In this work, we present an approach to support penetration tests by combining safety and security analyses to enhance automotive security testing. Our approach includes a new way to combine safety and threat analyses to derive possible test cases. We reuse outcomes of a performed safety analysis as the input for a threat analysis. We show systematically how to derive test cases, and we present the applicability of our approach by deriving and performing test cases for a penetration test of an automotive electronic control unit (ECU). Therefore, we selected an airbag control unit due to its safety-critical functionality. During the penetration test, the selected control unit was installed on a test bench, and we were able to successfully exploit a discovered vulnerability, causing the detonation of airbags.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Enhancement of Automotive Penetration Testing with Threat Analyses Results


    Additional title:

    Sae Int. J. Transp. Cyber. and Privacy


    Contributors:


    Publication date :

    2018-11-02


    Size :

    22 pages




    Type of media :

    Conference paper


    Type of material :

    Print


    Language :

    English




    Enhanced Penetration Testing for Automotive Cybersecurity

    Ebert, Christof / Ray, Ruschil / John, Jerome et al. | British Library Conference Proceedings | 2022


    Enhanced Penetration Testing for Automotive Cybersecurity

    Ebert, Christof / John, Jerome / Ray, Ruschil et al. | SAE Technical Papers | 2022


    Automotive Information Security: A threat with an end?

    Burton, S. / Ebert, C. / Amsler, K.-J. et al. | British Library Conference Proceedings | 2007



    Security Threat Analysis of Automotive Infotainment Systems

    Takahashi, Junko / Iwamura, Makoto / Tanaka, Masashi | IEEE | 2020