DocumentCode :
59788
Title :
A Practical Wireless Attack on the Connected Car and Security Protocol for In-Vehicle CAN
Author :
Woo, Samuel ; Hyo Jin Jo ; Dong Hoon Lee
Author_Institution :
Center for Inf. Security, Korea Univ., Seoul, South Korea
Volume :
16
Issue :
2
fYear :
2015
fDate :
Apr-15
Firstpage :
993
Lastpage :
1006
Abstract :
Vehicle-IT convergence technology is a rapidly rising paradigm of modern vehicles, in which an electronic control unit (ECU) is used to control the vehicle electrical systems, and the controller area network (CAN), an in-vehicle network, is commonly used to construct an efficient network of ECUs. Unfortunately, security issues have not been treated properly in CAN, although CAN control messages could be life-critical. With the appearance of the connected car environment, in-vehicle networks (e.g., CAN) are now connected to external networks (e.g., 3G/4G mobile networks), enabling an adversary to perform a long-range wireless attack using CAN vulnerabilities. In this paper we show that a long-range wireless attack is physically possible using a real vehicle and malicious smartphone application in a connected car environment. We also propose a security protocol for CAN as a countermeasure designed in accordance with current CAN specifications. We evaluate the feasibility of the proposed security protocol using CANoe software and a DSP-F28335 microcontroller. Our results show that the proposed security protocol is more efficient than existing security protocols with respect to authentication delay and communication load.
Keywords :
automobiles; controller area networks; cryptographic protocols; message authentication; microcontrollers; on-board communications; smart phones; traffic engineering computing; CANoe software; DSP-F28335 microcontroller; ECU; authentication delay; communication load; connected car environment; controller area network; electronic control unit; in-vehicle CAN; security protocol; smartphone application; vehicle electrical system control; vehicle-IT convergence technology; wireless attack; Automotive engineering; Communication system security; Protocols; Security; Servers; Vehicles; Wireless communication; Connected car; controller area network (CAN); in-vehicle network security; key management;
fLanguage :
English
Journal_Title :
Intelligent Transportation Systems, IEEE Transactions on
Publisher :
ieee
ISSN :
1524-9050
Type :
jour
DOI :
10.1109/TITS.2014.2351612
Filename :
6894181
Link To Document :
بازگشت