loading
Papers Papers/2022 Papers Papers/2022

Research.Publish.Connect.

Paper

Authors: Shuji Ohira 1 ; Kibrom Araya 1 ; Ismail Arai 2 and Kazutoshi Fujikawa 2

Affiliations: 1 Graduate School of Science and Technology, Nara Institute of Science and Technology, Ikoma 630-0192, Japan ; 2 Information Initiative Center, Nara Institute of Science and Technology, Ikoma 630-0192, Japan

Keyword(s): Automotive Security, Controller Area Network, Intrusion Prevention System, Operation System Kernel, Loadable Kernel Module.

Abstract: Cyberattacks on In-Vehicle Networks (IVNs) are becoming the most urgent issue. The Controller Area Network (CAN), one of the IVNs, is a standard protocol for automotive networks. Many researchers have tackled the security issues of CAN, such as the vulnerability of Denial-of-Service (DoS) attacks and impersonation attacks. Though existing methods can prevent DoS attacks, they have problems in deployment cost, isolability of a compromised Electronic Control Unit (ECU), and traceability for the root cause of isolation. Thus, we tackle to prevent DoS attacks on CAN. To solve these problems of the existing methods, we propose an isolable and traceable CAN-bus kernel-level protection called IVNPROTECT. IVNPROTECT can be installed on an ECU, which has a wireless interface, just by the software updating because it is implemented in the CAN-bus kernel driver. We also confirm that our IVNPROTECT can mitigate two types of DoS attacks without distinguishing malicious/benign CAN identifie rs. After mitigating DoS attacks, IVNPROTECT isolates a compromised ECU with a security error state mechanism, which handles security errors in IVNPROTECT. And, we evaluate the traceability that an ECU with IVNPROTECT can report warning messages to the other ECUs on the bus even while being forced to send DoS attacks by an attacker. In addition, the overhead of IVNPROTECT is 9.049 µs, so that IVNPROTECT can be installed on insecure ECUs with a slight side-effect. (More)

CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 44.210.236.0

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Ohira, S.; Araya, K.; Arai, I. and Fujikawa, K. (2023). IVNPROTECT: Isolable and Traceable Lightweight CAN-Bus Kernel-Level Protection for Securing in-Vehicle Communication. In Proceedings of the 9th International Conference on Information Systems Security and Privacy - ICISSP; ISBN 978-989-758-624-8; ISSN 2184-4356, SciTePress, pages 17-28. DOI: 10.5220/0011605300003405

@conference{icissp23,
author={Shuji Ohira. and Kibrom Araya. and Ismail Arai. and Kazutoshi Fujikawa.},
title={IVNPROTECT: Isolable and Traceable Lightweight CAN-Bus Kernel-Level Protection for Securing in-Vehicle Communication},
booktitle={Proceedings of the 9th International Conference on Information Systems Security and Privacy - ICISSP},
year={2023},
pages={17-28},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011605300003405},
isbn={978-989-758-624-8},
issn={2184-4356},
}

TY - CONF

JO - Proceedings of the 9th International Conference on Information Systems Security and Privacy - ICISSP
TI - IVNPROTECT: Isolable and Traceable Lightweight CAN-Bus Kernel-Level Protection for Securing in-Vehicle Communication
SN - 978-989-758-624-8
IS - 2184-4356
AU - Ohira, S.
AU - Araya, K.
AU - Arai, I.
AU - Fujikawa, K.
PY - 2023
SP - 17
EP - 28
DO - 10.5220/0011605300003405
PB - SciTePress