Cyber security attacks to modern vehicular systems

Journal of Information Security and Applications

Volumn 36, Issue , 2017, Pages 90-100

  Pan, L ^a   Zheng, X ^a   Chen, H X ^b   Luan, T ^a   Bootwala, H ^a   Batten, L ^a  

^a DEAKIN UNIVERSITY   (Australia)

^b TSINGHUA UNIVERSITY   (China)

Author keywords

CAN bus; Security; Security attacks; Smartphone; Vehicle systems

Indexed keywords

COMPUTER CRIME; CONTROL SYSTEM SYNTHESIS; CONTROLLERS; COST EFFECTIVENESS; FUEL ECONOMY; MALWARE; TRAFFIC CONGESTION; VEHICLES;

CAN BUS; CONTROLLER AREA NETWORKBUS; SECURITY; SECURITY ATTACKS; VEHICLE SYSTEM; VEHICULAR CONTROL; VEHICULAR NETWORKS; VEHICULAR SYSTEMS;

NETWORK SECURITY;

EID: 85028317284     PISSN: 22142134     EISSN: 22142126     Source Type: Journal    
DOI: 10.1016/j.jisa.2017.08.005     Document Type: Article

References (36)

1. Phung, P.H., Nilsson, D.K., A model for safe and secure execution of downloaded vehicle applications. Road transport information and control conference and the ITS United Kingdom members’ conference (RTIC 2010)-better transport through technology, IET, 2010, IET, 1–6.
2. Bosch, R., Can specification version 2.0. Rober Bousch GmbH, Postfach, 300240, 1991.
3. Chen, H., Tian, J., Research on the controller area network. Networking and digital society, 2009. ICNDS’09. international conference on, 2, 2009, IEEE, 251–254.
4. Carsten, P., Andel, T.R., Yampolskiy, M., McDonald, J.T., In-vehicle networks: attacks, vulnerabilities, and proposed solutions. Proceedings of the 10th annual cyber and information security research conference, 2015, ACM, 1.
5. Miller, C., Valasek, C., Adventures in automotive networks and control units. Def Con 21 (2013), 260–264.
6. Woo, S., Jo, H.J., Lee, D.H., A practical wireless attack on the connected car and security protocol for in-vehicle can. Intel Transp Syst IEEE Trans 16:2 (2015), 993–1006.
7. Ellims, M., Parker, S., Zurlo, J., Design and analysis of a robust real-time engine control network. Micro IEEE 22:4 (2002), 20–27.
8. Dunjó, J., Fthenakis, V., Vílchez, J.A., Arnaldos, J., Hazard and operability (hazop) analysis. a literature review. J Hazard Mater 173:1 (2010), 19–32.
9. Makowitz, R., Temple, C., Flexray-a communication network for automotive control systems. IEEE international workshop on factory communication systems, 2006, 207–212.
10. Hoppe, T., Kiltz, S., Dittmann, J., Security threats to automotive can networks. practical examples and selected short-term countermeasures. Reliab Eng Syst Saf 96:1 (2011), 11–25.
11. Koscher, K., Czeskis, A., Roesner, F., Patel, S., Kohno, T., Checkoway, S., et al. Experimental security analysis of a modern automobile. Security and privacy (S&P), 2010 IEEE symposium on, 2010, IEEE, 447–462.
12. Cho, K.-T., Shin, K.G., Error handling of in-vehicle networks makes them vulnerable. Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016, ACM, 1044–1055.
13. Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., Savage, S., et al. Comprehensive experimental analyses of automotive attack surfaces. USENIX security symposium, 2011, San Francisco.
14. Miller, C., Valasek, C., Remote exploitation of an unaltered passenger vehicle. Black Hat USA, 2015.
15. Wolf, M., Weimerskirch, A., Wollinger, T., State of the art: embedding security in vehicles. EURASIP J Embed Syst, 2007(1), 2007, 074706.
16. Nilsson, D.K., Larson, U.E., Jonsson, E., Efficient in-vehicle delayed data authentication based on compound message authentication codes. Vehicular technology conference, 2008. VTC 2008-Fall. IEEE 68th, 2008, IEEE, 1–5.
17. Groll, A., Ruland, C., Secure and authentic communication on existing in-vehicle networks. Intelligent vehicles symposium, 2009 IEEE, 2009, IEEE, 1093–1097.
18. Lee, H., Tsai, H.-M., Tonguz, O.K., On the security of intra-car wireless sensor networks. Vehicular technology conference fall (VTC 2009-Fall), 2009 IEEE 70th, 2009, IEEE, 1–5.
19. Wolf, M., Gendrullis, T., Design, implementation, and evaluation of a vehicular hardware security module. International conference on information security and cryptology, 2011, Springer, 302–318.
20. Chang, S., Zhu, H., Dong, M., Ota, K., Liu, X., Shen, X., Private and flexible urban message delivery. IEEE Trans Veh Technol 65:7 (2016), 4900–4910.
21. Ota, K., Dong, M., Chang, S., Zhu, H., Mmcd: cooperative downloading for highway vanets. IEEE Trans Emerg Top Comput 3:1 (2015), 34–43.
22. Li, H., Dong, M., Ota, K., Control plane optimization in software-defined vehicular ad hoc networks. IEEE Trans Veh Technol 65:10 (2016), 7895–7904.
23. Krucker M, Bitzi R. Communication with a Toyota Prius. Project Report, ETH, Switzerland, 2009. available online at https://attachments.priuschat.com/attachment-files/2017/04/122809_Communication_with_a_Toyota_Prius.pdf.
24. Lin, C.-W., Sangiovanni-Vincentelli, A., Cyber-security for the controller area network (can) communication protocol. Cyber security (CyberSecurity), 2012 international conference on, 2012, IEEE, 1–7.
25. Wang, Q., Sawhney, S., Vecure: a practical security framework to protect the can bus of vehicles. Internet of Things (IOT), 2014 international conference on the, 2014, IEEE, 13–18.
26. Song, H.M., Kim, H.R., Kim, H.K., Intrusion detection system based on the analysis of time intervals of can messages for in-vehicle network. 2016 international conference on information networking (ICOIN), 2016, IEEE, 63–68.
27. PRNewswire. PRNewswire. http://goo.gl/ZET6NO; 2016. [Online; accessed 21-April-2016].
28. Ghangurde, M., Business, W.E., Fords sync® and microsoft windows embedded automotive make digital lifestyle a reality on the road. SAE Int, 2011.
29. Niedermaier, B., Durach, S., Eckstein, L., Keinath, A., The new bmw idrive–applied processes and methods to assure high usability. Digital human modeling, 2009, Springer, 443–452.
30. Hamberger, W., Deutler, P., Bouaziz, T., Audi multi media interface (mmi): von der idee zum produkt interdisziplinär-prozessorientiert modellreihenübergreifend. VDI Ber, 2003, 1175–1191.
31. Alliance O. OSGi-The Dynamic Module System for Java, 2009. Online available at: http://www.osgi.org/Main/HomePage.
32. Schulze, S., Pukall, M., Saake, G., Hoppe, T., Dittmann, J., On the need of data management in automotive systems. BTW, 144, 2009, 217–226.
33. Ling, C., Feng, D., An algorithm for detection of malicious messages on can buses. 2012 national conference on information technology and computer science, 2012, Atlantis Press.
34. Oguma, H., Yoshioka, X., Nishikawa, M., Shigetomi, R., Otsuka, A., Imai, H., New attestation based security architecture for in-vehicle communication. Global Telecommunications Conference, 2008. IEEE GLOBECOM 2008. IEEE, 2008, IEEE, 1–6.
35. Gluck, P.R., Holzmann, G.J., Using spin model checking for flight software verification. Aerospace conference proceedings, 2002. IEEE, 1, 2002, IEEE, 1–105.
36. Li, T., Tan, F., Wang, Q., Bu, L., Cao, J.-n., Liu, X., From offline toward real time: a hybrid systems model checking and cps codesign approach for medical device plug-and-play collaborations. Parallel Distrib Syst IEEE Trans 25:3 (2014), 642–652.