Survey on security threats and protection mechanisms in embedded automotive networks

Ivan Studnia (1) , Vincent Nicomette (2) , Eric Alata (2) , Yves Deswarte (2) , Mohamed Kaâniche (2) , Youssef Laarouchi (1)

1 Technocentre Renault [Guyancourt]
2 LAAS-TSF - Équipe Tolérance aux fautes et Sûreté de Fonctionnement informatique

—Embedded electronic components, so-called ECU (Electronic Controls Units), are nowadays a prominent part of a car's architecture. These ECUs, monitoring and controlling the different subsystems of a car, are interconnected through several gateways and compose the global internal network of the car. Moreover, modern cars are now able to communicate with other devices through wired or wireless interfaces such as USB, Bluetooth, WiFi or even 3G. Such interfaces may expose the internal network to the outside world and can be seen as entry points for cyber attacks. In this paper, we present a survey on security threats and protection mechanisms in embedded automotive networks. After introducing the different protocols being used in the embedded networks of current vehicles, we then analyze the potential threats targeting these networks and describe how the attackers' opportunities can be enhanced by the new communication abilities of modern cars. Finally, we present the security solutions currently being devised to address these problems.

Mots clés: automotive; embedded networks; CAN; security

Domaines: Performance et fiabilité [cs.PF]; Informatique [cs]; Cryptographie et sécurité [cs.CR]; Systèmes embarqués

Ivan Studnia, Vincent Nicomette, Eric Alata, Yves Deswarte, Mohamed Kaâniche, et al.. Survey on security threats and protection mechanisms in embedded automotive networks. 2nd Workshop on Open Resilient Human-aware Cyber-Physical Systems (WORCS-2013), co-located with The 43rd Annual IEEE/IFIP International Conference on Dependable Systems and Networks (DSN-2013), Jun 2013, Budapest, Hungary. ⟨10.1109/DSNW.2013.6615528⟩. ⟨hal-01176042⟩