Threats to Security in DSRC/WAVE

Abstract

Abstract. Dedicated Short Range Communications (DSRC) enabled road vehicles are on the brink of actualizing an important application of mobile ad hoc networks. It is crucial that the messages exchanged between the vehicles and between the vehicles and specialized infrastructure be reliable, accurate and confidential. To this end, we propose to identify the security threats inherent in the emerging DSRC Wireless Access in Vehicular Environments (WAVE) architecture. We rank the identified threats according to the European Telecommunications Standards Institute's (ETSI) threat analysis methodology. We also discuss possible countermeasures to the most critical threats.

Security Threats on EPC Based RFID Systems

“…It is based on an evaluation framework proposed by the European Telecommunications Standards Institute (ETSI) in [2]; but slightly modified in order to take into account the suggestions introduced in [3] for identifying relevant threats and security flaws on current wireless network applications.…”

WIMAX/802.16 Broadband Wireless Networks

“…Nevertheless, Johnston and Walker in their recent article criticize the adoption of Data Over Cable Service Interface Specifications (DOCSIS) [10]. Although designed to solve the last mile problem for cable, it has an otherwise different threat model from IEEE 802.16 since the former is wired while the latter is wireless technology [13].…”

Secure Anonymous Broadcasting in Vehicular Networks

“…We gauge the security of the SAB protocol in terms of its effect on the risks uncovered in the WAVE threat analysis [19]. We compare the performance of SAB with WAVE in terms of broadcast message size and cryptographic operation execution time required for sending and receiving broadcast messages.…”

“…A threat with a high or medium impact and with high or moderate motivation and little technical difficulty is ranked as critical. Of the threats to WAVE identified in [19], four are affected by the proposed SAB protocol: location tracking (which is a critical threat), masquerading, replay and false broadcast messages (minor threats).…”

“…judicial proceedings, business rivalry, health insurance denials), WAVE's vulnerability to location tracking may hinder the wide-spread adoption of this potentially life-saving technology. In [19], we conducted a threat analysis of the WAVE architecture in order to assess the most important risks. Location tracking was identified as a critical threat.…”