Diagnostic over Internet Protocol (DoIP) and Unified Diagnostic Services (UDS) are protocols used for diagnostic communications on in-vehicle Ethernet networks. These protocols effectively update large-scale vehicle software installed in Electronic Controller Units (ECUs) on in-vehicle networks. However, these protocols enable attackers to overwrite vehicle software with illegal software or take control of vehicles. Accordingly, attacks against DoIP and UDS have been evaluated. However, these studies have not evaluated attacks against UDS on DoIP. Besides, these studies have not assumed an attacker who can exploit DoIP-based communications to/from a tester. Thus, we analyze and evaluate attacks against UDS on DoIP by an attacker who can exploit DoIP-based communications to/from a tester. Our analysis reveals three attacks: an authentication avoidance attack and two types of man-in-the-middle based session hijacking. Moreover, our evaluation shows that these attacks can be demonstrated on a simulated in-vehicle network. We also propose countermeasures against these attacks.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Attacks Against UDS on DoIP by Exploiting Diagnostic Communications and Their Countermeasures




    Publication date :

    2021-04-01


    Size :

    2004365 byte





    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Einsatz von DoIP und MVCI D-PDU-API

    Thom, Volker | Tema Archive | 2010


    Security concerns in communication with the connected car using DoIP

    Kleberger,P. / Javaheri,A. / Izosimov,V. et al. | Automotive engineering | 2011



    Security concerns in communication with the connected car using DoIP

    Kleberger, Pierre / Javaheri, Asrin / Izosimov, Viacheslav et al. | Tema Archive | 2011


    Security Challenges for UAV Systems Communications: Potential Attacks and Countermeasures

    BinSaeedan, Wojdan / Aldawsari, Atheer / Alhussain, Laila et al. | Springer Verlag | 2023