An approach to specification-based attack detection for in-vehicle networks
Authors:
Top Cited Papers
- 1 June 2008
- conference paper
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- No. 19310587,p. 220-225
Abstract
An upcoming trend for automotive manufacturers is to create seamless interaction between a vehicle and fleet management to provide remote diagnostics and firmware updates over the air. To allow this, the previously isolated in-vehicle network must be connected to an external network, and can thus be exposed to a whole new range of threats known as cyber attacks. In this paper we explore the applicability of a specification-based approach to detect cyber attacks within the in-vehicle network. We derive information to create security specifications for communication and ECU behavior from the CANopen draft standard 3.01 communication protocol and object directory sections. We also provide a set of example specifications, propose a suitable location for the attack detector, and evaluate the detection using a set of attack actions.Keywords
This publication has 7 references indexed in Scilit:
- Key management and secure software updates in wireless process control environments2008
- Conducting forensic investigations of cyber attacks on automobile in-vehicle networks2008
- MiniSec2007
- A specification-based intrusion detection system for AODV2003
- Automated detection of vulnerabilities in privileged programs by execution monitoring2002
- SPINS2001
- A common language for computer security incidents1998