Cyber Threats Facing Autonomous and Connected Vehicles: Future Challenges

IEEE Transactions on Intelligent Transportation Systems

Volumn 18, Issue 11, 2017, Pages 2898-2915

  Parkinson, Simon ^a   Ward, Paul ^a   Wilson, Kyle ^a   Miller, Jonathan ^a  

^a UNIVERSITY OF HUDDERSFIELD   (United Kingdom)

Author keywords

autonomous; Connected; cyber threats; mitigation; vehicles; vulnerabilities

Indexed keywords

KNOWLEDGE BASED SYSTEMS; PERSONAL COMPUTING;

AUTONOMOUS VEHICLES; CYBER SECURITY; FUTURE CHALLENGES; KNOWLEDGE BASE; KNOWLEDGE GAPS; MITIGATION TECHNIQUES; NETWORKED COMPUTING DEVICES; PUBLICLY ACCESSIBLE;

VEHICLES;

EID: 85014851084     PISSN: 15249050     EISSN: None     Source Type: Journal    
DOI: 10.1109/TITS.2017.2665968     Document Type: Article

References (91)

1. N. Lu, N. Cheng, N. Zhang, X. Shen, J. W. Mark, "Connected vehicles: Solutions, challenges, " IEEE Internet Things J., vol. 1, no. 4, pp. 289-299, Aug. 2014.
2. M. H. Hebert, C. E. Thorpe, A. Stentz, Intelligent Unmanned Ground Vehicles: Autonomous Navigation Research at Carnegie Mellon, vol. 388. Boston, MA, USA: Springer, 2012.
3. S. Checkoway, et al., "Comprehensive experimental analyses of automotive attack surfaces, " in Proc. USENIX Secur. Symp., Aug. 2011, pp. 77-92.
4. K. Koscher, et al., "Experimental security analysis of a modern automobile, " in Proc. IEEE Symp. Secur. Privacy, May 2010, pp. 447-462.
5. A. Yadav, G. Bose, R. Bhange, K. Kapoor, N. C. S. Iyengar, R. D. Caytiles, "Security, vulnerability, protection of vehicular onboard diagnostics, " Int. J. Secur. Appl., vol. 10, no. 4, pp. 405-422, 2016.
6. B. G. Stottelaar. (Feb. 2015). Practical Cyber-Attacks on Autonomous Vehicles. [Online]. Available: Http://essay.utwente.nl/66766/
7. J. Petit, S. E. Shladover, "Potential cyberattacks on automated vehicles, " IEEE Trans. Intell. Transp. Syst., vol. 16, no. 2, pp. 546-556, Apr. 2015.
8. A. R. Ruddle, D. D. Ward, A. Perallos, U. Hernandez-Jayo, E. Onieva, I. J. Garciá-Zuazola, "Cyber security riskanalysis for intelligent transport systems, in-vehicle networks, " Intell. Transp. Syst., Technol. Appl., vol. 1, p. 83, Oct. 2015.
9. H. Onishi, "Paradigm change of vehicle cyber security, " in Proc. 4th Int. Conf. Cyber Conflict (CYCON), Jun. 2012, pp. 1-11.
10. Nissan Leaf Electric Cars Hack Vulnerability Disclosed, accessed on Aug. 18, 2016. [Online]. Available: Http://www.bbc.co.uk/news/technology-35642749l
11. D. Clare, et al., "Automotive security best practices, " McAfee, Tech. Rep. 1, 2015.
12. T. L. P. White, "Cyber-security risks in the supply chain, " The National Cyber Security Centre (NCSC), London, U.K., Tech. Rep., 2015.
13. M. Warren, W. Hutchinson, "Cyber attacks against supply chain management systems: A short note, " Int. J. Phys. Distrib. Logist. Manage., vol. 30, nos. 7-8, pp. 710-716, 2000.
14. K. D. Akdemir, D. Karakoyunlu, T. Padir, B. Sunar, "An emerging threat: Eve meets a robot, " in Proc. Int. Conf. Trusted Syst., 2010, pp. 271-289.
15. A. M. Wyglinski, X. Huang, T. Padir, L. Lai, T. R. Eisenbarth, K. Venkatasubramanian, "Security of autonomous systems employing embedded computing, sensors, " IEEE Micro, vol. 33, no. 1, pp. 80-86, Jan. 2013.
16. Y. Cui, S. S. Ge, "Autonomous vehicle positioning with GPS in urban canyon environments, " IEEE Trans. Robot. Autom., vol. 19, no. 1, pp. 15-25, Feb. 2003.
17. T. Humphreys, "Statement on the vulnerability of civil unmanned aerial vehicles, other systems to civil GPS spoofing, " submitted to the Subcommittee Oversight, Investigat. Manage. House Committee Homeland Secur., U.S. House Representatives, Washington, DC, USA, Jul. 18, 2012.
18. N. O. Tippenhauer, C. Pöpper, K. B. Rasmussen, S. Capkun, "On the requirements for successful GPS spoofing attacks, " in Proc. 18th ACM Conf. Comput. Commun. Secur., Oct. 2011, pp. 75-86.
19. Ut Austin Researchers Successfully Spoof an $80 Million Yacht at Sea, accessed on Aug. 18, 2016. [Online]. Available: Http://news.utexas.edu/2013/07/29/ut-austin-researchers-successfullyspoof-A n-80-million-yacht-at-sea
20. D. P. Shepard, T. E. Humphreys, A. A. Fansler, "Evaluation of the vulnerability of phasor measurement units to GPS spoofing attacks, " Int. J. Critical Infrastruct. Protection, vol. 5, no. 3, pp. 146-153, 2012.
21. B. W. O'Hanlon, M. L. Psiaki, J. A. Bhatti, D. P. Shepard, T. E. Humphreys, "Real-time GPS spoofing detection via correlation of encrypted signals, " Navigation, vol. 60, no. 4, pp. 267-278, 2013.
22. T. E. Humphreys, B. M. Ledvina, M. L. Psiaki, B. W. O'Hanlon, P. M. Kintner, Jr., "Assessing the spoofing threat: Development of a portable GPS civilian spoofer, " in Proc. ION GNSS Int. Tech. Meeting Satellite Division, vol. 55. 2008, p. 56.
23. S.-S. Jan, A.-L. Tao, "Comprehensive comparisons of satellite data, signals, measurements between the BeiDou navigation satellite system, the global positioning system, " Sensors, vol. 16, no. 5, p. 689, 2016.
24. M. Farsi, K. Ratcliff, M. Barbosa, "An overview of controller area network, " Comput. Control Eng. J., vol. 10, no. 3, pp. 113-120, Jun. 1999.
25. Can Specification Version 2.0, Postfach 300240, Bosch, Rober Bousch GmbH, Stuttgart, Germany, 1991.
26. P. Mundhenk, S. Steinhorst, M. Lukasiewycz, S. A. Fahmy, S. Chakraborty, "Lightweight authentication for secure automotive networks, " in Proc. Design, Autom. Test Eur. Conf. Exhibit., 2015, pp. 285-288.
27. S. Singh, K. Kingsley, C.-L. Chen, "Tire pressure maintenance-A statistical investigation, " U.S Dept. Transp., Washington, DC, USA, Tech. Rep. DOT HS 811 086, 2009.
28. Cars Safer From 1 November 2012, accessed on Aug. 16, 2016. [Online]. Available: Http://europa.eu/rapid/press-release-IP-12-1169-en.htm
29. I. Roufa, et al., "Security, privacy vulnerabilities of in-car wireless networks: A tire pressure monitoring system case study, " in Proc. 19th USENIX Secur. Symp., Washington, DC, USA, Feb. 2010, pp. 11-13.
30. A. Wright, "Hacking cars, " Commun. ACM, vol. 54, no. 11, pp. 18-19, Nov. 2011.
31. S. A. Hirani, "Energy consumption of encryption schemes in wireless devices, " Ph.D. dissertation, Dept. Inf. Sci. Telecommun., Univ. Pittsburgh, Pittsburgh, PA, USA, 2003.
32. Researcher Hacks Self-Driving Car Sensors, accessed on Aug. 16, 2016. [Online]. Available: Http://spectrum.ieee.org/cars-that-think/transportation/self-driving/researcher-hacks-selfdriving-car-sensors
33. S. Mahajan, R. Bhosale, P. Kulkarni, "Obstacle detection using mono vision camera, laser scanner, " Int. J. Res. Eng. Technol., vol. 2, no. 12, pp. 684-690, 2013
34. J. Du, J. Masters, M. Barth, "Lane-level positioning for in-vehicle navigation, automated vehicle location (AVL) systems, " in Proc. 7th Int. IEEE Conf. Intell. Transp. Syst., Oct. 2004, pp. 35-40.
35. D. Giveki, R. Bahmanyar, A. Mohammad, Y. Soltanshahi, H. Khademian, H. Salimi, "Object boundary recognition using b-snake, " Can. J. Image Process. Comput. Vis., vol. 2, no. 6, pp. 64-71, Jul. 2011.
36. H.-Y. Cheng, B.-S. Jeng, P.-T. Tseng, K.-C. Fan, "Lane detection with moving vehicles in the traffic scenes, " IEEE Trans. Intell. Transp. Syst., vol. 7, no. 4, pp. 571-582, Dec. 2006.
37. C. Bahlmann, Y. Zhu, V. Ramesh, M. Pellkofer, T. Koehler, "A system for traffic sign detection, tracking, recognition using color, shape, motion information, " in Proc. IEEE Intell. Veh. Symp., Jun. 2005, pp. 255-260.
38. S. Eum, H. G. Jung, "Enhancing light blob detection for intelligent headlight control using lane detection, " IEEE Trans. Intell. Transp. Syst., vol. 14, no. 2, pp. 1003-1011, Jun. 2013.
39. K. Boccuzzi, "Investigating the causes of, possible remedies for sensor damage in digital cameras used on the omega laser systems, " Univ. Rochester, Rochester, NY, USA, Tech Rep., 2008.
40. Mts. Analysis of Laser Light Threat to CCTV, accessed on Aug. 16, 2016. [Online]. Available: Http://www.mts-iss.com/affects-of-lasers.html, .
41. L. Gomes, "Hidden obstacles for googles self-driving cars: Impressive progress hides major limitations of googles quest for automated driving, " Univ. Parma, Parma, Italy, Tech. Rep., Aug. 2014.
42. Understand the Fatal Tesla Accident on Autopilot, the NHTSA Problem, accessed on Aug. 16, 2016. [Online]. Available: Http://electrek. co/2016/07/01/understanding-fatal-tesla-accident-autopilot-nhtsa-probe/
43. 'Walkie-Talkie' Skyscraper Melts Jaguar Car Parts, accessed on Aug. 16, 2016. [Online]. Available: Http://www.bbc.co.uk/news/ukengland-london-23930675
44. P. Grisleri, I. Fedriga, "The BRAiVE autonomous ground vehicle platform?" IFAC Proc. Vols, vol. 43, no. 16, pp. 497-502, 2010.
45. Cyber Security, the Future of Driverless Cars, accessed on Aug. 16, 2016. [Online]. Available: Http://www.nesta.org.uk/blog/cybersecurity-A nd-future-driverless-cars
46. J. Minuth, "FlexRay electrical physical layer: Theory, components, examples, " in Proc. 14th Int. Conf. Trans. Opt. Netw. (ICTON), 2012, pp. 1-10.
47. D. J. Glancy, "Privacy in autonomous vehicles, " Santa Clara L. Rev., vol. 52, no. 4, p. 1171, 2012.
48. D. Klinedinst, C. King, "On board diagnostics: Risks, vulnerabilities of the connected vehicle, " Carnegie Mellon Univ., Pittsburgh, PA, USA, Tech. Rep., 2016.
49. Researchers Hack Into Driverless Car System, Take Control Of Vehicle, Aug. 16, 2016. [Online]. Available: Http://www.nationaldefense magazine.org/archive/2015/May/Pages/ResearchersHackIntoDriverless CarSystemTakeControlofVehicle.aspx
50. K.-W. Chiang, T. T. Duong, J.-K. Liao, "The performance analysis of a real-time integrated INS/GPS vehicle navigation system with abnormal GPS measurement elimination, " Sensors, vol. 13, no. 8, pp. 10599-10622, 2013.
51. C. Miller, C. Valasek, A Survey of Remote Automotive Attack Surfaces, ASIS Int., Alexandria, VA, USA, 2014.
52. C. Vallance, Car Hack Uses Digital-Radio Broadcasts to Seize Control. London, U.K.: BBC, Jul. 2015.
53. D. K. Nilsson, U. E. Larson, "Conducting forensic investigations of cyber attacks on automobile in-vehicle networks, " in Proc. 1st Int. Conf. Forensic Appl. Techn. Telecommun., Inf., Multimedia Workshop, 2008, Art. no. 8.
54. D. K. Nilsson, U. E. Larson, E. Jonsson, "Creating a secure infrastructure for wireless diagnostics, software updates in vehicles, " in Proc. Int. Conf. Comput. Safety, Rel., Secur., 2008, pp. 207-220.
55. D. K. Nilsson, U. E. Larson, "A defense-in-depth approach to securing the wireless vehicle infrastructure, " J. Netw., vol. 4, no. 7, pp. 552-564, 2009.
56. J. Lindberg, "Security analysis of vehicle diagnostics using DoIP, " Univ. Gothenburg, Gothenburg, Sweden, Tech. Rep., 2011.
57. T. Zhang, H. Antunes, S. Aggarwal, "Defending connected vehicles against malware: Challenges, a solution framework, " IEEE Internet Things J., vol. 1, no. 1, pp. 10-21, Feb. 2014.
58. T. B. Sheridan, Humans, Automation: System Design, Research Issues. Hobeken, NJ, USA: Wiley, 2002.
59. Q. Wu, J. Domingo-Ferrer, Ú. Gonzalez-Nicolas, "Balanced trustworthiness, safety, privacy in vehicle-to-vehicle communications, " IEEE Trans. Veh. Technol., vol. 59, no. 2, pp. 559-573, Feb. 2010.
60. B. Hoh, et al., "Enhancing privacy, accuracy in probe vehicle-based traffic monitoring via virtual trip lines, " IEEE Trans. Mobile Comput., vol. 11, no. 5, pp. 849-864, May 2012.
61. J. Wei, J. M. Snider, T. Gu, J. M. Dolan, B. Litkouhi, "A behavioral planning framework for autonomous driving, " in Proc. IEEE Intell. Veh. Symp., Jun. 2014, pp. 458-464.
62. V. N. Gadepally, "Estimation of driver behavior for autonomous vehicle applications, " Ph.D. dissertation, Dept. Electr. Comput. Eng., Ohio State Univ., Columbus, OH, USA, 2013.
63. A. Kane, P. Koopman, "Ride-through for autonomous vehicles, " in Proc. 32nd Int. Conf. Comput. Safety, Rel. Secur. (SAFECOMP), Sep. 2013.
64. Google Gives More Detail on Safety of its Autonomous Cars, accessed on Aug. 16, 2016. [Online]. Available: Http://www.cnbc.com/2016/01/12/google-gives-more-detail-on-safety-of-its-autonomous-cars.html
65. N. B. Sarter, D. D. Woods, "How in the world did we ever get into that mode? mode error, awareness in supervisory control, " Human Factors: J. Human Factors Ergonom. Soc., vol. 37, no. 1, pp. 5-19, 1995.
66. L. Glielmo, Vehicle-to-Vehicle/Vehicle-to-Infrastructure Control, IEEE Control Syst. Soc., Washington, DC, USA, 2010.
67. J. T. Isaac, S. Zeadally, J. S. Camara, "Security attacks, solutions for vehicular ad hoc networks, " IET Commun. J., vol. 4, no. 7, pp. 894-903, 2010.
68. I. A. Sumra, I. Ahmad, H. Hasbullah, J. B. A. Manan, "Classes 1752 of attacks in VANET, " in Proc. Saudi Int. Electron. Commun. Photon. Conf. (SIECPC), vol. 1753. Apr. 2011, pp. 1-5.
69. M. Jenkins, S. M. Mahmud, "Security needs for the future intelligent vehicles, " SAE, Auvergne-Rhône-Alpes, France, Tech. Rep. 2006-01-1426, 2006.
70. R. Verdult, F. D. Garcia, B. Ege, "Dismantling megamos crypto: Wirelessly lockpicking a vehicle immobilizer, " in Proc. 22nd USENIX Secur. Symp. (USENIX Security), 2015, pp. 703-718.
71. A. Pathre, "Identification of malicious vehicle in VANET environment from DDOS attack, " J. Global Res. Comput. Sci., vol. 4, no. 6, pp. 30-34, 2013.
72. A. Pathre, C. Agrawal, A. Jain, "A novel defense scheme against DDOS attack in VANET, " in Proc. 10th Int. Conf. Wireless Opt. Commun. Netw. (WOCN), Jul. 2013, pp. 1-5.
73. A. Rawat, S. Sharma, R. Sushil, "VANET: Security attacks, its possible solutions, " J. Inf. Oper. Manage., vol. 3, no. 1, p. 301, 2012.
74. H. Hasbullah, I. A. Soomro, J. B. A. Manan, "Denial of service (DOS) attack, its possible solutions in VANET, " World Acad. Sci., Eng. Technol., vol. 65, p. 20, May 2010.
75. U. E. Larson, D. K. Nilsson, E. Jonsson, "An approach to specification-based attack detection for in-vehicle networks, " in Proc. IEEE Intell. Veh. Symp., Jun. 2008, pp. 220-225.
76. D. K. Nilsson, U. E. Larson, F. Picasso, E. Jonsson, "A first simulation of attacks in the automotive network communications protocol flexray, " in Proc. Int. Workshop Comput. Intell. Secur. Inf. Syst. (CISIS), 2009, pp. 84-91.
77. M. Faezipour, M. Nourani, A. Saeed, S. Addepalli, "Progress, challenges in intelligent vehicle area networks, " Commun. ACM, vol. 55, no. 2, pp. 90-100, Feb. 2012.
78. Connected Cards the Open Road for Hackers, accessed on Aug. 16, 2016. [Online]. Available: Https://www.fireeye.com/blog/threatresearch/2016/06/connected-cars-the.html
79. M. S. Idrees, H. Schweppe, Y. Roudier, M. Wolf, D. Scheuermann, O. Henniger, "Secure automotive on-board protocols: A case of overthe-A ir firmware updates, " in Communication Technologies for Vehicles. Berlin, Germany: Springer, 2011, pp. 224-238.
80. BMW OBD Port Theft-The Solution, accessed on Aug. 16, 2016. [Online]. Available: Http://www.clifford.co.uk/BMW-OBD-Theft.html
81. S. Chen, A. M. Wyglinski, S. Pagadarai, R. Vuyyuru, O. Altintas, "Feasibility analysis of vehicular dynamic spectrum access via queueing theory model, " IEEE Commun. Mag., vol. 49, no. 11, pp. 156-163, Nov. 2011.
82. K. Haataja, Security Threats Countermeasures Bluetooth-Enabled System. Saarbrücken, Germany: LAP Lambert Academic Publishing, 2009.
83. A. Dardanelli, et al., "A security layer for smartphone-to-vehicle communication over Bluetooth, " IEEE Embedded Syst. Lett., vol. 5, no. 3, pp. 34-37, Sep. 2013.
84. D. Spill, A. Bittau, "Bluesniff: Eve meets alice, bluetooth, " in Proc. WOOT, vol. 7. 2007, pp. 1-10.
85. J. J. Blum, A. Neiswender, A. Eskandarian, "Denial of service attacks on inter-vehicle communication networks, " in Proc. 11th Int. IEEE Conf. Intell. Transp. Syst, Oct. 2008, pp. 797-802.
86. H. Wenzhun, W. Yongsheng, Y. Xiangyang, "Studies on novel anti-jamming technique of unmanned aerial vehicle data link, " Chin. J. Aeronautics, vol. 21, no. 2, pp. 141-148, 2008.
87. E. J. Ohlmeyer, "Analysis of an ultra-tightly coupled GPS/INS system in jamming, " in Proc. IEEE/ION Position, Location, Navigat. Symp., Apr. 2006, pp. 44-53.
88. J. Luo, J.-P. Hubaux, "A survey of inter-vehicle communication, " Tech. Rep., 2004.
89. M. L. Sichitiu, M. Kihl, "Inter-vehicle communication systems: A survey, " IEEE Commun. Surveys Tuts., vol. 10, no. 2, pp. 88-105, 2nd Quart., 2008.
90. D. Dmitri, et al, "Path planning for autonomous vehicles in unknown semi-structured environments, " Int. J. Robot. Res., vol. 29, no. 5, pp. 485-501, 2010.
91. J. Levinson, et al, "Towards fully autonomous driving: Systems, algorithms, " in Proc. Intell. Veh. Symp. (IV), 2011.