READ: Reverse engineering of automotive data frames

M Marchetti, D Stabili - IEEE Transactions on Information …, 2018 - ieeexplore.ieee.org
IEEE Transactions on Information Forensics and Security, 2018ieeexplore.ieee.org
Security analytics and forensics applied to in-vehicle networks are growing research areas
that gained relevance after recent reports of cyber-attacks against unmodified licensed
vehicles. However, the application of security analytics algorithms and tools to the
automotive domain is hindered by the lack of public specifications about proprietary data
exchanged over in-vehicle networks. Since the controller area network (CAN) bus is the de-
facto standard for the interconnection of automotive electronic control units, the lack of public …
Security analytics and forensics applied to in-vehicle networks are growing research areas that gained relevance after recent reports of cyber-attacks against unmodified licensed vehicles. However, the application of security analytics algorithms and tools to the automotive domain is hindered by the lack of public specifications about proprietary data exchanged over in-vehicle networks. Since the controller area network (CAN) bus is the de-facto standard for the interconnection of automotive electronic control units, the lack of public specifications for CAN messages is a key issue. This paper strives to solve this problem by proposing READ: a novel algorithm for the automatic Reverse Engineering of Automotive Data frames. READ has been designed to analyze traffic traces containing unknown CAN bus messages in order to automatically identify and label different types of signals encoded in the payload of their data frames. Experimental results based on CAN traffic gathered from a licensed unmodified vehicle and validated against its complete formal specifications demonstrate that the proposed algorithm can extract and classify more than twice the signals with respect to the previous related work. Moreover, the execution time of signal extraction and classification is reduced by two orders of magnitude. Applications of READ to CAN messages generated by real vehicles demonstrate its usefulness in the analysis of CAN traffic.
ieeexplore.ieee.org
以上显示的是最相近的搜索结果。 查看全部搜索结果