SecMonQ: An HSM based security monitoring approach for protecting AUTOSAR safety-critical systems

Nasser, Ahmad; Ma, Di

doi:10.1016/j.vehcom.2019.100201

Cited by 3 publications

(1 citation statement)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…”, we observe that three strategies have been adopted: simulation, experimentation and formal verification. A vast amount of works (Cho and Shin, 2016; Wang and Sawhney, 2014; Ying et al , 2019; Song et al , 2020; Nasser and Ma, 2020) have been validated based on experimentation which are very important to show the solution efficiency in a real world. Also, some research attempts (Cros and Chênevert, 2019; Levi et al , 2018; Avatefipour et al , 2019) have adopted simulation to imitate the system behavior and evaluate a set of performance criteria.…”

Section: Discussionmentioning

confidence: 99%

Cybersecurity attacks on CAN bus based vehicles: a review and open challenges

Fakhfakh

Tounsi

Mosbah

2021

LHT

View full text Add to dashboard Cite

PurposeNowadays, connected vehicles are becoming quite complex systems which are made up of different devices. In such a vehicle, there are several electronic control units (ECUs) that represent basic units of computation. These ECUs communicate with each other over the Controller Area Network (CAN) bus protocol which ensures a high communication rate. Even though it is an efficient standard which provides communication for in-vehicle networks, it is prone to various cybersecurity attacks. This paper aims to present a systematic literature review (SLR) which focuses on potential attacks on CAN bus networks. Then, it surveys the solutions proposed to overcome these attacks. In addition, it investigates the validation strategies aiming to check their accuracy and correctness.Design/methodology/approachThe authors have adopted the SLR methodology to summarize existing research papers that focus on the potential attacks on CAN bus networks. In addition, they compare the selected papers by classifying them according to the adopted validation strategies. They identify also gaps in the existing literature and provide a set of open challenges that can significantly improve the existing works.FindingsThe study showed that most of the examined papers adopted the simulation as a validation strategy to imitate the system behavior and evaluate a set of performance criteria. Nevertheless, a little consideration has been given to the formal verification of the proposed systems.Originality/valueUnlike the existing surveys, this paper presents the first SLR that identifies local and remote security attacks that can compromise in-vehicle and inter-vehicle communications. Moreover, it compares the reviewed papers while focusing on the used validation strategies.

show abstract

Section: Discussionmentioning

confidence: 99%

Cybersecurity attacks on CAN bus based vehicles: a review and open challenges

Fakhfakh

Tounsi

Mosbah

2021

LHT

View full text Add to dashboard Cite

show abstract

Real-time detection method for mobile network traffic anomalies considering user behavior security monitoring

Zhang

Cao

et al. 2021

2021 International Conference on Computer, Blockchain and Financial Development (CBFD)

View full text Add to dashboard Cite

Survey of Control-flow Integrity Techniques for Real-time Embedded Systems

Mishra

Chantem

Gerdes

2022

ACM Trans. Embed. Comput. Syst.

View full text Add to dashboard Cite

Computing systems, including real-time embedded systems, are becoming increasingly connected to allow for more advanced and safer operation. Such embedded systems are also often resource-constrained, for example, with lower processing capabilities compared to general purpose computing systems like desktops or servers. With the advent of paradigms such as internet-of-things (IoT), embedded systems in both commercial and industrial contexts are being increasingly interconnected and exposed to the external networks to improve automation and efficiency of operation. However, allowing external interfaces to such embedded systems increases their exposure to attackers. With an increase in attacks against embedded systems ranging from home appliances to industrial control systems operating critical equipment that have real-time requirements, it is imperative that defense mechanisms be created that explicitly consider such resource and real-time constraints. Control-flow integrity (CFI) is a family of defense mechanisms that prevent attackers from modifying the flow of execution. We survey CFI techniques, ranging from the basic to state-of-the-art, that are built for embedded systems and real-time embedded systems and find that there is a dearth, especially for real-time embedded systems, of CFI mechanisms. We then present open challenges to the community to help drive future research in this domain.

show abstract

SecMonQ: An HSM based security monitoring approach for protecting AUTOSAR safety-critical systems

Cited by 3 publications

References 6 publications

Cybersecurity attacks on CAN bus based vehicles: a review and open challenges

Cybersecurity attacks on CAN bus based vehicles: a review and open challenges

Real-time detection method for mobile network traffic anomalies considering user behavior security monitoring

Survey of Control-flow Integrity Techniques for Real-time Embedded Systems

Contact Info

Product

Resources

About