Designers of automotive systems find themselves pulled in an impossible number of directions. Systems must use the most advanced security features, but at the same time run on low-cost and resource-constrained hardware. Ultimately, an engineering trade-off will eventually be made regarding how encryption and key management is used on these systems, potentially leaving them vulnerable to attack. In this paper, we detail the applicability of side-channel power analysis and fault injection on automotive electronic systems, showing how these dangerous techniques can be used to break an otherwise secure system. We build a small example network using AES-CCM to implement an encrypted, authenticated CAN protocol. We demonstrate how open-source hardware and software can easily recover the encryption keys from some of these nodes with side-channel power analysis, and we recover a full firmware image from one device with a fault-injection attack using the same tools. We also discuss how these attacks can be improved to bypass some common countermeasures and be applied against devices in the real world, bypassing security on in-vehicle communication or over-the-air firmware updates. With these demonstrations in mind, we emphasize the importance of using strong encryption and authentication keys with proper key management and distribution methods. We discuss methods for mitigating these side-channel and fault attacks, and we use these methods to provide guidelines for creating a system architecture that is secure against these hardware attacks.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Power Analysis and Fault Attacks against Secure CAN: How Safe Are Your Keys?


    Weitere Titelangaben:

    Sae Int. J. Transp. Cyber. and Privacy


    Beteiligte:
    O’Flynn, Colin (Autor:in) / d’Eon, Greg (Autor:in)


    Erscheinungsdatum :

    2018-02-14


    Format / Umfang :

    16 pages




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch




    Secure in-vehicle systems against Trojan attacks

    Yoshikawa, Masaya / Sugioka, Kyota / Nozaki, Yusuke et al. | IEEE | 2015


    DIGITAL KEYS AND SYSTEMS FOR PREVENTING RELAY ATTACKS

    BONNET JONATHAN / RENARD NICOLAS | Europäisches Patentamt | 2022

    Freier Zugriff

    Smarten your defences to guard against smart attacks

    British Library Online Contents | 2007



    Digital keys and systems for preventing relay attacks

    BONNET JONATHAN / RENARD NICOLAS | Europäisches Patentamt | 2022

    Freier Zugriff