Cyber security attacks to modern vehicular systems. (October 2017)

• Record Type: Journal Article
• Authors: Pan, L.; Zheng, X.; Chen, H.X.; Luan, T.; Bootwala, H.; Batten, L.
• Is Part Of: Journal of information security and applications. Volume 36(2017)
• Page Start: 90
• Page End: 100
• Publication Date: 2017-10
• Subjects: CAN bus -- Security -- Vehicle systems -- Security attacks -- Smartphone; Computer security -- Periodicals; Information technology -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.jisa.2017.08.005
• Languages: English
• ISSNs: 2214-2126

Abstract

Abstract: Security is a fundamental concern in modern vehicular systems. The advancement in modern vehicular systems provides many benefits such as reducing traffic congestion and improving safety and fuel economy via vehicular networks. However, many vehicular experts in industry take it for granted that Controller Area Network (CAN) bus being the most important part of a vehicle is secured and cannot be easily hacked; furthermore, cyber security experts have limited exposure to CAN bus. This paper provides in-depth explanation of CAN bus and feasible scenarios where a vehicle is no longer safe after its CAN bus is compromised. Furthermore, the inclusion of CAN bus attacking codes in a mobile malware is cost-effective for the malicious attackers but very challenging for vehicle engineers to mitigate the security risks. Based on a variety of security attacks, we analyze potential attacks and their impact on the safety of the vehicle users. A number of vulnerabilities and attack scenarios are exposed which allows malicious attackers to hamper the vehicular control systems and cause harm to the vehicle even the passengers. In this paper, we do not report on our own implementation of attacks on real vehicles; our aim is to motivate further research to improve the security of the modern vehicular systems.