Green Lights Forever: Analyzing the security of traffic infrastructure

8th USENIX Workshop on Offensive Technologies, WOOT 2014

Volumn , Issue , 2014, Pages

  Ghena, Branden ^a   Beyer, William ^a   Hillaker, Allen ^a   Pevarnek, Jonathan ^a   Alex Halderman, J ^a  

^a UNIVERSITY OF MICHIGAN   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SAFETY ENGINEERING; TRAFFIC SIGNALS;

CONTROL TRAFFIC; EMBEDDED SYSTEMS SECURITIES; EXISTING SYSTEMS; GREEN LIGHT; SECURITY FLAWS; SYSTEMIC FAILURE; TRAFFIC INFRASTRUCTURE;

EMBEDDED SYSTEMS;

EID: 85084160169     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (38)

1. R. Anderson and S. Fuloria. Who controls the off switch? In IEEE International Conference on Smart Grid Communications (SmartGridComm), pages 96–101, 2010.
2. Boston Transportation Department. The benefits of retiming/rephasing traffic signals in the Back Bay, 2010. www.cityofboston.gov/images_documents/ The%20Benefits%20of%20Traffic%20Signal% 20Retiming%20Report_tcm3-18554.pdf.
3. C. Cerrudo. Hacking US (and UK, Australia, France, etc.) traffic control systems, Apr. 2014. blog.ioactive.com/ 2014/04/hacking-us-and-uk-australia-france-etc.html.
4. S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham, S. Savage, K. Koscher, A. Czeskis, F. Roesner, and T. Kohno. Comprehensive experimental analyses of automotive attack surfaces. In USENIX Security Symposium, 2011.
5. A. Cui and S. J. Stolfo. A quantitative analysis of the insecurity of embedded network devices: Results of a wide-area scan. In Proceedings of the 26th Annual Computer Security Applications Conference, pages 97–106. ACM, 2010.
6. Department of Homeland Security. National infrastructure protection plan, 2013. www.dhs.gov/sites/default/files/publications/NIPP%202013_Partnering% 20for%20Critical%20Infrastructure%20Security% 20and%20Resilience_508_0.pdf.
7. D. DeVoe and R. W. Wall. A distributed smart signal architecture for traffic signal controls. In IEEE International Symposium on Industrial Electronics (ISIE), pages 2060–2065, 2008.
8. M. M. Dobersek. An Operational Comparison of Pre-Timed, Semi-Actuated, and Fully Actuated Interconnected Traffic Control Signal Systems. PhD thesis, Marquette University, Milwaukee, Wisconsion, Dec. 1998.
9. T. Elhabian, B. Zhang, and D. Shao. Fast de-hopping and frequency hopping pattern (FHP) estimation for DS/FHSS using neural networks. In Advances in Neural Networks-ISNN 2004, pages 248–253. Springer, 2004.
10. ENCOM Wireless Data Solutions. Success stories. www.encomwireless.com/about-encom-wireless/ success-stories.
11. A. J. Feldman, J. A. Halderman, and E. W. Felten. Security analysis of the Diebold AccuVote-TS voting machine. In Proceedings of the USENIX Workshop on Accurate Electronic Voting Technology, 2007.
12. T. Goodspeed. Reversing the Econolite ASC/3 traffic light controller. In ToorCon Seattle, 2008.
13. D. Halperin, T. S. Heydt-Benjamin, B. Ransford, S. S. Clark, B. Defend, W. Morgan, K. Fu, T. Kohno, and W. H. Maisel. Pacemakers and implantable cardiac defibrillators: Software radio attacks and zero-power defenses. In IEEE Symposium on Security and Privacy (SP), pages 129–142. IEEE, 2008.
14. R. Havelt. Yes it is too Wi-Fi, and no its not inherently secure. Black Hat Europe, Mar. 2009.
15. ICS-CERT. Vulnerability note VU#362332: Wind River Systems VxWorks debug service enabled by default, 2010. www.kb.cert.org/vuls/id/362332.
16. ICS-CERT. Project shine. ICS-CERT Newsletter Monthly Monitor, October-December, 2012.
17. Institute of Transportation Engineers. Detection trends, 2003. ite.org/standards/SignalSurvey.xls.
18. Institute of Transportation Engineers. Results from the traffic signal systems requirements survey. www.ite.org/standards/surveyresults072003.pdf, July 2003.
19. T. Kohno, A. Stubblefield, A. D. Rubin, and D. S. Wallach. Analysis of an electronic voting system. In Proceedings of the 2004 IEEE Symposium on Security and Privacy, pages 27–40. IEEE, 2004.
20. K. Koscher, A. Czeskis, F. Roesner, S. Patel, T. Kohno, S. Checkoway, D. McCoy, B. Kantor, D. Anderson, H. Shacham, et al. Experimental security analysis of a modern automobile. In 2010 IEEE Symposium on Security and Privacy (SP), pages 447–462, 2010.
21. C. Li, A. Raghunathan, and N. K. Jha. Hijacking an insulin pump: Security attacks and defenses for a diabetes therapy system. In 13th IEEE International Conference on e-Health Networking Applications and Services (Healthcom), pages 150–156, 2011.
22. J. Liu, Y. Xiao, S. Li, W. Liang, and C. Chen. Cyber security and privacy issues in smart grids. Communications Surveys & Tutorials, 14(4):981–997, 2012.
23. C. Miller and C. Valasek. Adventures in automotive networks and control units, 2013. illmatics.com/car_hacking.pdf.
24. Minnesota Department of Transportation. Traffic signals 101 - controller operations, Jan. 2014. www.dot.state.mn.us/trafficeng/publ/signals101/2014/06_Controller_Ops.pdf.
25. K. Mowery, E. Wustrow, T. Wypych, C. Singleton, C. Comfort, E. Rescorla, S. Checkoway, J. A. Halderman, and H. Shacham. Security analysis of a full-body scanner. In 23rd USENIX Security Symposium (USENIX Security 14), Aug. 2014.
26. National Highway Traffic Safety Administration. U.S. Department of Transportation announces decision to move forward with vehicle-to-vehicle communication technology for light vehicles, Feb. 2014. www.nhtsa.gov/About+NHTSA/Press+Releases/2014/ USDOT+to+Move+Forward+with+Vehicle-to-Vehicle+ Communication+Technology+for+Light+Vehicles.
27. National Transportation Communications for ITS Protocol. 1202 - NTCIP object definitions for ASC, 2007. www.ntcip.org/library/standards/default.asp?documents=yes&qreport=no&standard=1202.
28. Office of the City Auditor - Austin, Texas. Status report: Performance audit of traffic signal synchronization and security, Feb. 2011. www.austintexas.gov/sites/default/files/files/Auditor/au11109m.pdf.
29. Office of the City Auditor - Austin, Texas. Traffic signal security audit, Mar. 2011. www.austintexas.gov/sites/default/files/files/Auditor/au11109.pdf.
30. R. Sen and B. Raman. Intelligent transport systems for Indian cities. In 6th USENIX/ACM Workshop on Networked Systems for Developing Regions, 2012.
31. Shodan. SHODAN - computer search engine. www.shodanhq.com/.
32. Siemens. Traffic control via the Siemens private cloud, Mar. 2014. www.siemens.com/press/pool/de/events/2014/infrastructure-cities/2014-03-intertraffic/ background-private-cloud-e.pdf.
33. Tennessee Department of Transportation. TDOT smartway. www.tdot.state.tn.us/tdotsmartway/.
34. University of Michigan Transportation Research Institute. What is the safety pilot model deployment?, Aug. 2012. safetypilot.umtri.umich.edu/index.php.
35. E. Vorakitolan, J. P. Havlicek, M. Atiquzzaman, and R. D. Barnes. Exploiting trunked radio to support ITS network expansion and redundancy. In 22nd IEEE International Symposium on Personal Indoor and Mobile Radio Communications (PIMRC), pages 761–766, 2011.
36. B. W. Yarger. Fully actuated vs. semi-actuated traffic signal systems, 1993. www.yargerengineering.com/fully_vs_semi-actuated.pdf.
37. D. Zeng, S. S. Chawathe, H. Huang, and F. Y. Wang. Protecting transportation infrastructure. Intelligent Systems, IEEE, 22(5):8–11, 2007.
38. K. Zetter. Hackers can mess with traffic lights to jam roads and reroute cars. Wired, Apr. 2014. www.wired.com/2014/04/traffic-lights-hacking/.