An Efficient and Secure Automotive Wireless Software Update Framework

Steger, Marco; Boano, Carlo Alberto; Niedermayr, Thomas; Karner, Michael; Hillebrand, Joachim; Roemer, Kay; Rom, Werner

doi:10.1109/tii.2017.2776250

Cited by 32 publications

(16 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The safe and secure OTASU paradigm promoted by UP2DATE will incrementally combine these three properties together with next generation heterogeneous platforms. While there are extensive works addressing OTASU with any of these elements separately [16], [17], [21], UP2DATE will rely on the contract concept to build an update framework capable of handling all these aspects together. Additionally, UP2DATE will study how to exploit the higher computing performance properties of heterogeneous platforms to enable dynamic updates and their implications on safety and security.…”

Section: Key Up2date Innovationsmentioning

confidence: 99%

UP2DATE: Safe and secure over-the-air software updates on high-performance mixed-criticality systems

Agirre

Onaindia

Poggi

et al. 2020

2020 23rd Euromicro Conference on Digital System Design (DSD)

View full text Add to dashboard Cite

Following the same trend of consumer electronics, safety-critical industries are starting to adopt Over-The-Air Software Updates (OTASU) on their embedded systems. The motivation behind this trend is twofold. On the one hand, OTASU offer several benefits to the product makers and users by improving or adding new functionality and services to the product without a complete redesign. On the other hand, the increasing connectivity trend makes OTASU a crucial cybersecurity demand to download latest security patches. However, the application of OTASU in the safety-critical domain is not free of challenges, specially when considering the dramatic increase of software complexity and the resulting high computing performance demands. This is the mission of UP2DATE, a recently launched project funded within the European H2020 programme focused on new software update architectures for heterogeneous high-performance mixed-criticality systems. This paper gives an overview of UP2DATE and its foundations, which seeks to improve existing OTASU solutions by considering safety, security and availability from the ground up in an architecture that builds around composability and modularity.

show abstract

Section: Key Up2date Innovationsmentioning

confidence: 99%

UP2DATE: Safe and secure over-the-air software updates on high-performance mixed-criticality systems

Agirre

Onaindia

Poggi

et al. 2020

2020 23rd Euromicro Conference on Digital System Design (DSD)

View full text Add to dashboard Cite

show abstract

“…To help assimilate using the patterns, let us consider an example of a secure and dependable wireless software update process. This example is extracted from Steger et al 32 They proposed a generic framework SecUp to enable secure and efficient wireless automotive software updates. SecUp is designed to fulfill the requirements of wireless software update for a modern vehicle as it allows us to securely enable new features on the vehicle and to fix software bugs by updating the software over the air.…”

Section: Illustrative Example and Evaluationmentioning

confidence: 99%

“…Bhatti et al 49 presented a unifying approach to analyze quantitative aspects in hardware and qualitative aspects in software and proposed a semantics‐preserving transformation of IEC 61499 function blocks to PRISM models for achieving safety of industrial automation systems. Steger et al 32 defined a secure and dependable wireless software update process for different automotive application scenarios. They focused on comprising security mechanisms to prevent abuse and attacks.…”

Section: Related Workmentioning

confidence: 99%

Pattern‐based software process modeling for dependability

Zhang

Wang

Yun

et al. 2020

J Software Evolu Process

View full text Add to dashboard Cite

Traditional process modeling focuses on modeling activities for functional requirements. For dependability requirements, a knowledge‐based aspect‐oriented software process modeling approach is proposed. First, we extend the pattern and context to the knowledge graph triplet structure to describe dependability‐oriented knowledge patterns. By applying the patterns, dependability requirements can be organized into dependability‐related activities that are integrated into the software process. Then, aspect‐oriented modeling patterns based on Petri nets are introduced to support the integration of these dependability‐related activities and model dependability‐oriented software processes. Finally, the modeling performance and the subjective usability of the patterns are evaluated by 110 students with different degrees. The results indicate that these two indexes are on the positive track. Hence, the patterns may be the backbone of dependability‐oriented software process modeling.

show abstract

“…ECUs read data measured by a range of sensors and perform relevant processing for various purposes, such as pedestrian detection, path planning, auto-parking, and collision avoidance. They also control the actuators in a vehicle [1]. The values of the sensors and actuators are transmitted over the in-vehicle network protocol to other ECUs, leading to the creation of a highly complex network of hardware and software sub-modules.…”

Section: Introductionmentioning

confidence: 99%

An Intelligent Secured Framework for Cyberattack Detection in Electric Vehicles’ CAN Bus Using Machine Learning

et al. 2019

View full text Add to dashboard Cite

Electric Vehicles' Controller Area Network (CAN) bus serves as a legacy protocol for in-vehicle network communication. Simplicity, robustness, and suitability for real-time systems are the salient features of CAN bus. Unfortunately, the CAN bus protocol is vulnerable to various cyberattacks due to the lack of a message authentication mechanism in the protocol itself, paving the way for attackers to penetrate the network. This paper proposes a new effective anomaly detection model based on a modified one-class support vector machine in the CAN traffic. The proposed model makes use of an improved algorithm, known as the modified bat algorithm, to find the most accurate structure in the offline training. To evaluate the effectiveness of the proposed method, CAN traffic is logged from an unmodified licensed electric vehicle in normal operation to generate a dataset for each message ID and a corresponding occurrence frequency without any attacks. In addition, to measure the performance and superiority of the proposed method compared to the other two famous CAN bus anomaly detection algorithms such as Isolation Forest and classical one-class support vector machine, we provided Receiver Operating Characteristic (ROC) for each method to quantify the correctly classified windows in the test sets containing attacks. Experimental results indicate that the proposed method achieved the highest rate of True Positive Rate (TPR) and lowest False Positive Rate (FPR) for anomaly detection compared to the other two algorithms. Moreover, in order to show that the proposed method can be applied to other datasets, we used two recent popular public datasets in the scope of CAN bus traffic anomaly detection. Benchmarking with more CAN bus traffic datasets proves the independency of the proposed method from the meaning of each message ID and data field that make the model adaptable with different CAN datasets.INDEX TERMS Electric vehicles, controller area network (CAN Bus), anomaly detection, one-class support vector machine, optimization algorithm.

show abstract

An Efficient and Secure Automotive Wireless Software Update Framework

Cited by 32 publications

References 18 publications

UP2DATE: Safe and secure over-the-air software updates on high-performance mixed-criticality systems

UP2DATE: Safe and secure over-the-air software updates on high-performance mixed-criticality systems

Pattern‐based software process modeling for dependability

An Intelligent Secured Framework for Cyberattack Detection in Electric Vehicles’ CAN Bus Using Machine Learning

Contact Info

Product

Resources

About