[论文解读] State-of-the-Art Survey on In-Vehicle Network Communication (CAN-Bus) Security and Vulnerabilities

Omid Avatefipour, Hafiz Malik|arXiv (Cornell University)|Feb 5, 2018

Vehicular Ad Hoc Networks (VANETs)参考文献 19被引用 60

一句话总结

对CAN-Bus安全性限制以及为在车内网络提供外部访问和攻击防护而提出的多层解决方案的综述。

ABSTRACT

Nowadays with the help of advanced technology, modern vehicles are not only made up of mechanical devices but also consist of highly complex electronic devices and connections to the outside world. There are around 70 Electronic Control Units (ECUs) in modern vehicle which are communicating with each other over the standard communication protocol known as Controller Area Network (CAN-Bus) that provides the communication rate up to 1Mbps. There are different types of in-vehicle network protocol and bus system namely Controlled Area Network (CAN), Local Interconnected Network (LIN), Media Oriented System Transport (MOST), and FlexRay. Even though CAN-Bus is considered as de-facto standard for in-vehicle network communication, it inherently lacks the fundamental security features by design like message authentication. This security limitation has paved the way for adversaries to penetrate into the vehicle network and do malicious activities which can pose a dangerous situation for both driver and passengers. In particular, nowadays vehicular networks are not only closed systems, but also they are open to different external interfaces namely Bluetooth, GPS, to the outside world. Therefore, it creates new opportunities for attackers to remotely take full control of the vehicle. The objective of this research is to survey the current limitations of CAN-Bus protocol in terms of secure communication and different solutions that researchers in the society of automotive have provided to overcome the CAN-Bus limitation on different layers.

研究动机与目标

• 突出现代车辆如何使用CAN-Bus及相关的车载网络。
• 识别CAN-Bus设计固有的安全局限性（如缺乏消息认证）。
• 概述暴露车辆网络的外部接口和攻击机会。
• 评审针对CAN-Bus安全在不同层次上提出的解决方案。

提出的方法

• 回顾关于CAN-Bus和车载网络的文献（CAN、LIN、MOST、FlexRay）。
• 分析CAN-Bus设计中的安全局限性和缺乏认证的问题。
• 总结创建攻击向量的外部接口（Bluetooth、GPS）。
• 呈现研究人员提出的在不同层次上改善安全通信的现有解决方案。

实验结果

研究问题

• RQ1 CAN-Bus车载网络的固有安全局限性有哪些？
• RQ2 哪些外部接口为远程入侵车辆提供机会？
• RQ3 研究者提出了哪些多层解决方案来克服CAN-Bus的安全弱点？

主要发现

• CAN-Bus是车载网络的事实标准，但在设计上缺乏基本的安全特性（例如消息认证）。
• 现代车辆大约包含70个ECU，通过CAN-Bus以高达1 Mbps的速度通信。
• 如Bluetooth和GPS等外部接口为远程攻击带来新的机会。
• 研究人员已提出在不同层面上克服CAN-Bus局限性的各种解决方案（跨网络协议和系统）。