This paper gives an introduction to security challenges arising during the design of automotive hardware/software architectures. State-of-the-art automotive architectures are highly heterogeneous and complex systems that rely on distributed functions based on electronics and software as well as various bus systems and protocols. With the growing connectivity of vehicles, including wireless communication like WiFi or Bluetooth, the vulnerability to attacks infiltrating the system is rapidly growing. Despite this increasing vulnerability, the design of automotive architectures is still mainly driven by safety and cost issues rather than security. In this paper, we present potential threats and vulnerabilities, and outline upcoming security challenges in automotive architectures. In particular, we discuss the challenges arising in electric vehicles, like the vulnerability to attacks tampering with the battery management. Finally, we discuss future in-vehicle architectures based on Ethernet/IP and how formal verification methods might be used to increase the security of automotive architectures.

No abstract

Today's vehicles are increasingly connected to Internet, devices and integrate more and more electronic components. More than just ensuring their passengers' safety, which remains nevertheless one of their main objectives, cars have to deal with private information and encounters the same security issues as traditional computers. Until recently, automotive technologies allowed very little space for security, but the transition towards full Ethernet-based on-board network will change this situation. In this paper, we present solutions for decentralized information flow control in order to enhance the security and privacy level of the car data management. We describe the implementation of these mechanisms in an automotive middleware and propose its evaluation.

No abstract