Cyber Threats Facing Autonomous and Connected Vehicles: Future Challenges

Parkinson, Simon; Ward, Paul; Wilson, Kyle M.; Miller, J.

doi:10.1109/tits.2017.2665968

Cited by 371 publications

(182 citation statements)

References 44 publications

Supporting

Mentioning

178

Contrasting

Unclassified

Order By: Relevance

“…The increasing functionalities and network interoperability transition CPS from isolated control systems to more open interacting architectures, which enables various new services and applications such as remote code updates and vehicle-tovehicle communication. Meanwhile, this transition, however, introduces potential security vulnerabilities that are easily exploitable [1]- [3].…”

Section: Introductionmentioning

confidence: 99%

Cyber-Physical System Checkpointing and Recovery

Kong

Weimer

et al. 2018

2018 ACM/IEEE 9th International Conference on Cyber-Physical Systems (ICCPS)

View full text Add to dashboard Cite

Transitioning to more open architectures has been making Cyber-Physical Systems (CPS) vulnerable to malicious attacks that are beyond the conventional cyber attacks. This paper studies attack-resilience enhancement for a system under emerging attacks in the environment of the controller. An effective way to address this problem is to make system state estimation accurate enough for control regardless of the compromised components. This work follows this way and develops a procedure named CPS checkpointing and recovery, which leverages historical data to recover failed system states. Specially, we first propose a new concept of physical-state recovery. The essential operation is defined as rolling the system forward starting from a consistent historical system state. Second, we design a checkpointing protocol that defines how to record system states for the recovery. The protocol introduces a sliding window that accommodates attackdetection delay to improve the correctness of stored states. Third, we present a use case of CPS checkpointing and recovery that deals with compromised sensor measurements. At last, we evaluate our design through conducting simulator-based experiments and illustrating the use of our design with an unmanned vehicle case study. DisciplinesComputer Engineering | Computer Sciences Abstract-Transitioning to more open architectures has been making Cyber-Physical Systems (CPS) vulnerable to malicious attacks that are beyond the conventional cyber attacks. This paper studies attack-resilience enhancement for a system under emerging attacks in the environment of the controller. An effective way to address this problem is to make system state estimation accurate enough for control regardless of the compromised components. This work follows this way and develops a procedure named CPS checkpointing and recovery, which leverages historical data to recover failed system states. Specially, we first propose a new concept of physical-state recovery. The essential operation is defined as rolling the system forward starting from a consistent historical system state. Second, we design a checkpointing protocol that defines how to record system states for the recovery. The protocol introduces a sliding window that accommodates attack-detection delay to improve the correctness of stored states. Third, we present a use case of CPS checkpointing and recovery that deals with compromised sensor measurements. At last, we evaluate our design through conducting simulator-based experiments and illustrating the use of our design with an unmanned vehicle case study.

show abstract

Section: Introductionmentioning

confidence: 99%

Cyber-Physical System Checkpointing and Recovery

Kong

Weimer

et al. 2018

2018 ACM/IEEE 9th International Conference on Cyber-Physical Systems (ICCPS)

View full text Add to dashboard Cite

show abstract

“…While prior research [5], [6] identifies some V2X security vulnerabilities and recommends potential mitigation techniques, there is an absence of a comprehensive summary of security challenges, standardization activities and existing solutions. In this paper we investigate V2X security challenges and summarize existing solutions in a comprehensive manner.…”

Section: Methodology and Contributionsmentioning

confidence: 99%

Securing Vehicle-to-Everything (V2X) Communication Platforms

Hasan

Mohan

Shimizu

et al. 2020

IEEE Trans. Intell. Veh.

140

View full text Add to dashboard Cite

Modern vehicular wireless technology enables vehicles to exchange information at any time, from any place, to any network -forms the vehicle-to-everything (V2X) communication platforms. Despite benefits, V2X applications also face great challenges to security and privacy -a very valid concern since breaches are not uncommon in automotive communication networks and applications. In this survey, we provide an extensive overview of V2X ecosystem. We also review main security/privacy issues, current standardization activities and existing defense mechanisms proposed within the V2X domain. We then identified semantic gaps of existing security solutions and outline possible open issues.We also discuss possible open issues (Section VIII), summarize multiple industry/academic/government initiatives for securing V2X communications (Section IX-A) and compare our work with related surveys (Section IX-B). II. V2X PLATFORM : AN OVERVIEWThis section provides an overview of V2X communication interfaces (Section II-A) and discuss various network/communication models (Section II-B). A. Communication InterfacesThe internal architecture of a vehicle is interconnected with ECUs (electronic control units -embedded computing platform that monitor/control automotive systems) coupled with sensors and actuators. The communication between the vehicle and the outside world such as other vehicles or roadside units (RSUs) is performed via external interfaces (see Fig. 1). These vehicular external interfaces are attached to the telematics control unit (TCU) -also referred to as on-board unit (OBU) 1 -an ECU that provides wireless connectivity [7], [8]. A vehicle control unit coordinates with the OBU to collect and disseminate vehicular data [9]. The current standards for V2X communication are DSRC (dedicated short range communication) [10] in the United States, C-ITS (cooperative intelligent transport systems) [11] in Europe and ITS Connect [12] in Japan. Both DSRC and C-ITS operating in the 5.9 GHz ITS band while ITS Connect operating in 760 MHz band (refer to Section II-B1 for details). An alternative to DSRC/C-ITS is the next generation of cellular wireless mobile telecommunications technology (see Section II-B2). OBUs can also be equipped with interfaces for long-range communication. These long-range wireless channels can be classified as broadcast channels (signals can be broadcast to multiple vehicles without knowledge of the receiver's address) and addressable channels (where messages are sent to vehicles with specific addresses.) [13]. Examples of broadcast channels include the global navigation satellite system (GNSS), traffic message/satellite radio receivers, etc. Addressable channels are typically used for long-range voice/data transmissions and are intended to be used for cellular communications for mobile broadband [8].

show abstract

“…Cloud computing provides many benefits to individuals and organizations through offering highly available and efficient computing resources with an affordable price [4]. Many cloud services are available in current commercial solutions, but they are not suitable for latency, portability and location-sensitive applications, such as IoT, Wearable computing, Smart Grids, Connected Vehicles [5] and Software-Defined-Networks [6]. Latency depends on the speed of Internet connection, resource contention among guest virtual machines (VM) and has been shown to increase with distance [7].…”

Section: Introductionmentioning

confidence: 99%

Fog computing security: a review of current applications and security solutions

2017

Self Cite

View full text Add to dashboard Cite

Fog computing is a new paradigm that extends the Cloud platform model by providing computing resources on the edges of a network. It can be described as a cloud-like platform having similar data, computation, storage and application services, but is fundamentally different in that it is decentralized. In addition, Fog systems are capable of processing large amounts of data locally, operate on-premise, are fully portable, and can be installed on heterogeneous hardware. These features make the Fog platform highly suitable for time and location-sensitive applications. For example, Internet of Things (IoT) devices are required to quickly process a large amount of data. This wide range of functionality driven applications intensifies many security issues regarding data, virtualization, segregation, network, malware and monitoring. This paper surveys existing literature on Fog computing applications to identify common security gaps. Similar technologies like Edge computing, Cloudlets and Micro-data centres have also been included to provide a holistic review process. The majority of Fog applications are motivated by the desire for functionality and end-user requirements, while the security aspects are often ignored or considered as an afterthought. This paper also determines the impact of those security issues and possible solutions, providing future security-relevant directions to those responsible for designing, developing, and maintaining Fog systems.

show abstract

Cyber Threats Facing Autonomous and Connected Vehicles: Future Challenges

Cited by 371 publications

References 44 publications

Cyber-Physical System Checkpointing and Recovery

Cyber-Physical System Checkpointing and Recovery

Securing Vehicle-to-Everything (V2X) Communication Platforms

Fog computing security: a review of current applications and security solutions

Contact Info

Product

Resources

About