I Know Where You Parked Last Summer : Automated Reverse Engineering and Privacy Analysis of Modern Cars
I Know Where You Parked Last Summer : Automated Reverse Engineering and Privacy Analysis of Modern Cars
复制标题
我知道你去年夏天把车停在哪里：现代汽车的自动逆向工程和隐私分析
DOI：
--
复制
发表时间：
2020
期刊：
影响因子：
--
通讯作者：
S. Nürnberger
中科院分区：
文献类型：
--
作者：
Daniel Frassinelli;Sohyeon Park;S. Nürnberger
如今，汽车配备了数百个传感器和数十台处理数据的计算机。不幸的是，由于汽车行业的高度机密性，没有官方或客观的信息来源来说明他们的车辆收集了哪些数据。坊间证据表明，原始设备制造商收集了大量关于其驾驶员的个人数据，当他们在法庭上被要求时，他们突然透露了这些数据。在本文中，我们提出了我们的工具AutoCAN隐私和安全分析的汽车，揭示了什么数据汽车收集利用到-车辆网络和提取数据的时间序列，并通过建立基于物理定律的关系来自动理解它们。这些算法的工作原理与品牌、型号或使用的协议无关。我们的研究结果表明，汽车制造商跟踪GPS位置，乘客人数，他们的体重，门，灯和AC的使用统计数据。我们还发现，原始设备制造商嵌入了远程禁用汽车或在驾驶员超速时发出警报的功能。
Nowadays, cars are equipped with hundreds of sensors and dozens of computers that process data. Unfortunately, due to the very secret nature of the automotive industry, there is no official nor objective source of information as to what data exactly their vehicles collect. Anecdotal evidence suggests that OEMs are collecting huge amounts of personal data about their drivers, which they suddenly reveal when requested in court.In this paper, we present our tool AutoCAN for privacy and security analysis of cars that reveals what data cars collect by tapping into in-vehicle networks and extracting time series of data and automatically making sense of them by establishing relationships based on laws of physics. These algorithms work irrespective of make, model or used protocols. Our results show that car makers track the GPS position, the number of occupants, their weight, usage statistics of doors, lights, and AC. We also reveal that OEMs embed functions to remotely disable the car or get an alert when the driver is speeding.