Context-Aware Security for Vehicles and Fleets: A Survey

Abstract

Vehicles are becoming increasingly intelligent and connected. Interfaces for communication with the vehicle, such as WiFi and 5G, enable seamless integration into the user's life, but also cyber attacks on the vehicle. Therefore, research is working on in-vehicle countermeasures such as authentication, access controls, or intrusion detection. Recently, legal regulations have also become effective that require automobile manufacturers to set up a monitoring system for fleet-wide security analysis. The growing amount of software, networking, and the automation of driving create new challenges for security. Context-awareness, situational understanding, adaptive security, and threat intelligence are necessary to cope with these everincreasing risks. In-vehicle security should be adaptive to secure the car in an infinite number of (driving) situations. For fleet-wide analysis and alert triage, knowledge and understanding of the circumstances are required. Context-awareness, nonetheless, has been sparsely considered in the field of vehicle security. This work aims to be a precursor to context-aware, adaptive and intelligent security for vehicles and fleets. To this end, we provide a comprehensive literature review that analyzes the vehicular as well as related domains. Our survey is mainly characterized by the detailed analysis of the context information that is relevant for vehicle security in the future.

Intrusion Detection in the Automotive Domain: A Comprehensive Review

“…Firewalls should regulate inbound and outbound traffic according to pre-determined rules. Grimm, Stang, and Sax [107] proposed a context-aware firewall. Such a firewall would track the driving conditions or "context" of the vehicle to determine if communication from a given ECU is appropriate.…”

“…The concept of context extends beyond IDSs and IPSs-it can be configured into firewall rules or access control system attributes as well. For example, a firewall would disallow communication from the parking assist module when the context is "high speed" [107].…”

Trust in Vehicles: Toward Context-Aware Trust and Attack Resistance for the Internet of Vehicles

“…Context can be defined as the knowledge that can prove useful in determining the circumstances of a target entity. The said entity can be an individual, a location, or an object (e.g., a vehicle) that has specific/precise relevance to the interaction among an end-user and an application, in addition to the enduser and the application [18]. Similarly, context-aware security is defined as a collection of context-specific supplementary information having relevance to the security practices concerning a certain task which aids in enhancing the security-related decision making [19], [20].…”

Considering PKI safety impact on network performance during V2X-based AD/ADAS function development processes

“…The aim of present research is to investigate the safety impact of PKI authentication process on network performance to improve the efficiency and safety of V2X-based (Vehicle-to-everything) AD (Automated Driving) / ADAS (Advanced Driver Assistance System) function's development processes [1] [2]. The future transportation systems will be much safer due to V2X communication technology [3] [4], because Intelligent Transportation System (ITS) users will be able to receive awareness messages, reasonably earlier than in the case of a classical perception processes (human perception).…”