[论文解读] Survey on Vehicular Ad Hoc Networks and Its Access Technologies Security Vulnerabilities and Countermeasures

Kaveh Bakhsh Kelarestaghi, Mahsa Foruhandeh+2 more|arXiv (Cornell University)|Mar 4, 2019

Vehicular Ad Hoc Networks (VANETs)参考文献 147被引用 24

一句话总结

本文全面综述了车载自组织网络（VANETs）及其接入技术（包括DSRC、5G、VLC、蓝牙和卫星无线电）中的安全漏洞与对策。该研究整合了跨网络各层的端到端安全分析，识别了各类接入技术的攻击面，并提出了异构集成方案，以实现最优的安全性与性能。

ABSTRACT

In this study, we attempt to add to the literature of Connected and Automated Vehicle (CAV) security by incorporating the security vulnerabilities and countermeasures of the Vehicular Ad hoc Networks (VANETs) and their access technologies. Compounding VANETs and modern vehicles will allow adversaries to gain access to the in-vehicle networks and take control of vehicles remotely to use them as a target or a foothold. Extensive attention has been given to the security breaches in VANETs and in-vehicle networks in literature but there is a gap in literature to assess the security vulnerabilities associated with VANETs access technologies. That is, in this paper we contribute to the CAV security literature in threefold. First, we synthesize the current literature in order to investigate security attacks and countermeasures on VANETs as an ad hoc network. Second, we survey security challenges that emerge from application of different VANETs access technologies. To augment this discussion, we investigate security solutions to thwart adversaries to compromise the access technologies. Third, we provide a detailed comparison of different access technologies performance, security challenges and propound heterogeneous technologies to achieve the highest security and best performance in VANETs. These access technologies extend from DSRC, Satellite Radio, and Bluetooth to VLC and 5G. The outcome of this study is of critical importance, because of two main reasons: (1) independent studies on security of VANETs on different strata need to come together and to be covered from a whole end-to-end system perspective, (2) adversaries taking control of the VANETs entities will compromise the safety, privacy, and security of the road users and will be followed by legal exposures, as well as data, time and monetary losses.

研究动机与目标

• 为解决现有文献中关于VANET接入技术特异性安全漏洞的研究空白。
• 综合现有研究，分析VANET安全攻击与对策在自组织网络各层中的表现。
• 评估并比较不同接入技术在VANET中所面临的性能权衡与安全挑战。
• 提出一种异构接入技术集成方案，以在智能网联与自动驾驶汽车（CAVs）中实现最优安全性与性能。

提出的方法

• 对VANET安全漏洞与对策在多个网络层级中的系统性文献综述。
• 基于其安全与性能特性，对各类接入技术（DSRC、5G、VLC、蓝牙、卫星无线电）进行分类。
• 分析每种接入技术引入的攻击面，包括欺骗、干扰及中间人攻击等威胁。
• 评估现有安全解决方案，如密码协议、相互认证机制与访问控制策略。
• 采用延迟、吞吐量、通信范围及对常见攻击的抗性等指标，对各类技术进行对比评估。
• 提出一种异构接入架构，整合多种技术以提升系统韧性与性能。

实验结果

研究问题

• RQ1 DSRC、5G、VLC、蓝牙和卫星无线电等VANET接入技术的主要安全漏洞是什么？
• RQ2 不同接入技术在VANET中如何加剧或缓解安全威胁？
• RQ3 在VANET中集成多种接入技术时，其性能权衡与安全挑战是什么？
• RQ4 如何通过异构接入架构提升智能网联与自动驾驶车辆系统的整体安全性与可靠性？
• RQ5 针对通过接入技术漏洞导致的远程系统 compromise，最有效的对策是什么？

主要发现

• VANET接入技术引入了独特的攻击面，包括欺骗与干扰攻击，可能被利用以破坏车辆控制与数据完整性。
• 与DSRC和蓝牙相比，5G与VLC提供更高的数据速率与更低的延迟，但需要更强的认证机制以防范冒名顶替攻击。
• 由于加密强度较低及密钥管理协议较弱，蓝牙与DSRC易受重放攻击与中间人攻击。
• 基于卫星的接入技术虽具备广域覆盖能力，但易受信号欺骗与拒绝服务攻击影响。
• 接入技术的异构集成显著提升了系统韧性，通过在不同通信模式间实现故障切换与冗余。
• 密码协议（如相互认证与轻量级加密）对于保障车车间及车路通信的安全至关重要。