Ecole d'ingénieur et centre de recherche en Sciences du numérique

Security and privacy for in-vehicle networks

Schweppe, Hendrik; Roudier, Yves

VCSC 2012, 1st IEEE SECON International Workshop on Vehicular Communications, Sensing, and Computing, 18th June, 2012, Seoul, Republic of Korea

Mobile devices such as smartphones have gained more and more attention from security researchers and malware authors, the latter frequently attacking those platforms and stealing personal information. Vehicle on-board networks, in particular infotainment systems, are increasingly connected with such mobile devices and the internet and will soon make it possible to load and install third party applications. This makes them susceptible to new attacks similar to those which plague mobile phones and personal computers. The breach of privacy is equally sensitive in the vehicular domain. Even worse, broken security is a serious threat to car safety. In this paper, we show how traditional automotive communication systems can be instrumented with taint tracking tools in a security framework that allows to dynamically monitor data flows within and between control units to achieve elevated security and privacy.  

Document Doi Bibtex

Titre:Security and privacy for in-vehicle networks
Mots Clés:On-Board Systems; In-Vehicle Network Security; Privacy; Data Flow Tracking; Distributed Tainting; Binary Instrumentation
Département:Sécurité numérique
Eurecom ref:3720
Copyright: © 2012 IEEE. Personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution to servers or lists, or to reuse any copyrighted component of this work in other works must be obtained from the IEEE.
Bibtex: @inproceedings{EURECOM+3720, doi = {}, year = {2012}, title = {{S}ecurity and privacy for in-vehicle networks}, author = {{S}chweppe, {H}endrik and {R}oudier, {Y}ves }, booktitle = {{VCSC} 2012, 1st {IEEE} {SECON} {I}nternational {W}orkshop on {V}ehicular {C}ommunications, {S}ensing, and {C}omputing, 18th {J}une, 2012, {S}eoul, {R}epublic of {K}orea }, address = {{S}eoul, {COR}{\'{E}}{E}, {R}{\'{E}}{PUBLIQUE} {DE}}, month = {06}, url = {} }
Voir aussi: