Dynamic Can Message Routing For Enhanced Security
2022-01-0124
03/29/2022
- Content
- Over the years automobiles have increased complexity in terms of number of sensors and ECU’s handling these sensor input. Existing vehicles have more than 100 ECUs working and communicating with each other [1]. Some of the luxury vehicles have more than 150 ECU’s [1] to provide high level of technical sophistication which is being expected by drivers. Introduction of autonomous vehicles has increased demand for more secured vehicles to address security concerns associated with new technology and high cost of error. CAN bus is unsecured, open type of network. Every node/ECU on bus can have access to all data transported on bus. This exposes major security vulnerability for message interpretation and spoofing. ECU may be connected on bus as pass through device interpreting messages flowing between ECU’s. Other type of challenging attack on CAN bus is in the form of Denial Of Service (DOS) attack. In another type of attack hacker can connect a rogue ECU on the bus and may try to spoof messages on bus. This paper proposes and discusses a new defense mechanism against message spoofing of CAN messages. Standard data encoding methods such as RSA, SSL used in enterprise network security cannot be easily adopted to CAN messages/bus. A single CAN message is small in size for these encoding methods to operate and also more overhead is involved in handling these higher layer protocols [2]. Existing solutions for the secured CAN communication are more focused towards detection of the breach and also on some level of predictive approaches [3]. Other solutions proposed were mainly based on adapting to new kind of bus technology like FlexRay which can isolate a node when a misbehaving node has been identified [4].
- Citation
- Kulkarni, A., "Dynamic Can Message Routing For Enhanced Security," SAE Technical Paper 2022-01-0124, 2022, .