The In-Vehicle Infotainment (IVI) system of a modern connected vehicle is a critical attack point and must be thoroughly tested. In this paper, we introduce a comprehensive methodology for penetration testing specifically tailored to IVI systems in connected vehicles and demonstrate its applicability with the case study of testing the IVI Wi-Fi interface of a Volkswagen (VW) ID.3. We define a generic IVI model as the basis for specifying the test scope. The type, depth, and complexity of the tests to be performed can be determined using our proposed attacker model. This ensures that all relevant aspects are tested. Our methodology consists of seven phases and contains detailed descriptions of the tasks to be carried out in each phase. Following our methodology in the case study, we identified vulnerabilities in the VW IVI system that could allow attackers with Wi-Fi access to crash the system, access data, or manipulate volume settings,


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Penetration Testing of In-Vehicle Infotainment Systems in Connected Vehicles


    Beteiligte:
    Wieser, Hannah (Autor:in) / Schafer, Thomas (Autor:in) / KrauB, Christoph (Autor:in)


    Erscheinungsdatum :

    29.05.2024


    Format / Umfang :

    271062 byte





    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Elektronische Ressource


    Sprache :

    Englisch



    Modern infotainment systems in connected vehicles

    Hoheisel,D. / Bosch,Stuttgart,DE | Kraftfahrwesen | 2013


    Connected Infotainment HMI project - best practice for infotainment development

    Karlsson,G. / Albinsson,M. / Elliasson,J. et al. | Kraftfahrwesen | 2013


    CONNECTED VEHICLE SYSTEM WITH INFOTAINMENT INTERFACE FOR MOBILE DEVICES

    TIEMAN CRAIG ARNOLD | Europäisches Patentamt | 2023

    Freier Zugriff

    Connected vehicle system with infotainment interface for mobile devices

    TIEMAN CRAIG A | Europäisches Patentamt | 2019

    Freier Zugriff

    CONNECTED VEHICLE SYSTEM WITH INFOTAINMENT INTERFACE FOR MOBILE DEVICES

    TIEMAN CRAIG ARNOLD | Europäisches Patentamt | 2015

    Freier Zugriff