Commonalities in Vehicle Vulnerabilities
Commonalities in Vehicle Vulnerabilities
复制标题
车辆漏洞的共性
DOI：
--
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
Corey Thuen Senior Security Consultant IOActive
中科院分区：
文献类型：
--
作者：
Corey Thuen Senior Security Consultant IOActive
随着联网汽车在市场上变得司空见惯，车辆网络安全变得越来越重要。处于这一不断发展的安全研究领域的最前沿，IOActive 积累了真实世界的漏洞数据，说明了当今车辆面临的网络安全问题的一般问题和潜在解决方案。本文解释了测试方法的差异，并就测试互联车辆系统的最合适方法提出了建议。接下来是详细的调查结果，包括 IOActive 顾问在数千小时的测试过程中发现的漏洞的影响、可能性、总体风险和补救措施。该论文最后提出了“预防措施”的建议，以确保未来车辆系统更加安全。
With the Connected Car becoming commonplace in the market, vehicle cybersecurity grows more important by the year. At the forefront of this growing area of security research, IOActive has amassed real-world vulnerability data illustrating the general issues and potential solutions to the cybersecurity issues facing today’s vehicles. This paper explains the differences in testing methodologies, with recommendations on the most appropriate methods for testing connected vehicle systems. Detailed findings follow, including the impact, likelihood, overall risk, and remediation of vulnerabilities IOActive consultants have discovered over the course of thousands of testing hours. The paper concludes with a recommendation for an “ounce of prevention” that may ensure more secure vehicle systems in the future.