Automotive Cybersecurity: Foundations for Next-Generation Vehicles

Abstract

The automotive industry is experiencing a serious transformation due to a digitalisation process and the transition to the new paradigm of Mobility-as-a-Service. The next-generation vehicles are going to be very complex cyber-physical systems, whose design must be reinvented to fulfil the increasing demand of smart services, both for safety and entertainment purposes, causing the manufacturers' model to converge towards that of IT companies. Connected cars and autonomous driving are the preeminent factors that drive along this route, and they cause the necessity of a new design to address the emerging cybersecurity issues: the "old" automotive architecture relied on a single closed network, with no external communications; modern vehicles are going to be always connected indeed, which means the attack surface will be much more extended. The result is the need for a paradigm shift towards a secure-by-design approach.In this paper, we propose a systematisation of knowledge about the core cybersecurity aspects to consider when designing a modern car. The major focus is pointed on the in-vehicle network, including its requirements, the current most used protocols and their vulnerabilities. Moreover, starting from the attackers' goals and strategies, we outline the proposed solutions and the main projects towards secure architectures. In this way, we aim to provide the foundations for more targeted analyses about the security impact of autonomous driving and connected cars.

XANDAR: A holistic Cybersecurity Engineering Process for Safety-critical and Cyber-physical Systems

“…To secure the life cycle of a safety-critical and cyberphysical system, the security shall be built, baked into the system from the ground-up [21], [22] rather than an afterthought. To design such a secure-by-design system requires an engineering process that allow a capability to:…”

Security Risk Estimation and Management in Autonomous Driving Vehicles

“…Some key countermeasures at the perception layer are noise detection, rejection, and the use of multiple input sources [24,28]. At the network layer, countermeasures are encryption, special devices and user authentication techniques [25,27]. At the application layer, countermeasures include anti-malware software, firewalls, access control and user authentication.…”

Parameterization of the ABS electronic control unit for increasing the autonomous trucks’ active safety

“…Because an autonomous vehicle is a high-tech transportation mean, 63% of HNTB America THINKS surveyed are concerned about protecting the great amount of data they generate, both in terms of the confidentiality of the information they contain, and in terms of the ability to ensure the safe operation of these vehicles in general [4]. In this regard, to reduce the accidents' risk, research is being conducted in another direction -ensuring the cybersecurity of autonomous vehicles [21].…”