An Overview of Automotive Service-Oriented Architectures and Implications for Security Countermeasures

Rumez, Marcel; Grimm, Daniel; Kriesten, Reiner; Sax, Eric

doi:10.1109/access.2020.3043070

Cited by 62 publications

(32 citation statements)

References 44 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…4) Software-Defined Networking: Flexible and dynamic security solutions will be beneficial to cope with the growing dynamics of the IVN [49]. Software-defined security elements can be easily updated and adapted to the situation at hand [14].…”

Section: In-vehicle Network Securitymentioning

confidence: 99%

Secure Time-Sensitive Software-Defined Networking in Vehicles

Häckel,

Meyer,

Korf

et al. 2022

Preprint

View full text Add to dashboard Cite

Current designs of future In-Vehicle Networks (IVN) prepare for switched Ethernet backbones, which can host advanced LAN technologies such as IEEE Time-Sensitive Networking (TSN) and Software-Defined Networking (SDN). In this work, we present an integrated Time-Sensitive Software-Defined Networking (TSSDN) architecture that simultaneously enables control of synchronous and asynchronous real-time and besteffort traffic for all IVN traffic classes using a central SDN controller. We validate that the control overhead of SDN can be added without a delay penalty for TSN traffic, provided protocols are properly mapped. Based on our TSSDN concept, we demonstrate adaptable and reliable network security mechanisms for in-vehicle communication. We systematically investigate different strategies for integrating in-vehicle control flows with switched Ether-networks and analyze their security implications for a software-defined IVN. We discuss embeddings of control flow identifiers on different layers, covering a range from a fully exposed mapping to deep encapsulations. We experimentally evaluate these strategies in a production vehicle which we map to a modern Ethernet topology. Our findings indicate that visibility of automotive control flows on lower network layers is essential for providing isolation and access control throughout the network infrastructure. Such a TSSDN backbone can establish and survey trust zones within the IVN and reduce the attack surface of connected cars in various attack scenarios.

show abstract

Section: In-vehicle Network Securitymentioning

confidence: 99%

Secure Time-Sensitive Software-Defined Networking in Vehicles

Häckel,

Meyer,

Korf

et al. 2022

Preprint

View full text Add to dashboard Cite

show abstract

“…spoofing, replay, fuzzing, and denial-of-service attacks [38] as CAN does not bring inherent security features. Newer technologies such as Ethernet and service-oriented software architecture pose new risks to vehicle security [20], [39], [40]. Furthermore, with standardized hardware, software, or operating systems (e.g., AUTOSAR, Linux-based systems), the potential for attacks to affect diverse vehicles is exceptionally high.…”

Section: B Threats and Attack Impactsmentioning

confidence: 99%

“…Depending on the asset type, typically different security measures are used. For more detail on the specific solutions please refer to the literature [15], [20], [40], [48]- [50].…”

Section: Defense Mechanismsmentioning

confidence: 99%

Context-Aware Security for Vehicles and Fleets: A Survey

2021

Self Cite

View full text Add to dashboard Cite

Vehicles are becoming increasingly intelligent and connected. Interfaces for communication with the vehicle, such as WiFi and 5G, enable seamless integration into the user's life, but also cyber attacks on the vehicle. Therefore, research is working on in-vehicle countermeasures such as authentication, access controls, or intrusion detection. Recently, legal regulations have also become effective that require automobile manufacturers to set up a monitoring system for fleet-wide security analysis. The growing amount of software, networking, and the automation of driving create new challenges for security. Context-awareness, situational understanding, adaptive security, and threat intelligence are necessary to cope with these everincreasing risks. In-vehicle security should be adaptive to secure the car in an infinite number of (driving) situations. For fleet-wide analysis and alert triage, knowledge and understanding of the circumstances are required. Context-awareness, nonetheless, has been sparsely considered in the field of vehicle security. This work aims to be a precursor to context-aware, adaptive and intelligent security for vehicles and fleets. To this end, we provide a comprehensive literature review that analyzes the vehicular as well as related domains. Our survey is mainly characterized by the detailed analysis of the context information that is relevant for vehicle security in the future.

show abstract

“…There is a strong need to enhance interoperability and automation among all the new and future software based features and tools used in vehicles [12]. Furthermore, the new features require a high level of security [5,37].…”

Section: Service Interoperability and Automation In Industrial Vehicle Applicationsmentioning

confidence: 99%

Service Orchestration for Object Detection on Edge and Cloud in Dependable Industrial Vehicles

Pettinen¹,

Hästbacka

2021

JMM

View full text Add to dashboard Cite

Industrial applications, including autonomous systems and vehicles, rely on processing data on multiple physical devices. The composition of functionality across heterogeneous computing infrastructure is challenging, and will likely get even more challenging in the future as software in vehicles is updated to introduce new features and ensure the safety. New soft real-time use cases emerge and in such cases the model of offloading processing from a limited or malfunctioning device is a viable solution. This study examines orchestration of services across edge and cloud for an industrial vehicle application use case involving image based object detection using machine learning (ML) based models. First, service orchestration requirements are defined taking into account the dependable nature of industrial vehicle applications. Second, an implementation based on Arrowhead framework is presented and evaluated. The open Arrowhead framework offers means for dynamic service discovery, authorization and late binding of computational units. The feasibility of object detection as a service and the suitability of Arrowhead framework to support such orchestrations across edge and cloud is assessed.

show abstract

An Overview of Automotive Service-Oriented Architectures and Implications for Security Countermeasures

Cited by 62 publications

References 44 publications

Secure Time-Sensitive Software-Defined Networking in Vehicles

Secure Time-Sensitive Software-Defined Networking in Vehicles

Context-Aware Security for Vehicles and Fleets: A Survey

Service Orchestration for Object Detection on Edge and Cloud in Dependable Industrial Vehicles

Contact Info

Product

Resources

About