Similar to wireless software updates for the smartphones, over-the-air (OTA) methods are used to update the software and firmware for the various electronic control units (ECUs) in the car. It is an efficient and convenient approach to update the software in the car and it will help customers save their money and time by reducing time to visit the service center to repair small bugs in the software. However, OTA updates open a new attack vector for hackers, who can use the OTA mechanism to steal OEM firmware, to reprogram ECUs, or to control the vehicle remotely. In this thesis, we perform a comprehensive security analysis for the current OTA mechanism to understand its associated threats. We also propose an approach to secure the original OTA software update method by adding a biometric iris scan and cryptographic hash function before updating the software and firmware over the air. With these security enhancements, vehicle owners can ensure that the car can be secure from unwanted and potentially malicious software updates. iv To my father Ajay Narayan Chawan, my mother Ashwini Ajay Chawan, my brother Aakash Ajay Chawan, my Uncle Shrikant Chavan and my Cousin Mahesh Gawade for their colossal love, care and determination to raise me to this level and higher in all odds. v I wish to express my sincere thanks to University of Toledo Information Technology Department's and my managers Teresa Hagedorn and Jeremy Santus for their support. I would like to thank all the members of TAG house, my family away from home who never made me miss my home back in India. I place on record, my sincere thank you to my best friends Janhavi Kondurkar, Shruti Patil and Payal Velhal, who always stood by me during my difficult times. And a big thank you to my mom Ashwini Chawan, dad Ajay Chawan, uncle Shrikant Chawan, my cousins Shrinit Chawan and Mahesh Gawade and my entire family who always believed in me and motivated me as I accomplished my dreams. This accomplishment would not have been possible without all the people mentioned above. Thank you.
scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.
hi@scite.ai
10624 S. Eastern Ave., Ste. A-614
Henderson, NV 89052, USA
Copyright © 2024 scite LLC. All rights reserved.
Made with 💙 for researchers
Part of the Research Solutions Family.