The Security Aspects of Automotive Over-the-Air Updates

IF 0.2 Q4 POLITICAL SCIENCE

International Journal of Cyber Warfare and Terrorism Pub Date : 2020-04-01 DOI:10.4018/ijcwt.2020040104

J. Howden, L. Maglaras, M. Ferrag

{"title":"The Security Aspects of Automotive Over-the-Air Updates","authors":"J. Howden, L. Maglaras, M. Ferrag","doi":"10.4018/ijcwt.2020040104","DOIUrl":null,"url":null,"abstract":"Over-the-air(OTA)updateisamethodforvehiclemanufacturerstoremotelydistributemaintenance updates,performance,andfeatureenhancementsthroughthevehicle’slifespan.Recallsofvehicles costthemanufacturesalotofmoney.OTAsolvestherecallissue,whileallowingconsumerstopay forservicesandfeaturesviaanupdate.TheOTAecosystemincludesthecoderswhofirstdeveloped the firmware, the 1st Tier suppliers, the vehicle manufacturers, and the vehicle itself. Currently, manufacturersdesignedthenetworksforspeedandresponsiveness,andnotsecurity.Thisarticle examinestheseelementsanddrillsintothesecurityavailableforeach.Theslowestandoneofthe mostvulnerablepartsofthesystemisthecommunicationswithinthevehicle.Thevehiclenetworks mustensuretheintegrityandauthenticityofmessagestransmittedtoguaranteesoftwareprogrammed ontoECUsareauthorizedandtamper-free.Specialisthardwarewithinthevehiclemakesthispossible inanoperationenvironment,suchashardwaresecuritymodules. KeyWORdS Electronic Control Units, Automated Cars, Over-The-Air Updates, Connected Vehicles, Security, Cryptography, Hardware Security Module, Trust","PeriodicalId":41462,"journal":{"name":"International Journal of Cyber Warfare and Terrorism","volume":"27 1","pages":"64-81"},"PeriodicalIF":0.2000,"publicationDate":"2020-04-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"6","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"International Journal of Cyber Warfare and Terrorism","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.4018/ijcwt.2020040104","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q4","JCRName":"POLITICAL SCIENCE","Score":null,"Total":0}

引用次数: 6

Abstract

Over-the-air(OTA)updateisamethodforvehiclemanufacturerstoremotelydistributemaintenance updates,performance,andfeatureenhancementsthroughthevehicle’slifespan.Recallsofvehicles costthemanufacturesalotofmoney.OTAsolvestherecallissue,whileallowingconsumerstopay forservicesandfeaturesviaanupdate.TheOTAecosystemincludesthecoderswhofirstdeveloped the firmware, the 1st Tier suppliers, the vehicle manufacturers, and the vehicle itself. Currently, manufacturersdesignedthenetworksforspeedandresponsiveness,andnotsecurity.Thisarticle examinestheseelementsanddrillsintothesecurityavailableforeach.Theslowestandoneofthe mostvulnerablepartsofthesystemisthecommunicationswithinthevehicle.Thevehiclenetworks mustensuretheintegrityandauthenticityofmessagestransmittedtoguaranteesoftwareprogrammed ontoECUsareauthorizedandtamper-free.Specialisthardwarewithinthevehiclemakesthispossible inanoperationenvironment,suchashardwaresecuritymodules. KeyWORdS Electronic Control Units, Automated Cars, Over-The-Air Updates, Connected Vehicles, Security, Cryptography, Hardware Security Module, Trust

查看原文本刊更多论文

汽车无线更新的安全问题

无线(OTA)updateisamethodforvehiclemanufacturerstoremotelydistributemaintenance更新，performance，andfeatureenhancementsthroughthevehicle 'slifespan。Recallsofvehicles costthemanufacturesalotofmoney。OTAsolvestherecallissue，whileallowingconsumerstopay forservicesandfeaturesviaanupdate。TheOTAecosystemincludesthecoderswhofirstdeveloped固件，第一级供应商，车辆制造商，以及车辆本身。目前有:manufacturersdesignedthenetworksforspeedandresponsiveness，andnotsecurity。Thisarticle examinestheseelementsanddrillsintothesecurityavailableforeach。Theslowestandoneofthe mostvulnerablepartsofthesystemisthecommunicationswithinthevehicle。Thevehiclenetworks mustensuretheintegrityandauthenticityofmessagestransmittedtoguaranteesoftwareprogrammed ontoECUsareauthorizedandtamper-free。Specialisthardwarewithinthevehiclemakesthispossible inanoperationenvironment，suchashardwaresecuritymodules。关键词:电子控制单元，自动驾驶汽车，无线更新，联网汽车，安全，密码学，硬件安全模块，信任

本文章由计算机程序翻译，如有差异，请以英文原文为准。

求助全文

约1分钟内获得全文求助全文

来源期刊

International Journal of Cyber Warfare and Terrorism POLITICAL SCIENCE-

CiteScore

1.80

自引率

40.00%

发文量