Privacy, pp.447-462, May. 2010.
2. Stephen Checkoway, Damon McCoy, and et al., Comprehensive Experimental Analyses of Automotive Attack Surfaces, Proceedings of USENIX Security, Portland, USA, pp.77-92, Aug. 2011.
3. https://www.defcon.org/html/defcon-21/dc-21-news.html
4. Gangseok Kim, Analysis of External Attack Possibility against Automotive ECU by Sniffing and Manipulating CAN Communication, Master thesis, Korea University, 2011.
5. T. Hoppe, S. Kiltz, A. Lang and J. Dittman, Exemplary Automotive Attack Scenarios: Trojan horses for Electronic Throttle Control System (ETC) and replay attacks on the power window system, the Proceedings of the 23. VDI/VW Gemeinschaftstagung Automotive Security, Wolfsburg, Germany, pp.165-184, Nov. 2007.
6. I. Rouf, R. Miller, H. Mustafa, T. Taylor, S. Oh, W. Xu, M. Gruteser, W. Trappe, and I. Seskar, Security and privacy vulnerabilities of in-car wireless networks: A tire pressure monitoring system case study, the proceedings of USENIX Security 2010, pp. 323338, Aug. 2010.
7. S. Bono, M. Green, A. Stubblefield, A. Juels, A. Rubin, and M. Szydlo, Security analysis of a cryptographically-enabled RFID device, the proceedings of the 14th USENIX Security Symposium, pp. 116. Aug. 2005
8. Thomas Eisenbarth, Timo Kasper, Amir Moradi, Christof Paar, Mahmoud Salmasizadeh, and Mohammad T. Manzuri Shalmani, On the power of power analysis in the real world: a complete break of the KEELOQ code hopping scheme, Advances in Cryptology CRYPTO 2008, Lecture Notes in Computer Science Vol. 5157, pp 203-220, 2008
9. I. A. Sumra, I. A. Ahmad, H. Hasbullah and J.-L. bin Ab Manan, "Classes of attacks in VANET," Proceedings of the Saudi International Electronics, Communications and Photonics Conference (SIECPC 2011), Saudi Arabia, Riyadh, pp. 1-5, Apr. 2011.
10. A. Lang, J Dittmann, S. Kiltz, and T. Hoppe, Future Perspectives: The Car and Its IP-Address-A Potential Safety and Security Risk Assessment, Proceedings of SAFECOM 2007, LNCS4680, pp.40-53, Aug. 2007.
11. T. Hoppe, S. Kiltz, and J. Dittmann, Adaptive Dynamic Reaction to Automotive IT Security Incidents using Multimedia Car Environment, Proceedings of the Fourth Conference on Information and Assurance and Security, Miyazaki. Japan, pp.295-298, Jun. 2010.
12. I. Rouf, T. Taylor, and et. al., Security and Privacy Vulnerabilities of In-Car Wireless Networks: A Tire Pressure Monitoring System Case Study, Proceedings of 19th USENIX Symposium, San Jose, USA, pp.323-338, Aug. 2010.
13. C. E. Everett and D. McCoy, OCTANE: Open Car Testbed and Network Experiments Bringing Cyber-Physical Security Research to Researchers and Students Proceedings of 6th Workshop on Cyber Security Experimentation and Test, pp.1-8, Washington D.C., USA, Aug. 2013.
14. Wolf, M. and Gendrullis, T, Design, implementation, and evaluation of a vehicular hardware security module, Information Security and Cryptology-ICISC 2011, LNCS 7259, pp. 302-318, 2012.
15. Matsumoto, T., Hata, M., Tanabe, M., Yoshioka, K., and Oishi, K., A method of preventing unauthorized data transmission in controller area network, Proceedings of Vehicular Technology Conference (VTC Spring), pp. 15. IEEE, Yokohama, Japan, May 2012