Security and privacy vulnerabilities of in-car wireless networks: A tire pressure monitoring system case study

Proceedings of the 19th USENIX Security Symposium

Volumn , Issue , 2010, Pages 323-338

  Rouf, Ishtiaq ^a   Miller, Rob ^b   Mustafa, Hossen ^a   Taylor, Travis ^a   Oh, Sangho ^b   Xu, Wenyuan ^a   Gruteser, Marco ^b   Trappe, Wade ^b   Seskar, Ivan ^b  

^a UNIVERSITY OF SOUTH CAROLINA   (United States)

^b RUTGERS UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MONITORING; PRESSURE CONTROL; REVERSE ENGINEERING; SOFTWARE RADIO; TIRES; WIRELESS SENSOR NETWORKS;

CUSTOMIZED SOFTWARE; INPUT VALIDATION; LABORATORY EXPERIMENTS; PRIVACY AND SECURITY; SECURITY AND PRIVACY; TIRE-PRESSURE MONITORING SYSTEMS; WARNING MESSAGES; WIRELESS SYSTEMS;

NETWORK SECURITY;

EID: 85040565418     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (42)

1. Ettus Research LLC. http://www.ettus.com/.
2. GNU radio. http://gnuradio.org.
3. IEEE 1609: Family of Standards for Wireless Access in Vehicular Environments (WAVE). http://www.standards.its.dot.gov/fact sheet.asp?f=80.
4. Portable, solar-powered tag readers could improve traffic management. Available at http://news.rpi.edu/update.do?artcenterkey=1828.
5. RE-BCC7Y Number plate recognition cameras. http://www.dsecctv.com/Prod lettura targhe.htm.
6. Traffic hackers hit red light. Available at http://www.wired.com/science/discoveries/news/2005/08/68507.
7. Improving the safety and environmental performance of vehicles. EUROPA-Press Releases (23rd May 2008).
8. ATEQ VT55. http://www.tpms-tool.com/tpms-toolateqvt55.php.
9. BALANIS, C., AND IOANNIDES, P. Introduction to smart antennas. Synthesis Lectures on Antennas 2, 1 (2007), 1–175.
10. BRIK, V., BANERJEE, S., GRUTESER, M., AND OH, S. Wireless device identification with radiometric signatures. In Proceedings of ACM International Conference on Mobile Computing and Networking (MobiCom) (2008), ACM, pp. 116–127.
11. BRZESKA, M., AND CHAKAM, B. RF modelling and characterization of a tyre pressure monitoring system. In EuCAP 2007: The Second European Conference on Antennas and Propagation (2007), pp. 1 – 6.
12. CHAN, H., PERRIG, A., AND SONG, D. Random key predistribution schemes for sensor networks. In SP’03: Proceedings of the 2003 IEEE Symposium on Security and Privacy (2003), IEEE Computer Society, p. 197.
13. COLE, G., AND SHERMAN, A. Lightweight materials for automotive applications. Materials Characterization 35 (1995), 3–9.
14. DENNING, T., MATUSZEK, C., KOSCHER, K., SMITH, J. R., AND KOHNO, T. A spotlight on security and privacy risks with future household robots: attacks and lessons. In Ubicomp’09: Proceedings of the 11th international conference on Ubiquitous computing (2009), pp. 105–114.
15. FERESIDIS, A., AND VARDAXOGLOU, J. High gain planar antenna using optimised partially reflective surfaces. In IEEE Proceedings on Microwaves, Antennas and Propagation (2001), vol. 148, pp. 345 – 350.
16. FREDRIKSSON, L., AND AB, K. Bluetooth in automotive applications. http://www.kvaser.com/can/info/files/bluetooth-inautomotive-appl.pdf.
17. GOVINDJEE, S. Firestone tire failure analysis, 2001.
18. GREENSTEIN, B., MCCOY, D., PANG, J., KOHNO, T., SESHAN, S., AND WETHERALL, D. Improving wireless privacy with an identifier-free link layer protocol. In Proceeding of Mobile systems, applications, and services (MobiSys) (2008), ACM, pp. 40–53.
19. GRUTESER, M., AND GRUNWALD, D. A methodological assessment of location privacy risks in wireless hotspot networks. In Security in Pervasive Computing, First International Conference (2003), pp. 10–24.
20. GRUTESER, M., AND GRUNWALD, D. Enhancing location privacy in wireless lan through disposable interface identifiers: a quantitative analysis. ACMMobile Networks and Applications (MONET) 10, 3 (2005), 315–325.
21. HALPERIN, D., HEYDT-BENJAMIN, T. S., RANSFORD, B., CLARK, S. S., DEFEND, B., MORGAN, W., FU, K., KOHNO, T., AND MAISEL, W. H. Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses. In Proceedings of IEEE Symposium on Security and Privacy (2008), IEEE Computer Society, pp. 129–142.
22. IEEE 802.11P. IEEE draft standard for information technology -telecommunications and information exchange between systems. http://www.ieee802.org/11/.
23. ITALY. http://aglobalworld.com/internationalcountries/Europe/Italy.php.
24. JIANG, T., WANG, H. J., AND HU, Y.-C. Preserving location privacy in wireless lans. In MobiSys’07: Proceedings of the 5th international conference on Mobile systems, applications and services (2007), ACM, pp. 246–257.
25. KEILTHY, L. Measuring ANPR System Performance. Parking Trend International (2008).
26. KOSCHER, K., CZESKIS, A., ROESNER, F., PATEL, S., KOHNO, T., CHECKOWAY, S., MCCOY, D., KANTOR, B., ANDERSON, D., SHACHAM, H., AND SAVAGE, S. Experimental security analysis of a modern automobile. In Proceedings of IEEE Symposium on Security and Privacy in Oakland (May 2010).
27. KOSCHER, K., JUELS, A., BRAJKOVIC, V., AND KOHNO, T. EPC RFID tag security weaknesses and defenses: passport cards, enhanced drivers licenses, and beyond. In Proceedings of the 16th ACM conference on Computer and communications security (2009), pp. 33–42.
28. LEE, C.-H., HWANG, M.-S., AND YANG, W.-P. Enhanced privacy and authentication for the global system for mobile communications. Wireless Networks 5, 4 (1999), 231–243.
29. LIEDTKE, F. Computer simulation of an automatic classification procedure for digitally modulated communication signals with unknown parameters. Signal Processing 6 (1984), 311–323.
30. MOLNAR, D., AND WAGNER, D. Privacy and security in library RFID: issues, practices, and architectures. In Proceedings of Computer and communications security (2004), ACM Press, pp. 210–219.
31. MURPHY, N. A short trip on the can bus. Embedded System Programming (2003).
32. NARTEN, T., DRAVES, R., AND KRISHNAN, S. RFC 4941 - privacy extensions for stateless address autoconfiguration in IPv6, Sept 2007.
33. NUSSER, R., AND PELZ, R. Bluetooth-based wireless connectivity in an automotive environment. Vehicular Technology Conference 4 (2000), 1935 – 1942.
34. OF TRANSPORTATION, B. Number of vehicles and vehicle classification, 2007.
35. OF TRANSPORTATION NATIONAL HIGHWAY, D., AND ADMINISTRATION, T. S. 49 cfr parts 571 and 585 federal motor vehicle safety standards; tire pressure monitoring systems; controls and displays; final rule. http://www.tireindustry.org/pdf/TPMS FinalRule v3.pdf.
36. PAPADIMITRATOS, P., BUTTYAN, L., HOLCZER, T., SCHOCH, E., FREUDIGER J., RAYA, M., MA, Z., KARGL, F., KUNG, A., AND HUBAUX, J.-P. Secure Vehicular Communication Systems: Design and Architecture. IEEE Communcations Magazine 46, 11 (November 2008), 100–109.
37. PERRIG, A., SZEWCZYK, R., WEN, V., CULLER, D., AND TYGAR, J. D. Spins: security protocols for sensor networks. In MobiCom’01: Proceedings of the 7th annual international conference on Mobile computing and networking (2001), ACM, pp. 189–199.
38. SAPONAS, T. S., LESTER, J., HARTUNG, C., AGAR-WAL, S., AND KOHNO, T. Devices that tell on you: privacy trends in consumer ubiquitous computing. In Proceedings of USENIX Security Symposium (2007), USENIX Association, pp. 1–16.
39. SONG, H., COLBURN, J., HSU, H., AND WIESE, R. Development of reduced order model for modeling performance of tire pressure monitoring system. In IEEE 64th Vehicular Technology Conference (2006), pp. 1 – 5.
40. VELUPILLAI, S., AND GUVENC, L. Tire pressure monitoring. IEEE Control Systems Magazine 27 (2007), 22–25.
41. WEIS, S. A., SARMA, S. E., RIVEST, R. L., AND ENGELS, D. W. Security and privacy aspects of low-cost radio frequency identification systems. In Security in Pervasive Computing (2004), vol. 2802 of Lecture Notes in Computer Science, pp. 201–212.
42. YEH, P., STARK, W., AND ZUMMO, S. Performance analysis of wireless networks with directional antennas. IEEE Transactions on Vehicular Technology 57, 5 (2008), 3187–3199.