Threat and Countermeasures Analysis for WAVE Service Advertisement
Threat and Countermeasures Analysis for WAVE Service Advertisement
复制标题
WAVE服务广告的威胁与对策分析
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
Richard Roy
中科院分区：
文献类型：
--
作者：
William Whyte;J. Petit;Virendra Kumar;John Moring;Richard Roy
WAVE服务广告（WSA）是IEEE 1609系列标准的关键部分，该标准指定了将用于美国车辆到任何东西（V2X）通信的无线技术。尽管如此，它从来没有得到过彻底的安全分析，并且当前版本的标准中的安全机制是临时的，并且具有显著的管理开销，使得难以快速部署服务或准确理解在给定情况下需要采取什么通信安全方法。本文提供了一年多来对WSA进行的全面安全分析的总结结果。我们注意到在使用WSA时存在许多潜在的漏洞：WSA可以用来使实现不佳的接收器与系统基本隔离，它也可以用来触发许多不同的力量倍增器拒绝服务攻击。在考虑如何WSA可以被用来诱导“不适当的”行为，我们注意到，在合作智能交通系统（C-ITS）设置在美国还没有完整的定义“适当”的行为。最后，我们提出了如何保护WSA的建议，并确定了需要指定为定义“适当”行为的策略的一部分的元素。
The WAVE Service Advertisement (WSA) is a key part of the IEEE 1609 family of standards which specify the wireless technology that will be used for Vehicle-to-Anything (V2X) communications in the US. Despite this, it has never received a thorough security analysis, and the security mechanisms in the current version of the standards are ad hoc and have significant management overhead, making it difficult to deploy services quickly or to understand exactly what communications security approach needs to be taken in a given situation. This paper provides summary results of a comprehensive security analysis of the WSA carried out over a period of more than a year. We note numerous potential vulnerabilities in the use of the WSA: the WSA could be used to leave poorly-implemented receivers essentially isolated from the system, and it can also be used to trigger a number of different force-multiplier denial of service attacks. In considering how WSAs can be used to induce "improper" behavior, we note that in the Cooperative Intelligent Transportation Systems (C-ITS) setting in the US there is as yet no complete definition of "proper" behavior. We end by making recommendations for how WSAs may be secured and by identifying the elements that need to be specified as part of a policy that defines "proper" behavior.