The In-Vehicle Infotainment (IVI) system of a modern connected vehicle is a critical attack point and must be thoroughly tested. In this paper, we introduce a comprehensive methodology for penetration testing specifically tailored to IVI systems in connected vehicles and demonstrate its applicability with the case study of testing the IVI Wi-Fi interface of a Volkswagen (VW) ID.3. We define a generic IVI model as the basis for specifying the test scope. The type, depth, and complexity of the tests to be performed can be determined using our proposed attacker model. This ensures that all relevant aspects are tested. Our methodology consists of seven phases and contains detailed descriptions of the tasks to be carried out in each phase. Following our methodology in the case study, we identified vulnerabilities in the VW IVI system that could allow attackers with Wi-Fi access to crash the system, access data, or manipulate volume settings,


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Penetration Testing of In-Vehicle Infotainment Systems in Connected Vehicles


    Contributors:


    Publication date :

    2024-05-29


    Size :

    271062 byte





    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Modern infotainment systems in connected vehicles

    Hoheisel,D. / Bosch,Stuttgart,DE | Automotive engineering | 2013


    Connected Infotainment HMI project - best practice for infotainment development

    Karlsson,G. / Albinsson,M. / Elliasson,J. et al. | Automotive engineering | 2013


    CONNECTED VEHICLE SYSTEM WITH INFOTAINMENT INTERFACE FOR MOBILE DEVICES

    TIEMAN CRAIG ARNOLD | European Patent Office | 2023

    Free access

    Connected vehicle system with infotainment interface for mobile devices

    TIEMAN CRAIG A | European Patent Office | 2019

    Free access

    CONNECTED VEHICLE SYSTEM WITH INFOTAINMENT INTERFACE FOR MOBILE DEVICES

    TIEMAN CRAIG ARNOLD | European Patent Office | 2015

    Free access