Uptane : Securing Software Updates for Automobiles
Uptane : Securing Software Updates for Automobiles
复制标题
Uptane：确保汽车软件更新安全
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Damon McCoy
中科院分区：
文献类型：
--
作者：
T. Karthik;Kuppusamy;Damon McCoy
汽车软件更新系统可以带来显著的好处，但是，如果不仔细实施，它们可能会导致严重的安全漏洞。以前用于保护软件更新的解决方案考虑标准攻击并部署广泛理解的安全机制，例如用于软件更新的数字签名和用于对软件更新进行签名的硬件安全模块（HSM）。然而，没有现有的解决方案考虑更高级的安全目标，例如针对存储库妥协的弹性，或对车辆更新机制的冻结攻击，或供应商站点的妥协。为PC世界开发的解决方案不适用于汽车，原因有二：首先，它们不能解决汽车行业特有的问题（例如，在车辆上有许多不同类型的计算机要更新），第二，它们不解决可能导致车辆故障（例如，中间人攻击，而不损害任何签名密钥）或可能导致车辆变得不安全的安全攻击。在本文中，我们提出了Uptane，第一个软件更新框架的汽车，计数器的全面阵列的安全攻击，是弹性的部分妥协。Uptane为最先进的软件更新框架TUF添加了战略功能，以解决汽车特定的漏洞和限制。Uptane灵活且易于采用，其设计细节是与美国汽车行业的主要利益相关者共同开发的。
Software update systems for automobiles can deliver significant benefits, but, if not implemented carefully, they could potentially incur serious security vulnerabilities. Previous solutions for securing software updates consider standard attacks and deploy widely understood security mechanisms, such as digital signatures for the software updates, and hardware security modules (HSM) to sign software updates. However, no existing solution considers more advanced security objectives, such as resilience against a repository compromise, or freeze attacks to the vehicle’s update mechanism, or a compromise at a supplier’s site. Solutions developed for the PC world do not generalize to automobiles for two reasons: first, they do not solve problems that are unique to the automotive industry (e.g., that there are many different types of computers to be updated on a vehicle), and second, they do not address security attacks that can cause a vehicle to fail (e.g. a man-in-themiddle attack without compromising any signing key) or that can cause a vehicle to become unsafe. In this paper, we present Uptane, the first software update framework for automobiles that counters a comprehensive array of security attacks, and is resilient to partial compromises. Uptane adds strategic features to the state-of-the-art software update framework, TUF, in order to address automotivespecific vulnerabilities and limitations. Uptane is flexible and easy to adopt, and its design details were developed together with the main automotive industry stakeholders in the USA.