4 results
Now showing1 - 4 of 4
- Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Analyzing the capabilities of the CAN attackerThe modern car is controlled by a large number of Electronic Control Units (ECUs), which communicate over a network of bus systems. One of the most widely used bus types is called Controller Area Network (CAN). Recent automotive hacking has shown that attacks with severe safety impact are possible when an attacker manages to gain access to a safety-critical CAN. In this paper, our goal is to obtain a more systematic understanding of the capabilities of the CAN attacker, which can support the development of security concepts for in-vehicle networks.Publicationtype: Conference Paper115 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Analyzing the impact of injected sensor data on an advanced driver assistance system using the OP2 TIMUS prototyping platformModern vehicles are running complex and safety critical applications distributed over several Electronic Control Units (ECUs). Some ECUs are equipped with communication interfaces providing access to other devices, networks or remote services. Since the number of attack vectors is increasing, an early investigation of the impact of attacks becomes steadily more important. This paper gives an example how manipulated sensor data injected to the CAN bus affects an Advanced Driver Assistance System (ADAS). Within multiple experiments we illustrate the impact of different aspects like the sending rate.Publicationtype: Conference Paper92 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Integrating the security aspect into design space exploration of embedded systems(IEEE, 2014-12-12); ; ; ; Conventionally, the process of design space exploration (DSE) in embedded system design considers performance, energy and cost as important objectives for optimization. However, in many domains such as in modern day cars the security aspect is becoming more and more significant. On the other hand, the inclusion of security aspect adds a new dimension to the existing complexity of large design spaces, thus an automated support for this is highly desired. The goal of this work is to integrate the security constraint in an automated DSE process to obtain an architecture which is both cost-optimized and secure. In specific, for a given system, our approach defines a formal notion of security, which along with other parameters is fed as an input to the DSE process to obtain an architecture satisfying the defined security and real-time requirements. An evaluation of the proposed approach is also performed using an example automotive embedded system.Publicationtype: Conference Paper39 - Some of the metrics are blocked by yourconsent settings
Item type:Publication, Access status: without files , Idea: Security engineering principles for day two Car2X applicationsCar2X communication based on IEEE 802.11p has been prepared over the last years by a tremendous collaborative effort of the automotive industry, researchers, and standardization bodies. At the European level ETSI has released a first set of standards for interoperability and initial deployment in February this year. The "day one" Car2X applications, which will be implemented soon, do not automatically intervene into the driving behaviour of a car, but such "day two" applications will be the next step. In this idea paper we highlight some principle differences between Car2X and traditional security-relevant systems such as banking. We show how this might lead to a more straightforward escalation of attacks, which should be kept in mind in view of the safety-relevant "day two" applications. We also propose a principle of how to avoid this. In current work we test the feasibility of the attacks.Publicationtype: Conference Paper45