Diagnostic over Internet Protocol (DoIP) and Unified Diagnostic Services (UDS) are protocols used for diagnostic communications on in-vehicle Ethernet networks. These protocols effectively update large-scale vehicle software installed in Electronic Controller Units (ECUs) on in-vehicle networks. However, these protocols enable attackers to overwrite vehicle software with illegal software or take control of vehicles. Accordingly, attacks against DoIP and UDS have been evaluated. However, these studies have not evaluated attacks against UDS on DoIP. Besides, these studies have not assumed an attacker who can exploit DoIP-based communications to/from a tester. Thus, we analyze and evaluate attacks against UDS on DoIP by an attacker who can exploit DoIP-based communications to/from a tester. Our analysis reveals three attacks: an authentication avoidance attack and two types of man-in-the-middle based session hijacking. Moreover, our evaluation shows that these attacks can be demonstrated on a simulated in-vehicle network. We also propose countermeasures against these attacks.
Attacks Against UDS on DoIP by Exploiting Diagnostic Communications and Their Countermeasures
2021-04-01
2004365 byte
Aufsatz (Konferenz)
Elektronische Ressource
Englisch
Security concerns in communication with the connected car using DoIP
Kraftfahrwesen | 2011
|Einsatz von DoIP und MVCI D-PDU-API
Tema Archiv | 2010
|BASE | 2017
|Security concerns in communication with the connected car using DoIP
Tema Archiv | 2011
|Security Challenges for UAV Systems Communications: Potential Attacks and Countermeasures
Springer Verlag | 2023
|