Secure boot, although known for more than 20 years, frequent attacks from hackers that show numerous ways to bypass the security mechanism, including electronic control units (ECUs) of the automotive industry. This paper investigates the major causes of security weaknesses of secure boot implementations. Based on penetration test experiences, we start from an attacker’s perspective to identify and outline common implementation weaknesses. Then, from a Tier-One perspective, we analyze challenges in the research and development process of ECUs between original equipment manufacturers (OEMs) and suppliers that amplify the probability of such weakness. The paper provides recommendations to increase the understanding of implementing secure boot securely on both sides and derives a set of reference requirements as a starting point for secure boot ECU requirements.


    Zugriff

    Zugriff prüfen

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Secure Boot Revisited: Challenges for Secure Implementations in the Automotive Domain


    Weitere Titelangaben:

    Sae Int. J. Transp. Cyber. and Privacy


    Beteiligte:
    Kaneti, Liron (Autor:in) / Stöttinger, Marc (Autor:in) / Böhner, Martin (Autor:in) / Sanwald, Steffen (Autor:in)


    Erscheinungsdatum :

    13.08.2020


    Format / Umfang :

    13 pages




    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch





    Secure boot of Embedded Applications - A Review

    Rashmi, RV / Karthikeyan, A | IEEE | 2018


    Secure automotive system

    Europäisches Patentamt | 2022

    Freier Zugriff

    Secure Boot Implementation for Hard Real-Time Powertrain System

    Kim, Daehyun / Shin, Eunho / Park, Jin Seo et al. | British Library Conference Proceedings | 2017


    Secure Boot Implementation for Hard Real-Time Powertrain System

    Kim, Daehyun / Shin, Eunho / Park, Jin Seo et al. | SAE Technical Papers | 2017