Security issues in controller area networks in automobiles

Buttigieg, Robert; Farrugia, Mario; Meli, Clyde

doi:10.1109/sta.2017.8314877

Cited by 49 publications

(17 citation statements)

References 4 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It was used to connect a few ECUs and not accessible to the end user. However, the automobile industry has changed drastically and now there are dozens of ECUs connected and it is required by law that bus should be accessible for the diagnostic purpose [3].…”

Section: B Security Shortcomings Of Can Protocolmentioning

confidence: 99%

A Survey on CAN Bus Protocol: Attacks, Challenges, and Potential Solutions

Bozdal

Samie

Jennions

2018

2018 International Conference on Computing, Electronics &Amp; Communications Engineering (iCCECE)

View full text Add to dashboard Cite

The vehicles are equipped with electronic control units that control their functions. These units communicate with each other via in-vehicle communication protocols like CAN bus. Although CAN is the most common in-vehicle communication protocol, the lack of encryption and authentication causes series security shortcomings. There are many attacks reported and the number is estimated to increase with the rising connectivity of the cars. In this paper, we present CAN protocol and analyze its security vulnerabilities. Then we survey the implemented attacks and proposed solutions in the literature.

show abstract

Section: B Security Shortcomings Of Can Protocolmentioning

confidence: 99%

A Survey on CAN Bus Protocol: Attacks, Challenges, and Potential Solutions

Bozdal

Samie

Jennions

2018

2018 International Conference on Computing, Electronics &Amp; Communications Engineering (iCCECE)

View full text Add to dashboard Cite

show abstract

“…Considering the basic CAN protocol described above, CAN contains no security features. The resulting vulnerabilities are described in detail by Buttigieg et al (2017) and Hartzell and Stubel (2017).…”

Section: Controller Area Network (Can)mentioning

confidence: 99%

Static Analysis of Controller Area Network Communication for Attack Detection

2021

View full text Add to dashboard Cite

The vulnerability of modern cars increases due to their multiple connections to the environment, which offers the possibility of remote attacks in the worst case with fatal outcome. The controller area network (CAN) is still highly used and includes no security features, so intrusion detection systems are a promising approach to secure the communication. The proposed method monitors the CAN communication and uses static checks to differentiate between normal and attack traffic. This enables reliable and comprehensible attack detection and achieves a detection rate up to 100%, generating zero false alarms for the investigated data sets.

show abstract

“…Unfortunately, security issues were ignored during designing because people took it for granted that CANs would be a closed system in automobiles [5], [6]. Security issues with CANs relate mainly to authentication and encryption at the present time.…”

Section: Related Workmentioning

confidence: 99%

“…1) is used for prioritizing messages on the bus and avoids collisions by design. However, security issues were ignored during designing since people took it for granted that a vehicle would be a closed system [5], [6]. Unfortunately, messages are broadcast on the CAN bus, and external devices, such as onboard diagnostics readers, are able to access the CAN bus in modern vehicles.…”

Section: Introductionmentioning

confidence: 99%

Fast Stream Cipher based Chaos Neural Network for Data Security in CAN Bus

Liu¹,

Murakami²,

Kawamura³

et al. 2020

Adv. sci. technol. eng. syst. j.

View full text Add to dashboard Cite

Vehicle systems are controlled by embedded electronic devices called electronic control units (ECUs). These ECUs are connected together with network protocols. The Controller Area Network (CAN) protocol is widely implemented due to its high fault tolerance. However, the CAN is a serial broadcast bus, and it has no protection against security threats. In this paper, we propose a fast stream cipher based on a chaos neural network (CNN) that is able to generate pseudo-random numbers at a high speed, faster than that of the Advanced Encryption Standard, to protect ECUs on the CAN bus by encrypting CAN messages. We discuss the chaotic orbit of the CNN and statistical properties of pseudo-random numbers from the CNN. For a stream cipher, it is very important to share the symmetric key. We designed a symmetric key that is shared with ID-based encryption without the need to use digital certificates. We evaluated our method's performance with embedded boards and showed that the stream cipher is efficient for the embedded software of the ECU. Further, it does not need a hardware security module to accelerate the encryption.

show abstract

Security issues in controller area networks in automobiles

Cited by 49 publications

References 4 publications

A Survey on CAN Bus Protocol: Attacks, Challenges, and Potential Solutions

A Survey on CAN Bus Protocol: Attacks, Challenges, and Potential Solutions

Static Analysis of Controller Area Network Communication for Attack Detection

Fast Stream Cipher based Chaos Neural Network for Data Security in CAN Bus

Contact Info

Product

Resources

About