Defensing the malicious attacks of vehicular network in runtime verification perspective
Authors:
- Xiang ZhangXZXiang Zhang
- Wufeng FengWFWufeng Feng
- Jiangtao WangJWJiangtao Wang
- Zhenghui WangZWZhenghui Wang
- 1 August 2016
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- p. 126-133
Abstract
The Controller Area Network (CAN) protocol, which is frequently employed in today's automobiles, offers the communication standards between different Electronic Control Units (ECUs) on vehicular system[1]. However, this protocol does not consider some of the security issues like authentication and access control, which make CAN vulnerable to kinds of attacks[2]. This paper mainly focuses on some of the most common causes of attacks on vehicular network, and propose a Runtime Verification[3] (RV) based framework for defensing malicious attacks against CAN protocols. Especially the attacks launched form exposed interfaces of vehicular systems, such as Bluetooth, Telematics and On Board Diagnostic (OBD) port. Briefly, we adopt timed automaton to describe ECU behaviors and create security specifications to detect illegal behaviors on CAN bus. Then we develop a framework based on Copilot[4] to implement the detection at runtime. In addition, our implementation is also able to defense the malicious attack before it impacts the vehicular system.Keywords
This publication has 11 references indexed in Scilit:
- A Practical Wireless Attack on the Connected Car and Security Protocol for In-Vehicle CANIEEE Transactions on Intelligent Transportation Systems, 2014
- On Integrating EAST-ADL and UPPAAL for Embedded System Architecture Verification2013
- Cyber-Security for the Controller Area Network (CAN) Communication Protocol2012
- Low cost multicast authentication via validity voting in time-triggered embedded control networks2010
- A structured approach to anomaly detection for in-vehicle networks2010
- Copilot: A Hard Real-Time Runtime Monitor2010
- Experimental Security Analysis of a Modern Automobile2010
- An approach to specification-based attack detection for in-vehicle networks2008
- Securing vehicles against cyber attacks2008
- Testing Real-Time Systems Using UPPAAL2008