A framework for demonstrating and mitigating CAN injection attacks in vector CANoe: a case study using ABS

Modern vehicles rely heavily on the Controller Area Network (CAN) for communication between electronic control units, yet CAN lacks inherent security features like authentication, making it susceptible to attacks, such as message injection. In this paper, we develop a means of simulating and visualizing the effect of an attack on the communication traffic and the actual system and the effect of a countermeasure. Our tool is based on Vector CANoe simulation and demonstrates a CAN message injection attack and a simple rule-based Intrusion Detection System (IDS). The setup includes a custom Graphical User Interface (GUI) for interactive demonstration. This framework serves as an educational tool and a foundation for future research into more advanced attack and defense scenarios. This work takes a step towards developing simulation platforms or frameworks for security of in-vehicle networks that are flexible and based on industry suitable toolchains.

Subjects

Controller Area Network (CAN)

In-vehicle Network Security

Simulation

Demonstration for Education

DDC Class

005: Computer Programming, Programs, Data and Security

Options

A framework for demonstrating and mitigating CAN injection attacks in vector CANoe: a case study using ABS