Modern vehicles integrate Internet of Things (IoT) components to bring value-added services to both drivers and passengers. These components communicate with the external world through different types of interfaces including the on-board diagnostics (OBD-II) port, a mandatory interface in all vehicles in the United States and Europe. While this transformation has driven significant advancements in efficiency and safety, it has also opened a door to a wide variety of cyberattacks, as the architectures of vehicles were never designed with external connectivity in mind, and accordingly, security has never been pivotal in the design. As standardized, the OBD-II port allows not only direct access to the internal network of the vehicle but also installing software on the Electronic Control Units (ECUs). While this privilege, historically, is achieved through physical access on the underlying port using a dedicated tool, remote access is recently supported in many modern vehicles, i.e., self-driving ones, and via OBD-II dongles, making the OBD-II port the most significant automotive interface that has to be secured. Motivated by various recent attacks and vulnerability analyses of OBD-II, this paper tackles the problem of lack of security in OBD-II by proposing a novel end-to-end role-based access control (RBAC) mechanism that would prevent unauthorized access to any of the vehicle functionality through existing vulnerable OBD-II ports. The proposed solution is AUTOSAR compliant and architecture independent, and does not require modifying any hardware inside the vehicle. Accordingly, it applies to the millions of current on-road vehicles. Furthermore, while physical attacks are not avoidable, they are not scalable, considering our approach, and only affect the attacked vehicle. We provide a proof of concept implementation and evaluation of the proposed solution, showing its robustness and efficiency.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Securing the On-Board Diagnostics Port (OBD-II) in Vehicles


    Weitere Titelangaben:

    Sae Int. J. Transp. Cyber. and Privacy


    Beteiligte:


    Erscheinungsdatum :

    2020-08-18


    Format / Umfang :

    24 pages




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch




    Securing Vehicles

    Dev Sarmah, Deepangshu | Springer Verlag | 2016

    Freier Zugriff

    Demo: Securing Heavy Vehicle Diagnostics

    Daily, Jeremy / Nnaji, David / Ettlinger, Ben | TIBKAT | 2021


    On-board diagnostics for off-road vehicles

    Merkisz,J. / Rychter,M. / Poznan Univ.of Technol.,PL | Kraftfahrwesen | 2003


    SECURING ACCESS TO VEHICLES

    GENNERMANN SVEN | Europäisches Patentamt | 2018

    Freier Zugriff

    SECURING DEVICE FOR VEHICLES

    FUENTES DOMINGO ISMAEL / IBANEZ FERRER JORDI | Europäisches Patentamt | 2020

    Freier Zugriff