Mathematical approaches to secure in-vehicle networks
Modern vehicles rely on numerous small computers called electronic control units (ECUs) that continually communicate life-critical messages, e.g., wheel speeds and steering angle, through a few controller area networks (CANs). Originally designed as a closed network for the life of the vehicle, CAN protocol developed bereft of security features (e.g., authentication or encryption). For emission testing, updates, and other diagnostics, vehicle CANs are now physically accessible, but this comes with vulnerability to cyber attack. Mandatory on-board diagnostic ports (OBD-II) provide adversaries with direct access to the vehicle. Remote attacks, e.g., via Bluetooth or cellular connections, are possible but require deep expertise. In short, the critical networks for vehicle functionality are exposed to remote and local cyber attacks with little to no built-in defenses. Most notably, the infamous 2015 research of Miller and Valasek exhibited a remote takeover of a Jeep’s brakes resulting in a massive recall and ample media coverage.