CINNAMON: A Module for AUTOSAR Secure Onboard Communication

Bella, Giampaolo; Biondi, Pietro; Costantino, Gianpiero; Matteucci, Ilaria

doi:10.1109/edcc51268.2020.00026

Cited by 16 publications

(6 citation statements)

References 16 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Additionally, the freshness value can prevent replay attacks. However, SecOC cannot guarantee the confidentiality of data, so researchers developed CINNAMON (Confidential, INtegral aNd Authentic on board coMunicatiON), which extended the SecOC module to ensure the confidentiality of transmitted data [ 68 ]. It is necessary to know the corresponding algorithms for testing cryptographic and verification functions.…”

Section: Automotive Cybersecurity Testing Methodsmentioning

confidence: 99%

Cybersecurity Testing for Automotive Domain: A Survey

Luo

Zhang

Yang

et al. 2022

Sensors

View full text Add to dashboard Cite

Modern vehicles are more complex and interconnected than ever before, which also means that attack surfaces for vehicles have increased significantly. Malicious cyberattacks will not only exploit personal privacy and property, but also affect the functional safety of electrical/electronic (E/E) safety-critical systems by controlling the driving functionality, which is life-threatening. Therefore, it is necessary to conduct cybersecurity testing on vehicles to reveal and address relevant security threats and vulnerabilities. Cybersecurity standards and regulations issued in recent years, such as ISO/SAE 21434 and UNECE WP.29 regulations (R155 and R156), also emphasize the indispensability of cybersecurity verification and validation in the development lifecycle but lack specific technical details. Thus, this paper conducts a systematic and comprehensive review of the research and practice in the field of automotive cybersecurity testing, which can provide reference and advice for automotive security researchers and testers. We classify and discuss the security testing methods and testbeds in automotive engineering. Furthermore, we identify gaps and limitations in existing research and point out future challenges.

show abstract

Section: Automotive Cybersecurity Testing Methodsmentioning

confidence: 99%

Cybersecurity Testing for Automotive Domain: A Survey

Luo

Zhang

Yang

et al. 2022

Sensors

View full text Add to dashboard Cite

show abstract

“…Intra-vehicular communication must be protected using both message encryption (for confidentiality) and cryptographic hashing (for authentication and integrity). The CIA triad might be achieved by a single software module [48,49]. Unfortunately, cryptographic key management is not easily applicable on a large scale in the automotive field.…”

Section: Can Busmentioning

confidence: 99%

A Double Assessment of Privacy Risks Aboard Top-Selling Cars

2023

Self Cite

View full text Add to dashboard Cite

The advanced and personalised experience that modern cars offer makes them more and more data-hungry. For example, the cabin preferences of the possible drivers must be recorded and associated to some identity, while such data could be exploited to deduce sensitive information about the driver’s health. Therefore, drivers’ privacy must be taken seriously, requiring a dedicated risk assessment framework, as presented in this paper through a double assessment combining the asset-oriented ISO approach with the threat-oriented STRIDE approach. The framework is tailored to the level of specific car brand and demonstrated on the ten top-selling brands as well as, due to its innovative character, Tesla. The two approaches yield different, but complementary findings, demonstrating the additional insights gained through their parallel adoption.

show abstract

“…With the advent of remote connectivity, these systems transitioned from being isolated from outside communication to being interconnected with different communication technologies. The increasing adoption of novel Cooperative Intelligent Transport Systems (C-ITS) paved the way to the development of novel communication standards designed to meet the strict requirements of modern vehicles, targeting both safety and security of the communication [13], [14].…”

Section: Related Workmentioning

confidence: 99%

Exploring the consequences of cyber attacks on Powertrain Cyber Physical Systems

Stabili¹,

Romagnoli²,

Marchetti³

et al. 2022

Preprint

View full text Add to dashboard Cite

This paper proposes a novel approach for the study of cyber-attacks against the powertrain of a generic vehicle. The proposed model is composed by a a generic Internal Combustion engine and a speed controller, that communicate through a Controller Area Network (CAN) bus. We consider a threat model composed by three representative attack scenarios designed to modify the output of the model, thus affecting the rotational speed of the engine. Two attack scenarios target both vehicle sensor systems and CAN communication, while one attack scenario only requires injection of CAN messages. To the best of our knowledge, this is the first attempt of modeling the consequences of realistic cyber attacks against a modern vehicle.

show abstract

CINNAMON: A Module for AUTOSAR Secure Onboard Communication

Cited by 16 publications

References 16 publications

Cybersecurity Testing for Automotive Domain: A Survey

Cybersecurity Testing for Automotive Domain: A Survey

A Double Assessment of Privacy Risks Aboard Top-Selling Cars

Exploring the consequences of cyber attacks on Powertrain Cyber Physical Systems

Contact Info

Product

Resources

About