Controller area network (CAN) is one of the most popular in-vehicle networks. CAN allows electronic control units (ECUs) to communicate with each other. ECUs control various function of vehicle systems such as engine and transmission control. Therefore, CAN and ECUs are the high priority targets by hackers. If the CAN and the connected components are attacked, the vehicle may cause serious malfunction and fatal accidents. However, it is hard to find out the exact CAN messages to send and control the vehicle as intended by hackers. Likewise, vehicle security researchers have the same problem to find out the exact meaning of CAN messages to detect sophisticated attacks as well as attackers. It is relatively easy to detect the simple pattern of attacks such as denial of service (DoS) attack. However, CAN specification information is private information of car OEMs, to reveal the exact meaning of CAN messages, we need to analyze the messages by reverse engineering techniques, which is time-consuming and laborious tasks. To solve this problem, we developed the Automated CAN Analyzer (ACA). The ACA has automated reverse engineering functions which can help to analyze the relationship between the response data from a diagnostic query of on-board diagnostics II (OBD-II) and the related CAN traffic data. Furthermore, it supports the automated attack function that can inject fake messages into CAN bus based on pre-analyzed CAN message information. Researchers can easily confirm whether the reverse engineering results are correctly working or not through the provided automated attack function. As a result, the ACA could lower the barriers to entry to in-vehicle network research. To evaluate the ACA, we applied our approach to two real vehicles, Hyundai YF Sonata (2010 model) and KIA Soul (2014 model). In this paper, we can find out the meaning of CAN messages on both vehicles with the help of the ACA. Additionally, since modern vehicles are all equipped with OBD-II, our approach can be applied to most vehicle widely.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Automated Reverse Engineering and Attack for CAN Using OBD-II


    Beteiligte:
    Kang, Tae Un (Autor:in) / Song, Hyun Min (Autor:in) / Jeong, Seonghoon (Autor:in) / Kim, Huy Kang (Autor:in)


    Erscheinungsdatum :

    2018-08-01


    Format / Umfang :

    4449117 byte





    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Intelligent reverse attack target

    NIE WENLI / DOU ZIYANG / DOU KAI et al. | Europäisches Patentamt | 2021

    Freier Zugriff

    Poster: A Methodology for Semi-Automated CAN Bus Reverse Engineering

    Buscemi, Alessio / Turcanu, Ion / Castignani, German et al. | IEEE | 2021


    AUTOMATED REVERSE IMPLEMENT PARKING

    MEDAGODA ERAN D B / ASSEF MOHAMMAD / CHAI JOSEPH et al. | Europäisches Patentamt | 2021

    Freier Zugriff

    AUTOMATED REVERSE IMPLEMENT PARKING

    MEDAGODA ERAN D B / ASSEF MOHAMMAD / CHAI JOSEPH et al. | Europäisches Patentamt | 2019

    Freier Zugriff

    Automated reverse implement parking

    MEDAGODA ERAN D B / ASSEF MOHAMMAD / CHAI JOSEPH et al. | Europäisches Patentamt | 2021

    Freier Zugriff