In this work, we present an approach to support penetration tests by combining safety and security analyses to enhance automotive security testing. Our approach includes a new way to combine safety and threat analyses to derive possible test cases. We reuse outcomes of a performed safety analysis as the input for a threat analysis. We show systematically how to derive test cases, and we present the applicability of our approach by deriving and performing test cases for a penetration test of an automotive electronic control unit (ECU). Therefore, we selected an airbag control unit due to its safety-critical functionality. During the penetration test, the selected control unit was installed on a test bench, and we were able to successfully exploit a discovered vulnerability, causing the detonation of airbags.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Enhancement of Automotive Penetration Testing with Threat Analyses Results


    Weitere Titelangaben:

    Sae Int. J. Transp. Cyber. and Privacy


    Beteiligte:


    Erscheinungsdatum :

    2018-11-02


    Format / Umfang :

    22 pages




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch




    Enhanced Penetration Testing for Automotive Cybersecurity

    Ebert, Christof / Ray, Ruschil / John, Jerome et al. | British Library Conference Proceedings | 2022


    Enhanced Penetration Testing for Automotive Cybersecurity

    Ebert, Christof / John, Jerome / Ray, Ruschil et al. | SAE Technical Papers | 2022


    Automotive Information Security: A threat with an end?

    Burton, S. / Ebert, C. / Amsler, K.-J. et al. | British Library Conference Proceedings | 2007


    Security Threat Analysis of Automotive Infotainment Systems

    Takahashi, Junko / Iwamura, Makoto / Tanaka, Masashi | IEEE | 2020


    The chinese automotive industry chance or threat

    Deicke,A. / Brilliance Auto Res.a.Dev.,BARC,CN | Kraftfahrwesen | 2014