Security threats to automotive CAN networks-Practical examples and selected short-term countermeasures
Security threats to automotive CAN networks-Practical examples and selected short-term countermeasures
复制标题
DOI：
10.1016/j.ress.2010.06.026
复制
发表时间：
2011-01-01
影响因子：
8.1
通讯作者：
Dittmann, Jana
中科院分区：
文献类型：
--
作者：
Hoppe, Tobias;Kiltz, Stefan;Dittmann, Jana
汽车系统的 IT 安全是一个不断发展的研究领域。为了分析当前形势以及威胁的潜在增长趋势，我们对最新的汽车技术进行了多次实际测试。本文以基于 CAN 总线技术的汽车系统为重点，总结了对车窗升降控制系统、警示灯和安全气囊控制系统以及中央网关进行的四项选定测试的结果。本文通过使用已建立的 CERT 分类法对这四种攻击场景进行分类，并分析潜在的安全漏洞，特别是潜在的安全影响，对这些结果进行了补充。关于这些测试的结果，在本文中，我们进一步讨论了两种选定的对策，以解决我们测试中利用的基本弱点。这些是入侵检测（讨论三种示例性检测模式）和 IT 取证措施（提出基于取证模型的主动措施）的改编。本文讨论了之前介绍的四种攻击场景，涵盖了它们的功能和限制。虽然这些反应性方法是短期措施，可以添加到当今的汽车 IT 架构中，但短期概念也将很快引入，这些概念主要是预防性的，但需要进行重大重新设计。在对各自研究方法的简短概述下，我们讨论了它们的各自要求、潜力和限制。 (C) 2010 Elsevier Ltd. 保留所有权利。
The IT security of automotive systems is an evolving area of research. To analyse the current situation and the potentially growing tendency of arising threats we performed several practical tests on recent automotive technology. With a focus on automotive systems based on CAN bus technology, this article summarises the results of four selected tests performed on the control systems for the window lift, warning light and airbag control system as well as the central gateway. These results are supplemented in this article by a classification of these four attack scenarios using the established CERT taxonomy and an analysis of underlying security vulnerabilities, and especially, potential safety implications.With respect to the results of these tests, in this article we further discuss two selected countermeasures to address basic weaknesses exploited in our tests. These are adaptations of intrusion detection (discussing three exemplary detection patterns) and IT-forensic measures (proposing proactive measures based on a forensic model). This article discusses both looking at the four attack scenarios introduced before, covering their capabilities and restrictions. While these reactive approaches are short-term measures, which could already be added to today's automotive IT architecture, long-term concepts also are shortly introduced, which are mainly preventive but will require a major redesign. Beneath a short overview on respective research approaches, we discuss their individual requirements, potential and restrictions. (C) 2010 Elsevier Ltd. All rights reserved.