Towards a New Configurable and Practical Remote Automotive Security Testing Platform (2404.02291v1)
Abstract: In the automotive security sector, the absence of a testing platform that is configurable, practical, and user-friendly presents considerable challenges. These difficulties are compounded by the intricate design of vehicle systems, the rapid evolution of attack vectors, and the absence of standardized testing methodologies. We propose a next-generation testing platform that addresses several challenges in vehicle cybersecurity testing and research domains. In this paper, we detail how the Vehicle Security Engineering Cloud (VSEC) Test platform enables easier access to test beds for efficient vehicle cybersecurity testing and advanced (e.g., penetration, fuzz) testing and how we extend such test beds to benefit automotive security research. We highlight methodology on how to use this platform for a variety of users and use cases with real implemented examples.
- CanBusHack. Cloudcar. Available at https://cloudcar.canbushack.com/. Accessed on 2024-03-15.
- Sam Curry. Web hackers vs. the auto industry: Critical vulnerabilities in ferrari, bmw, rolls royce, porsche, and more. Available at https://samcurry.net/web-hackers-vs-the-auto-industry/. Accessed on 2024-03-15.
- International Organization for Standardization. ISO/SAE 21434: 2021: Road Vehicles: Cybersecurity Engineering. ISO, 2021.
- Eclipse Foundation. Eclipse opendut. Available at https://projects.eclipse.org/projects/automotive.opendut. Accessed on 2024-03-15.
- System and method for intrusion detection on a physical level using an internal analog to digital converter, March 31 2022. US Patent App. 17/032,624.
- Block Harbor. Block harbor vsec. Available at https://blockharbor.io/vsec-platform/. Accessed on 2024-03-15.
- Canlay: A network virtualized testbed for vehicle systems–improving system integration and verification efforts. In INCOSE International Symposium, volume 33, pages 1–16. Wiley Online Library, 2023.
- Keysight. Sa8710a automotive cybersecurity test platform. Available at https://www.keysight.com/us/en/product/SA8710A/automotive-cybersecurity-penetration-test-platform.html. Accessed on 2024-03-15.
- Sekar Kulandaivel. Revisiting remote attack kill-chains on modern in-vehicle networks. PhD thesis, Carnegie Mellon University, 2021.
- {{\{{CANvas}}\}}: Fast and inexpensive automotive network mapping. In 28th USENIX Security Symposium (USENIX Security 19), pages 389–405, 2019.
- Cannon: Reliable and stealthy remote shutdown attacks via unaltered automotive microcontrollers. In 2021 IEEE Symposium on Security and Privacy (SP), pages 195–210. IEEE, 2021.
- Automotive cybersecurity testing: Survey of testbeds and methods. Digital Transformation, Cyber Security and Resilience of Modern Societies, pages 219–243, 2021.
- BG Networks. Bg networks crate. Available at https://bgnetworks.com/crate/. Accessed on 2024-03-15.
- Librecan: Automated can message translator. In Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security, pages 2283–2300, 2019.
- CARLA Team. Carla open-source simulator for autonomous driving research. Available at https://carla.org/. Accessed on 2024-03-15.
- GRVA WP29 UNECE. Un regulation no. 155—cyber security and cyber security management system. Technical report, Technical Report. United Nations, 2021.
- VDA. Automotive spice. Available at https://vda-qmc.de/en/automotive-spice/. Accessed on 2024-03-15.
- Vector. Vector vt system. Available at https://www.vector.com/int/en/products/products-a-z/hardware/vt-system/#c174985. Accessed on 2024-03-15.
- VicOne. Vicone automotive cyberthreat landscape report 2023. Available at https://documents.vicone.com/reports/automotive-cyberthreat-landscape-report-2023.pdf. Accessed on 2024-03-15.
- Vitrobench: Manipulating in-vehicle networks and cots ecus on your bench: A comprehensive test platform for automotive cybersecurity research. Vehicular Communications, 43, 2023.