Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security最新文献

筛选
英文 中文
Towards Minimizing MAC Utilization for Controller Area Network 控制器局域网MAC利用率最小化的研究
Ryo Kurachi, H. Takada, Hiroshi Ueda, Shuhei Takimoto
{"title":"Towards Minimizing MAC Utilization for Controller Area Network","authors":"Ryo Kurachi, H. Takada, Hiroshi Ueda, Shuhei Takimoto","doi":"10.1145/3375706.3380557","DOIUrl":"https://doi.org/10.1145/3375706.3380557","url":null,"abstract":"In recent years, frequent spoofing attacks targeting automotive control systems have been reported. To address this issue, automotive manufactures seek to assign a message authentication code(MAC) to ensure the security of these systems. As it is challenging to assign an authenticator to all messages due to limitations in transfer capacity, automotive manufactures are seeking to assign it to only a certain type of message. In this study, a method of spoofing detection is proposed that makes use of one of the critical messages referred to as Keep Alive Messages.","PeriodicalId":387296,"journal":{"name":"Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security","volume":"11 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"125475943","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Towards Effective Identification and Rating of Automotive Vulnerabilities 汽车安全漏洞有效识别与评级研究
Pranshu Bajpai, R. Enbody
{"title":"Towards Effective Identification and Rating of Automotive Vulnerabilities","authors":"Pranshu Bajpai, R. Enbody","doi":"10.1145/3375706.3380556","DOIUrl":"https://doi.org/10.1145/3375706.3380556","url":null,"abstract":"Cybersecurity is a paramount concern in automobiles since deficiencies in security controls put human lives at risk. Some security vulnerabilities are more critical than others and demand immediate attention. Therefore, it is imperative to quantify associated risks by means of rating security vulnerabilities on a scale of severity which has proven to be a useful tool for traditional IT security in comprehending the real risk associated with a vulnerability. In this paper, we present a methodology for adapting the proven CVSS scoring system to automobiles and illustrate the notion with several examples of real-world automotive security vulnerabilities. We also propose a CVV naming system, that is based on the existing CVE system by MITRE, to assign unique identifiers to these vulnerabilities which permits efficient tracking and analysis of automotive vulnerabilities.","PeriodicalId":387296,"journal":{"name":"Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security","volume":"24 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114818421","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Ransomware Targeting Automobiles 针对汽车的勒索软件
Pranshu Bajpai, R. Enbody, B. Cheng
{"title":"Ransomware Targeting Automobiles","authors":"Pranshu Bajpai, R. Enbody, B. Cheng","doi":"10.1145/3375706.3380558","DOIUrl":"https://doi.org/10.1145/3375706.3380558","url":null,"abstract":"Ransomware has consistently been the top threat to security in recent years. It seems inevitable that ransomware developers will ultimately target automobiles. As vehicles get smarter and more connected, the threat surface widens and automobiles naturally become more vulnerable to Internet-based threats such as ransomware. In this paper, we identify the constraints on ransomware in the context of automobiles and demonstrate potential ransomware attacks. The demonstrations entail attack vectors targeted at the IVI system and the methodology for implementing a hybrid crypto ransomware on an IVI system. Finally, we clarify the new ransomware strategies that the attackers could leverage in the context of vehicular systems with the intent to promote research to prevent such attacks.","PeriodicalId":387296,"journal":{"name":"Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security","volume":"45 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122394763","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 15
Linear-Quadratic Game Theoretic Analysis for Securing Battery Management Power Converter Systems 电池管理电源变换器系统安全的线性二次博弈分析
Patrick Gu, Ryan M. Gerdes
{"title":"Linear-Quadratic Game Theoretic Analysis for Securing Battery Management Power Converter Systems","authors":"Patrick Gu, Ryan M. Gerdes","doi":"10.1145/3375706.3380553","DOIUrl":"https://doi.org/10.1145/3375706.3380553","url":null,"abstract":"The incorporation of active balancing into battery management systems leaves electric vehicles vulnerable to attacks common to cyber-physical systems. A cost-benefit analysis on the effects of these attacks is presented to explore attacker models and possible defenses. This is achieved through the use of a linear-quadratic differential game model through which attackers may use false-data injection, sensor jamming, and false-data actuation. Non-linearities inherent to power converter modeling are approximated using small-signal state-space techniques and state-of-charge is approximated through a Coulomb-counting assumption. The results show that most vulnerable components of the examined battery management system lie primarily with the current and voltage sensor and that efforts should expended on hardening these attack points from false-data injection and jamming.","PeriodicalId":387296,"journal":{"name":"Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security","volume":"27 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115299305","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 0
On the Efficacy of Model-Based Attack Detectors for Unmanned Aerial Systems 基于模型的无人机攻击检测器的有效性研究
Ian Y. Garrett, Ryan M. Gerdes
{"title":"On the Efficacy of Model-Based Attack Detectors for Unmanned Aerial Systems","authors":"Ian Y. Garrett, Ryan M. Gerdes","doi":"10.1145/3375706.3380555","DOIUrl":"https://doi.org/10.1145/3375706.3380555","url":null,"abstract":"Unmanned Aerial Systems (UAS), informally known as drones, are cyber-physical systems (CPS) that operate by remote human control or autonomous control. UAS are increasingly being used in a wide variety of applications, such as search and rescue, delivery of goods, or surveillance. These systems rely on sensors and actuators to evaluate their current state and take further action; due to the reliance on sensors and actuators, it is critical to thwart an adversary's attempt to compromise these elements. Security in these systems rely on detectors to find malicious activity, many of which require models of the system to compare what the readings are versus the expected value. Due to measurement and process noise, it is possible that an adversary may perpetrate undetectable attacks. In this paper we examine the sensitivity of model-based attack detectors to measurement and modeling uncertainty, ultimately showing the weaknesses in relying solely on model-based detectors for attack detection. We demonstrate attacks on a simulation of the Senior Telamaster UAS and evaluate the performance of multiple attack detectors after modifications on various parameters, such as those related to internal factors, e.g., measurement noise, as well as external forces, e.g., wind, ultimately showing that an attacker is able to evade detection due to fundamental limitations in the model-based approach.","PeriodicalId":387296,"journal":{"name":"Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security","volume":"45 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-16","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114224542","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
CVShield
Shengtuo Hu, Qi Alfred Chen, Jiwon Joung, Can Carlak, Yiheng Feng, Z. Morley Mao, Henry X. Liu
{"title":"CVShield","authors":"Shengtuo Hu, Qi Alfred Chen, Jiwon Joung, Can Carlak, Yiheng Feng, Z. Morley Mao, Henry X. Liu","doi":"10.1145/3375706.3380552","DOIUrl":"https://doi.org/10.1145/3375706.3380552","url":null,"abstract":"The emerging Connected Vehicle (CV) technology enables vehicles to wirelessly exchange safety and mobility information (e.g., location and speed) with traffic infrastructure and other vehicles. Existing CV applications heavily rely on sensor inputs (e.g., GPS). However, previous work has shown that the attacker can cause severe congestion or increased safety risks by compromising vehicles and broadcasting falsified sensor data. Thus, it is highly desirable to ensure the integrity of sensor data. In this paper, to prevent compromised vehicles from sending falsified sensor data, we propose a system CVShield, which utilizes the recent advances in hardware-assisted security (e.g., ARM TrustZone). CVShield can ensure the integrity of the sensor data from their reading to their transmission at the vehicle side. In general, we relocate all codes that are related to sensor data reading, processing, encapsulation, and transmission from the rich execution environment (REE) into the trusted execution environment (TEE). However, manually extracting code sections is laborious and error-prone. Also, we should minimize the size of the trusted computing base (TCB) in TEE to reduce the attack surface. To achieve these goals, we propose to leverage program slicing to automatically extract code sections and eliminating irrelevant codes in large codebases. Our initial results demonstrate that CVShield can support GPS data reading, and our optimization can eliminate the time overhead introduced by context switches of TrustZone.","PeriodicalId":387296,"journal":{"name":"Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-12","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122737668","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 2
Secure Traffic Lights: Replay Attack Detection for Model-based Smart Traffic Controllers 安全交通灯:基于模型的智能交通控制器的重放攻击检测
Pratham Oza, M. Foruhandeh, Ryan M. Gerdes, Thidapat Chantem
{"title":"Secure Traffic Lights: Replay Attack Detection for Model-based Smart Traffic Controllers","authors":"Pratham Oza, M. Foruhandeh, Ryan M. Gerdes, Thidapat Chantem","doi":"10.1145/3375706.3380554","DOIUrl":"https://doi.org/10.1145/3375706.3380554","url":null,"abstract":"Rapid urbanization calls for smart traffic management solutions that incorporate sensors, distributed traffic controllers and V2X communication technologies to provide fine-grained traffic control to mitigate congestion. As in many other cyber-physical systems, smart traffic management systems typically lack security measures. This allows numerous opportunities for adversarial entities to craft attacks on the sensor networks, wireless data sharing and/or the distributed traffic controllers. We show that such vulnerabilities can be exploited to disrupt mobility in a large urban area and cause unsafe conditions for drivers and the pedestrians on the roads. Specifically, in this paper, we look into vulnerabilities in model-based traffic controllers and show that, even with state-of-the-art attack detectors in place, false-data injection can be used to hamper mobility. We demonstrate a replay attack by modeling an isolated intersection in VISSIM, a popular traffic simulator and also discuss countermeasures to thwart such attacks.","PeriodicalId":387296,"journal":{"name":"Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security","volume":"328 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-03-09","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"134404528","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 3
Security and Privacy Challenges in Upcoming Intelligent Urban Micromobility Transportation Systems 即将到来的智能城市微交通系统的安全和隐私挑战
Nisha Vinayaga-Sureshkanth, Raveen Wijewickrama, Anindya Maiti, Murtuza Jadliwala
{"title":"Security and Privacy Challenges in Upcoming Intelligent Urban Micromobility Transportation Systems","authors":"Nisha Vinayaga-Sureshkanth, Raveen Wijewickrama, Anindya Maiti, Murtuza Jadliwala","doi":"10.1145/3375706.3380559","DOIUrl":"https://doi.org/10.1145/3375706.3380559","url":null,"abstract":"Micromobility vehicles are gaining popularity due to their portable nature, and their ability to serve short distance urban commutes better than traditional modes of transportation. Most of these vehicles, offered by various micromobility service providers around the world, are shareable and can be rented (by-the-minute) by riders, thus eliminating the need of owning and maintaining a personal vehicle. However, the existing micromobility ecosystem comprising of vehicles, service providers, and their users, can be exploited as an attack surface by malicious entities - to compromise its security, safety, and privacy. In this short position paper, we outline potential privacy and security challenges related to a very popular urban micromobility platform, specifically, dockless battery-powered e-scooters.","PeriodicalId":387296,"journal":{"name":"Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security","volume":"51 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-01-06","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"115719152","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}
引用次数: 10
0
×
引用
GB/T 7714-2015
复制
MLA
复制
APA
复制
导出至
BibTeX EndNote RefMan NoteFirst NoteExpress
×
提示
您的信息不完整,为了账户安全,请先补充。
现在去补充
×
提示
您因"违规操作"
具体请查看互助需知
我知道了
×
提示
确定
请完成安全验证×
相关产品
×
本文献相关产品
联系我们:info@booksci.cn Book学术提供免费学术资源搜索服务,方便国内外学者检索中英文文献。致力于提供最便捷和优质的服务体验。 Copyright © 2023 布克学术 All rights reserved.
京ICP备2023020795号-1
ghs 京公网安备 11010802042870号
Book学术文献互助
Book学术文献互助群
群 号:604180095
Book学术官方微信
小红书