Browse Topic: Cybersecurity

Items (347)
Find
A Dynamic Cybersecurity Benchmarking Framework for Automotive Cyber-Physical Systems2026-26-06121/16/2026
As the automotive industry accelerates towards greater connectivity and automation, ensuring robust cybersecurity has become a critical priority, especially in emerging markets like India. This paper introduces a comprehensive framework designed to assess and enhance the cybersecurity of production-ready vehicles, with a particular focus on addressing the unique challenges posed by both domestic and international markets. The proposed system combines advanced threat modeling, vulnerability assessment, and dynamic evaluation techniques to continuously monitor and quantify a vehicle’s cybersecurity posture throughout its lifecycle. In the Indian context, where the automotive market is rapidly evolving and the adoption of connected and automated vehicles is on the rise, the need for tailored cybersecurity measures is particularly pressing. By evaluating the impact of cyber threats on safety, data privacy, financial risks, and vehicle functionality, the system generates a detailed
Shah, Ravindra, Awasthi, Vibhu Vaibhav, Karle, Ujjwala
Securing the Future of Electric Vehicle Charging: Identifying and Mitigating Cybersecurity Vulnerabilities2026-26-06141/16/2026
This paper examines the key security vulnerabilities present in modern EV charging infrastructure, with a focus on the potential threats to payment systems, communication protocols, physical security, and data privacy. In particular, it looks at the vulnerabilities associated with unencrypted communication, the risks of unauthorized access to charging stations, and the potential for denial-of-service (DoS) attacks. As the global adoption of electric vehicles (EVs) accelerates, the importance of a secure and reliable EV charging infrastructure becomes paramount. However, the expansion of charging stations and the growing integration of smart technologies introduce significant cybersecurity risks that must be addressed to ensure the safety, privacy, and reliability of the network. In addition to discussing emerging risks in relation to new technologies, such as Vehicle-to-Grid (V2G) systems, and outlining the necessity of industry-wide collaboration and the development of standardized
Aggarwal, Akshit, Gupta, Saurabh, Sirohi, Kapil, Arisetty, Venkatesh, Chatterjee lng, Avik
Considerations for Vulnerability Management in the Automotive Industry2026-26-06261/16/2026
With the emergence of Software-Defined Vehicles (SDVs), more complex software and connectivity technologies are introduced to support new advanced use cases. These use cases include, e.g., phone as a key, smart parking, summon vehicle, remote diagnostics and vehicle management. However, complex software functionality and external connectivity also increase the attack surface of vehicles and its ecosystem. As such we have seen various cybersecurity attacks targeting vehicles and OEM backends in the past few years. In this paper, we first perform a classification of recent automotive cybersecurity attacks. We further perform an analysis of these attacks and associated vulnerabilities considering the application of best practices of vulnerability management approaches including Common Vulnerability Scoring System (CVSS), Exploit Prediction Scoring System (EPSS), and Stakeholder-Specific Vulnerability Categorization (SSVC). CVSS is a standardized framework used to assign severity scores to
Oka, Dennis Kengo, Vadamalu, Raja Sangili
RAKSH: A Blockchain Derived In-Vehicle Key Management System2026-26-06201/16/2026
Modern cars have advanced significantly with the rapid growth of connectivity and communication technologies. In the wake of rising cyberattacks and enforcement of regulations, implementation of cybersecurity is imperative to safeguard vehicles. The cybersecurity controls such as secure boot, secure updates, secure communication require cryptographic primitives (keys/certificates). These security features are largely dependent on robust Key Management System (KMS), as keys are the sensitive assets that must be protected throughout the lifecycle of vehicle. Several security critical applications like over-the-air and car-to-car interaction essentially needs robust KMS to protect the vehicle assets from expanding attack vector. Traditionally KMS is established centrally in a backend server. The cloud based KMS is becoming complex due to increased number of keys/certificates required to provision in a vehicle. We propose a self-governing in-vehicle key management system for a gateway
Goyal, Yogendra, Sutar, Swapnil, Jaisingh, Sanjay
MOSAIC-TARA: A Comprehensive TARA Methodology for Automotive Cybersecurity2026-26-06091/16/2026
Threat Analysis and Risk Assessment (TARA) is a continuous activity, acting as a foundation of cybersecurity analysis for electrical and electronics automotive products. Existing TARA methodologies in the automotive domain exhibits challenges due to redundant and manual processes, particularly in handling recurring common assets across Electronic Control Units (ECUs) and functional domains. Two primary approaches observed for performing TARA are Manual-Asset-Centric TARA and Catalogue-Driven TARA. Manual-Asset Centric TARA is constructed from scratch by manually identifying the assets, calculating risks by likelihood, and impact determination. Catalogue-Driven TARA utilizes the precompiled likelihood and impact against identified assets. Both approaches lack standardized and modular mechanisms for abstraction and reuse. This results in poor scalability, increased efforts, and difficulty in maintaining consistency across vehicle platforms. The proposed method in this research overcomes
Goyal, Yogendra, Sinha, Swati, Sutar, Swapnil, Jaisingh, Sanjay
Enhancing Engine Reliability Testing with IoT, AI and ML: Real-Time ML-based Limit Monitoring and Predictive Maintenance with IoT sensor2026-26-06471/16/2026
The integration of Internet of Things (IoT), Artificial Intelligence (AI), and Machine Learning (ML) has transformed various industries, offering substantial benefits. The application of these technologies in engine reliability testing has immense potential as they offer real-time monitoring and analysis of engine performance parameters. Engine reliability testing is vital for ensuring the safety, efficiency, and longevity of engines. Traditional methods are time consuming, expensive, and rely heavily on manual inspection and data analysis. This paper shows how IoT, AI and ML technologies can greatly enhance the efficiency of engine reliability testing. The paper includes the following case studies: 1. ML-based Limit Monitoring for test data: With the help of machine learning models, we monitor the Engine health by comparing predicted and measured values during real-time testing. Intelligent algorithms predict and compare values, detect anomalies, and identify root causes in real-time
Yadav, Sanjay Kumar, kumar, prabhakar, R, Dinesh, Joon, Sushant, Rai, Ayush, Tripathi, Vinay Mani
Next-Gen Automotive: Enablers and Monetization for Automotive SaaS and Software Defined Vehicles2026-26-06871/16/2026
The automotive industry is undergoing a paradigm shift, changing its model from hardware-centric products to software-driven platforms. It is driven by two underlying paradigms: the emergence of Software-Defined Vehicles (SDVs) and the increasing adoption of Automotive Software-as-a-Service (SaaS) models. Together, these trends are transforming the way the industry generates value, engages with customers, and builds new revenue models. This research examines the most important technical pillars underpinning next-generation automotive ecosystem creation. Of these pillars, centralized computing infrastructures, embedded cloud integration, efficient over-the-air (OTA) update engines, and enhanced cybersecurity models designed to protect larger numbers of connected vehicles are observed. It also evaluates the imperative significance of digital identity management to provide improved personalized experience, the critical role of edge computing to ensure real-time processing, and the promise
Saini, Gourav, Jahagirdar, Shweta, Khandekar, Dhiraj Baburao
Implementation of Automotive Cybersecurity Assurance Level2026-26-06241/16/2026
This paper explores the implementation of ISO-21434 Automotive Cybersecurity Assurance Levels (CAL), focusing on enhancing component level cybersecurity for a vehicle. CAL values, which range from 1 to 4, provide a metric for ensuring that assets are protected against relevant threats at various phases of the Software Development Life Cycle (SDLC). By identifying potential attack vectors and their severity early in the SDLC, specifically during the Concept phase of ISO 21434, organizations can determine the CAL values. The CAL value serves as a benchmark to determine the level of severity required during the design, development, and verification phases of the SDLC. This paper outlines a method to establish CAL values as per ISO-21434 guidelines. The proposed methodology includes a detailed analysis of threat modeling, which is crucial for identifying and mitigating potential cybersecurity risks. By conducting threat modeling, organizations can systematically assess vulnerabilities and
Ghosh, Subham, Khader Batcha, Jashic
Automotive Cybersecurity Regulatory Framework2026-26-06251/16/2026
During the last few years, cybersecurity has become one of the key aspects in the automotive industry to ensure the safety and security of vehicles throughout their lifecycle. The implementation of new technologies and the goal of deploying fully automated vehicles in the not-so-distant future have created new needs regarding vehicle safety. As the automotive industry shifts toward automated and connected vehicles, the possibility of cyberattacks emerges as a significant concern. To address these challenges, different regulatory bodies and governments worldwide have developed or are developing a new set of regulations and standards with varying approaches to legislate or standardize the minimum criteria that manufacturers must follow to ensure security against potential attacks, adding requirements to ensure the cybersecurity of the vehicles at all levels. At the United Nations level, UN Regulation 155 was introduced in 2021, establishing requirements for manufacturers' cybersecurity
Flix, Oriol, Lujan Tutusaus, Carlos, Hidalgo, Justin
Navigating the Field of Automotive Cybersecurity Relevant Regulations2026-26-06231/16/2026
In recent years many automotive cybersecurity relevant regulations have been released and some have already started to come into effect. Moreover, some other regulations will come into effect in the next few years. These regulations provide requirements and guidance to automotive organizations with different degree of specifics. In this paper, we review a number of different cybersecurity relevant regulations such as UNR 155, UNR 156, AIS 189, AIS 190, GB 44495, GB 44496, EU Cyber Resilience Act, 15 CFR Part 791. We break down and categorize these regulations based on their scope and highlight key areas relevant to different teams within the organizations. These key areas include cybersecurity management system (CSMS), software update management system (SUMS), secure software development and software supply chain security, continuous cybersecurity activities (monitoring, incident response), and vulnerability disclosure and management. We then map responsibilities from the regulations
Oka, Dennis Kengo, Vadamalu, Raja Sangili
Cybersecurity in Automotive OTA Update Systems and Software Store2026-26-06211/16/2026
Automotive Over-the-Air (OTA) software updating has become a cornerstone of the modern connected vehicle, enabling manufacturers to remotely deploy bug fixes, security patches, and new features. However, this convenience comes with significant cybersecurity challenges. This paper provides a detailed examination of automotive OTA update security and the associated software store (software Applications & services store) mechanisms. I discuss the current industry standards and regulations - notably ISO/SAE 21434 and the United Nations Economic Commission for Europe (UNECE) regulations UN R155 (cybersecurity) and UN R156 (software updates) - and explain their relevance to secure OTA and software update management. I then explore the Uptane framework, an open and widely-adopted architecture specifically designed to secure automotive OTA updates. Next, OTA-specific threat models are analyzed, detailing potential attack vectors (such as malicious update injection, man-in-the-middle attacks
Kurumbudel, Prashanth Ram
"Automotive Cybersecurity: Regulatory Landscape, Type Approval, and the Road Ahead"2026-26-02461/16/2026
Effective communication is the key for bringing harmony - be it the communication between humans and humans, or communication between machine and machine. Today’s car is a sophisticated gadget, equipped with the best of technologies running using millions of lines of codes of software. The effective use of these technologies involve communication between car to car and car to infrastructure using Dedicated Short Range Communication (DSRC), C-V2X (Cellular Vehicle-to-Everything). It is pertinent that any communication using the internet needs to be digitally secure and that the systems are designed to mitigate the perceived threats. The methods used for ensuring cyber safety of automobiles need to be verified before the end product is put to use. Automotive Industry Standards AIS-189 and AIS-190 have been formulated to provide a harmonized verification framework. Both the vehicle manufacturer and the test agency need to equip themselves with necessary skills and tools to ensure
Nayak, Pratik, Tandon, Vikram, Badusha, Akbar, Desai, Manoj, Sathianesan, Rejin
Cybersecurity threats for connected passenger EV Buses of state transport units in India.2026-26-06101/16/2026
There are several chances to enhance fleet management, passenger safety, and operational efficiency by integrating connected technology into electric passenger buses, especially in Indian state transport agencies. But this connectivity also brings with it a fresh set of cybersecurity threats that might jeopardize these cars' dependability and security. With an emphasis on India's state-run bus fleets, this study examines the cybersecurity risks unique to connected electric vehicles (EVs) utilized for public transportation. Vehicle-to-vehicle (V2V), vehicle-to-infrastructure (V2I), and fleet management communication systems are examined for key vulnerabilities. Potential attack vectors are highlighted, including data interception, GPS spoofing, unauthorized access, and cyberattacks on charging stations. We also look at how these cybersecurity threats affect public safety, operational disruptions, and passenger privacy. This paper also assesses the difficulties Indian state transport
Mokhare, Devendra Ashok
Real-time Intrusion Detection System (IDS) for Vehicle Networks Using Machine Learning for Predictive Threat Analysis2026-26-06171/16/2026
The rapid adoption of connected vehicle technologies and advanced driver assistance systems (ADAS) necessitates robust security mechanisms capable of identifying and mitigating sophisticated cyber threats in real-time. Traditional signature-based intrusion detection systems (IDS) are often inadequate in addressing the dynamic and evolving nature of automotive cybersecurity threats, particularly in modern vehicle networks like Controller Area Network (CAN), CAN with Flexible Data-Rate (CAN-FD), and Automotive Ethernet. This research introduces a novel Real-time Intrusion Detection System utilizing advanced Machine Learning (ML) techniques designed specifically for automotive network environments. The proposed IDS framework employs supervised and unsupervised ML algorithms, including anomaly detection, behavioral analytics, and predictive threat modeling, to achieve high accuracy and rapid threat identification capabilities. Through extensive testing in simulated and actual vehicle
chaudhary lng, Vikash, Desai, Manoj, Chatterjee, Avik
A Quality-Driven Approach to Engineering Sign-Off for Software and Robust Product Development2026-26-05811/16/2026
This abstract outline a paper detailing the development and implementation of a comprehensive framework designed to enhance the quality and governance of the product development process in the automotive industry. As the sector undergoes significant transformation—driven by electrification, autonomous systems, and increasing regulatory and customer expectations—the need for structured development approach and robust oversight has become critical to success. The paper introduces a newly developed framework for Final Data Judgment (FDJ) and Engineering Sign-Off (ESO), representing a next-generation strategy to defect free design, robust engineering quality management and product maturity assurance. This methodology emphasizes customer-centric deliverables, risk-based assessments, and technical rigor to minimize post-SOP issues and ensure alignment with end-user expectations. The approach prioritizes end-user impact by embedding rigorous quality checkpoints that align engineering outputs
Digikar, Ashish, PATHAK, ISHA, Kothari, Bhushan
GTSRB-Shield: A Novel Machine Learning Framework for Intrusion Detection in Autonomous Vehicles Leveraging the German Traffic Sign Recognition Benchmark2026-26-06111/16/2026
The escalating dependence of Autonomous Vehicles on Intelligent Transportation Systems (ITS) has highlighted the imperative for comprehensive security protocols to safeguard such vehicles against cyber threats. Intrusion Detection Systems (IDS’s) are pivotal in ensuring the protection of these systems by detecting and alleviating unauthorized access and nefarious activities. The German Traffic Sign Recognition Benchmark (GTSRB) database, which encompasses an extensive compilation of traffic sign imagery, functions as a vital asset for the advancement of machine learning-based IDS. This research elucidates an intrusion detection system (IDS) that employs machine learning algorithms to scrutinize the GTSRB database. The proposed IDS emphasize the preprocessing of the GTSRB dataset to extricate pertinent features that can be employed for the training of machine learning models. Research also focuses on model development with machine learning algorithms to classify traffic signs and
Patil, Kamalesh, Akbar Badusha, A., Jadhav, Savitri, Gunale, Kishanprasad
Software-Defined Vehicles: Architecting the Future of Intelligent and Connected Mobility2026-26-06911/16/2026
The rise of Software-Defined Vehicles (SDVs) marks a fundamental shift in automotive design, where software, rather than hardware, defines vehicle capabilities. This review explores the SDV paradigm within Intelligent Transportation Systems (ITS), emphasizing centralized computing, over-the-air (OTA) updates, and service-oriented architectures (SOA). Key enablers such as high-performance computing units, middleware platforms (e.g., AUTOSAR Adaptive), and digital twins support scalable, flexible software deployment and real-time functionality. Artificial Intelligence (AI) and Machine Learning (ML) enhance features like predictive maintenance, driver personalization, and autonomous decision-making. However, SDVs also introduce complex challenges, including software validation, real-time performance, and system interoperability. Cybersecurity becomes critical, especially as vehicles interface with cloud platforms, edge computing, and Vehicle-to-Everything (V2X) networks. The paper also
Ahmad, Aqueel, Hemanth, Khimavath, Kumar, Om, Kumar, Rajiv, Haregaonkar, Rushikesh Sambhaji
Resilient Design Strategies for Wireless Charger ECUs: A Proactive Threat Analysis and Risk Assessment Framework for Ensuring Cybersecurity in EV Charging Ecosystems2026-26-01731/16/2026
The goal of Automotive cybersecurity is safety, reliability, confidentiality and authenticity. As the automotive industry grows smarter, so too do the cybersecurity protocols used to protect vehicles from malicious actors. Automotive cybersecurity secures communication networks, electronic systems, software and data collected by the new wave of intelligent cars The paper describes the cyber security threats its analysis ion wireless charging
Uthaman, Sreekumar, Mulay, Abhijit B, Gadekar, Pundlik
Post-EOL Cybersecurity Validation for Automotive Production ECUs2026-26-06081/16/2026
ISO/SAE 21434 emphasizes comprehensive cybersecurity risk management throughout the automotive lifecycle. However, specific guidance on validating cybersecurity measures at the production level remains limited. This paper addresses the gap in production-stage validation, particularly after End-of-Line (EOL) flashing, which includes configurations of security hardware and software protection (e.g., UCB confirmation, JTAG, and P-flash password settings). Problem articulation: Current automotive cybersecurity validation methods, despite adherence to ISO/SAE 21434, lack specific procedures for the production stage. The existing system-level validation using the ASPICE V-model (e.g., SWE.6, SYS.5) does not ensure the integrity and functionality of cybersecurity features in the final manufactured unit post-EOL flashing. This gap poses a risk of vulnerabilities being introduced during the EOL process, compromising critical security measures. Proposed solution: To mitigate the cybersecurity
Chakraborty, Sucheta, Kulanthaisamy, Nagarajan, Sankar, Ganesh
Automotive Cybersecurity Incident Response (CSIR) Framework and Its Integration into OEM Processes2026-26-06131/16/2026
The exponential growth of connected and autonomous vehicles has significantly escalated cybersecurity threats, compelling automotive Original Equipment Manufacturers (OEMs) to adopt robust and structured Cybersecurity Incident Response (CSIR) capabilities. Current automotive cybersecurity regulations, such as AIS 189 in India and UNECE WP.29 globally, mandate precise frameworks for proactive threat detection, timely response, and comprehensive incident documentation. This research presents an innovative, comprehensive CSIR framework specifically tailored to integrate seamlessly into OEM cybersecurity management processes. Leveraging a combination of real-time monitoring systems, structured threat categorization methodologies, and integrated escalation and communication protocols, the proposed CSIR framework ensures efficient incident handling aligned with stringent regulatory compliance. The framework encompasses advanced methodologies including Vehicle Security Operations Center (VSOC
chaudhary lng, VIKASH, Desai, Manoj, Chatterjee, Avik, Chatterjee lng, Avik
Feasibility and Performance of Post-Quantum Cryptography on Embedded Systems for Two-Wheeler Security2026-26-06221/16/2026
The proliferation of connectivity features (V2X, OTA updates, diagnostics) in modern two-wheelers significantly expands the attack surface, demanding robust security measures. However, the anticipated arrival of quantum computers threatens to break widely deployed public-key cryptography (RSA, ECC), rendering current security protocols obsolete. This paper addresses the critical need for quantum-resistant security in the automotive domain, specifically focusing on the unique challenges of two-wheeler embedded systems. This work presents an original analytical and experimental evaluation of implementing selected Post-Quantum Cryptography (PQC) algorithms, primarily focusing on NIST PQC standardization candidates (e.g., lattice-based KEMs/signatures like Kyber/Dilithium), on microcontroller platforms representative of those used in two-wheeler Electronic Control Units (ECUs) – typically ARM Cortex-M series devices characterized by limited computational power, memory (RAM/ROM), and strict
Mishra, Abhigyan
Proactive AI-Enhanced Cybersecurity for Next-Gen Automotive Infotainment ECU2026-26-06191/16/2026
Abstract With the rapid advancement of connected vehicle technologies, infotainment Electronic Control Units (ECUs) have become central to user interaction and connectivity within modern vehicles. However, this enhanced functionality has introduced new vulnerabilities to cyberattacks. This paper explores the application of Artificial Intelligence (AI) in enhancing the cybersecurity framework of infotainment ECUs. The study introduces AI-powered modules for threat detection and response, presents an integrated architecture, and validates performance through simulation using MATLAB, CANoe, and NS-3. This approach addresses real-time intrusion detection, anomaly analysis, and voice command security. Key benefits include zero-day exploit resistance, scalability, and continuous protection via OTA updates. The paper references real-world automotive cyberattack cases such as Tesla's OTA vulnerability patches, BMW ConnectedDrive exploits, and Jeep Cherokee's Uconnect hack, emphasizing the
More, Shweta, Kulkarni, Shraddha, Kumar, Priyanshu, GHANWAT, HEMANT, Joshi, Vivek
Automotive Cybersecurity: Safeguarding Connected and Autonomous Mobility2026-26-06291/16/2026
As vehicles transform into complex cyber-physical systems within Intelligent Transportation Systems (ITS), automotive cybersecurity has become a foundational pillar in securing safe, reliable, and trustworthy transportation. This paper examines cybersecurity challenges in connected and autonomous vehicles (CAVs), focusing on Vehicle-to-Everything (V2X) communications technologies, including Vehicle-to-Vehicle (V2V), Vehicle-to-Infrastructure (V2I), and Vehicle-to-Pedestrian (V2P) and critical systems like electronic control units (ECUs), battery management units (BMUs), and sensor fusion modules. Key vulnerabilities, such as remote hacking, denial-of-service (DoS) attacks, malware injection, and data breaches, threaten vehicle functionality, passenger safety, and privacy. Key protection mechanisms, including encryption, intrusion detection systems (IDS), cryptographic protocols, secure over-the-air (OTA) updates, and Advanced Artificial Intelligence (AI) and Machine Learning (ML
Kumar, Om, Kumar, Rajiv, Sankar M, Gopi, Haregaonkar, Rushikesh Sambhaji
Security monitoring for High Performance Vehicle Computers2026-26-06271/16/2026
With the increasing connectivity of modern vehicles, cybersecurity threats have become a critical concern. Intrusion Detection Systems (IDS) play a vital role in securing in-vehicle networks and embedded vehicle computers from malicious attacks. This presentation shares about an IDS framework designed specifically for POSIX-based operating systems used in vehicle computers, leveraging system-level monitoring, anomaly detection, and signature-based methods to identify potential security breaches. The proposed IDS integrates lightweight behavioral analysis to ensure minimal computational overhead while effectively detecting unauthorized access, privilege escalation, communication interface monitoring etc. By employing a combination of rules and systems datapoints, the system enhances threat detection accuracy without compromising real-time performance. Practical series deployments demonstrate the effectiveness of this approach in mitigating cyber threats in automotive environments
Shukla, Siddharth, Chatterjee lng, Avik
SAE TOMORROW TODAY: Simulating Off-Road Autonomy in Combat135083/27/2025
As warfare becomes more technologically advanced, the military requires a "one-to-many" system that allows one operator to control a fleet of air, ground, and surface-level assets. This type of technology can also support industries like construction that may be experiencing labor shortages. To bring these visions to reality, there is a critical need for a virtual environment to stress-test autonomous systems and ensure they are secure. Enter Neya Systems, a wholly owned subsidiary of Applied Research Associates that is committed to advancing the field of unmanned systems through a robust simulation platform and expertise in autonomy, computer vision, and cybersecurity. To learn more, we sat down with Kurt Bruck, Vice President, Neya Systems, to discuss supporting the military as warfare becomes more technologically advanced and how his company is fostering safe and secure autonomous operations for unmanned ground vehicles. We'd love to hear from you. Share your comments, questions and
Hineman, Marcie
SAE TOMORROW TODAY - AI-Powered Solution for Seamless EV Charging135073/20/2025
It's no secret that the EV charging experience can be a frustrating one. But what if you could connect the various EV charging networks to apps and services, standardizing them into a single point of integration? One company is doing just that by harnessing data to create a seamless, secure, and reliable EV charging experience. Meet Emobi, the leader in critical digital infrastructure that delivers a single point of integration to a vast network of EV charging stations and e-mobility partners through advanced AI and data refinement models. As the largest roaming ecosystem in North America, the company also enables traditional and streamlined (JustPlug) Plug & Charge technology, facilitating automatic charging identification between EVs and chargers. The company is trusted by EV manufacturers, startups, utilities, and U.S. government agencies alike. To learn more, we sat down with Lin Sun Fa, CEO, Emobi, to discuss how his company's solutions are unifying the fragmented e-mobility
Hineman, Marcie
Security in Avionics SystemsF-0080-2024-10615/7/2024
There is a shift in the industry driving avionics manufactures to provide more interactive connectivity than they have had to in the past. The increasing threat of cyber security attacks in our communication systems is an increasing problem in our society and the avionics industry cannot ignore the fact that the threats are real and they must protect the systems from these attacks. Another element driving these concerns is the implementation of the FAA's NextGen or EASA's SESAR technologies which will require avionics vendors to replace their proprietary, relatively isolated embedded computer systems with information systems that interoperate and share data throughout FAA's/EASA's operations. In order to make the National Airspace (NAS) operate in the most efficient way all aircraft and ground systems will need to share information. The FAA and EASA have released standards to address these systems. This paper is only going to address aspects of security from a software perspective
Gilliland, Gary
INTEGRATION AND OPTIMIZATION OF GENEVA MECHANISM IN THE CAR DOOR HANDLE2024-26-02851/16/2024
The car door handle is an essential component of any vehicle, as it plays a crucial role in providing access to the cabin and ensuring safety of the passenger. The primary function of the car door handle is to allow entry and exit from the vehicle while preventing unauthorized access. In addition to this, car door handles also play a critical role in ensuring passenger safety by keeping the door closed during accidents or when there is a significant amount of G-force acting on the vehicle. A typical car door handle comprises several components including the structure, cover, Bowden lever, bracket, pins and other child parts. The structure provides the ergonomics and rigidity for grabbing the handle, while the cover gives the handle an aesthetic appearance. The Bowden lever facilitates the unlatching of the door and the intermediate parts ensure that the handle operates smoothly. The position of the Bowden lever is crucial for the unlatching process and for keeping the door closed
Kumar, Vinayak
Cyber Threats and its Mitigation to Intelligent Transportation System2024-26-01841/16/2024
With the revolutionary advancements in modern transportation, offering advanced connectivity, automation, and data-driven decision-making has put the intelligent transportation systems (ITS) to a high risk from being exposed to cyber threats. Development of modern transportation infrastructure, connected vehicle technology and its dependency over the cloud with an aim to enhance safety, efficiency, reliability and sustainability of ITS comes with a lot more opportunities to protect the system from black hats. This abstract explores the landscape of cyber threats targeting Intelligent Transportation Systems, focusing on their potential impacts, vulnerabilities, and mitigation strategies. The cyber-attacks in ITS are not just limited to Unauthorized Access, Malware and Ransomware Attacks, Data Breaches, Denial of Service but also to Physical Infrastructure Attacks. These attacks may result in potentially disrupting critical transportation infrastructure, compromise user safety, and can
Dewangan, Kheelesh Kumar, Panda, Vibek, Ojha, Sunil, Shahapure, Anjali, Jahagirdar, Shweta Rajesh
Regulatory trends for enhancement of Road Safety2024-26-01651/16/2024
Various Advanced Driver Assistance systems are being introduced to the Indian Market with the aim of reducing the road fatalities and injuries leading to severe trauma. India being one of the largest markets for the automobile sector always stands committed towards providing safe and sustainable transportation to its citizens. Advanced Driver Systems such as Anti-lock Braking Systems (ABS), Autonomous Emergency Braking systems (AEBS), Lane Departure Warning Systems, Auto Lane Correction Systems, Driver Drowsiness Monitoring Systems, Speed Limiting and Assisting Systems, Automated Crusing Control Systems, Automated Commanded Steering Functions, Traffic Jam assist systems etc., assist the driver during driving. They tend to reduce road accidents and related fatalities by their advanced and artificial intelligent fed programs. This paper will share an insight on the past, recent and the upcoming developments in the regulations with respect to driver assist systems, that are being enforced
Nayak, Pratik, Rawal, Vishal, Patil, Kamalesh, Tandon, Vikram, Badusha, Akbar
Real time monitoring and control of engine reliability validation using IOT and AI2024-26-03471/16/2024
IoT and AI have revolutionized the way we live and work, providing significant benefits across industries. The application of these technologies in engine reliability testing has immense potential as they offer real-time monitoring and analysis of engine performance. Engine reliability testing plays a crucial role in ensuring the safety, efficiency, and longevity of engines. However, traditional engine reliability testing methods can be time-consuming, costly, and often rely on manual inspection and data analysis. This paper presents a series of case studies that demonstrate the potential of IoT and AI tools in engine reliability testing, highlighting their benefits and limitations. This paper offers a comprehensive solution proposal for each use case, outlining the challenges and limitations of current engine reliability testing techniques. After that, the study proposes and evaluates IoT- and AI-based solutions to address these challenges. The study compares the effectiveness of the
Mujtaba, Quadri Syed, Yadav, Sanjay Kumar, kumar, Prabhakar, Verma, Vivek, Srinu, Kuncha
Virginia Tech College of EngineeringTBMG-465119/1/2022
Founded in 1872, Virginia Tech is a public land-grant research university with its main campus in Blacksburg, VA. From artificial intelligence, cybersecurity, and manufacturing to health sciences, robotics, and more, the Virginia Tech College of Engineering offers an advanced engineering curriculum.
Risk Management for Cybersecure Networked Medical DevicesTBMG-464609/1/2022
For developers and manufacturers of networked medical devices, IT security is increasingly becoming a challenge. While the number of cyber threats is growing significantly, companies often lack experience and clear guidelines for medical security. A comprehensive and complete security risk management plan helps to meet existing requirements in the best possible way and helps develop efficient countermeasures.
Test Preprint 20220628 By Madhukar DongariSAE-PP-025996/28/2022
Test Preprint 20220628 By Madhukar Dongari
Mutagaana, Festo
Design for Internet of Things in Aerospace2022-26-12525/26/2022
Internet of Things (IoT) is being adopted in aerospace industry, be it a ground based or airborne systems, the scope of IoT is enormous and advantages are limitless, which are not limited to reduced weight, reduced power consumption and reduced operational cost and time. Some of the use cases are to have an IoT based edge computing nodes (ECN) to transfer digitized data from sensors to the centralized computing system and RFID based baggage and cargo tracking system. This paper focuses on critical design requirements for IoT devices in aircraft, opportunity to harvest energy for the IoT devises from Aircraft thermal dissipation and vibration, cybersecurity threats and encryption solutions, power optimization for extended battery life in the devices, existing technology advancements and DO guidance to deploy IoT solutions in aerospace. This synopsis contains the introduction to the below topics, the final paper will have the details, example design and analysis results. Power
Muthulingam, Venkatesan
Best Practices to Prevent, Mitigate and Respond to Cyber Attacks on Air Traffic Management Systems 2022-26-12565/26/2022
Introduction With the digitization and advanced technology inclusions into the Air traffic management systems, there has been an increasing risk of cyber-attacks. The disruption to the computing, communication and control systems has been on an increase. These attacks along with equipment failures can have a far-reaching impact on the performance of the Air Traffic Management Systems. Cybersecurity is still uncommon and is more an after-thought than being engineered into the Systems. Description Deliberate attacks by Hackers have been demonstrated at some of the conferences where a ghost plane has been introduced in to the air space. In 2013, a German technology consultant claimed hacking Flight Management System with a simple android App and some easily available software and hardware. These increasing cyber-disruptions reflect a wider threat to the society which is pervasive, varied, and impactful. In consequence, an intense effort is needed to develop resilient cyber-systems that
Dubey, Kumud Bajaj
Key Fob Relay Attack Prevention With Pattern Matching2022-01-01323/29/2022
Key FOB relay attack is new form of cybersecurity attack which was demonstrated by hacker on many vehicles from different manufacturers. In this type of attack the hacker works in pair. 1 hacker will be near the vehicle and other is positioned near the user who has keys. Hacker initiates the communication between key fob and vehicle by catching signals with RF receiver and retransmitting signals through the Signal generator. This way hacker creates a RF bridge between vehicle and key fob. Since both ECU’s are communicating with each other they assume that user is near car. After security handshake car is unlocked and engine can also be started This paper is a new solution which will provide some degree of defense for this attack. This logic is built around the power level of received signal between the vehicle and key fob. Both vehicle ECU and key fob will have capability to evaluate the power level of received RF signal. Vehicle ECU and KeyFob Ecu’s will evaluate the power level of
Kulkarni, Ashwin
CAN Data Encryption Using Secret ID and Remote Frame2022-01-01253/29/2022
Controller Area Network (CAN) is very popular data transportation mechanism in all modern vehicles. CAN bus by design is not security oriented. It is an open communication with transparent messaging. Messages transmitted on bus can be easily read/decoded/spoofed by intruder This paper explores specific method of in-vehicle network security for CAN. This paper presents new method which is based on principal of using CAN remote frame for message encoding. This is a new solution which will provide some degree of defense for the message eavesdrop and message spoof attacks on CAN bus Solution is based on set of specialized DB’s being stored in every ECU in system. These DB’s will have different message ID’s for the same message. Remote framework message is a standard CAN frame message. In this new approach ECU’s will use Remote frame to communicate request about switching ID of particular message. Requested message will be replaced with new ID as requested from the sender ECU. Since Remote
Kulkarni, Ashwin
UDS Security Access for highly-constrained ECUs2022-01-01523/29/2022
Legacy electronic control units are, nowadays, required to implement cybersecurity measures, but they often do not have all the facilities that are necessary to realise industry-standard cybersecurity controls. Such systems must still be protected with a sufficient level of rigor against attackers who wish to modify their operation or extract confidential information from them. Due to cost constraints, it is desirable that such systems can be used in vehicles across the fleets of many different manufacturers without software changes. A critical interface to defend is the Unified Diagnostics Service (UDS) interface which is used in so many areas across the whole vehicle lifecycle. While the classic UDS service $27 (Security Access) has a reputation for poor cybersecurity, there is nothing inherent in the way it operates which prevents a secure access-control from being implemented. Indeed a number of very different implementations exist across the industry, but all have slightly
Thompson, Martin
Identifying Cybersecurity Focus Areas in Connected Cars Based on United Nations Regulation No. 155 Attack Vectors and Beyond2022-01-01413/29/2022
The arrival of 5G will enable vehicles to become better connected. In order to allow this evolution to manifest safely, the UNECE World Forum for Harmonization of Vehicle Regulations (WP.29) introduced the United Nations Regulation No. 155(UN-R155) this January, with expectations that at least 54 countries will mandate it starting July 2022. This regulation provides 69 attack vectors manufacturers are required to secure against, although it does not include specific countermeasures. Security methods and corresponding technologies change with time and are influenced by evolving connected car technologies as well as the threat landscape. Implementing effective cybersecurity means conducting a thorough risk analysis and prioritizing what needs to be achieved. Trend Micro Research conducted a risk analysis on each of the 69 attack vectors from a current and future perspective. In addition, we went beyond the attack vectors listed in UN-R155. Using our own analysis and insights, we brought
Huq, Numaan, Vosseler, Rainer
Integrating Fuzz Testing into a CI Pipeline for Automotive Systems2022-01-01463/29/2022
With the rapid development of connected and autonomous vehicles, more sophisticated automotive systems running large portions of software and implementing a variety of communication interfaces are being developed. The ever-expanding codebase increases the risk for software vulnerabilities, while at the same time the large number of communication interfaces make the systems more susceptible to be targeted by attackers. As such, it is of utmost importance for automotive organizations to identify potential vulnerabilities early and continuously in the development lifecycle in an automated manner. In this paper, we suggest a practical approach for integrating fuzz testing into a Continuous Integration (CI) pipeline for automotive systems. As a first step, we have performed a Threat Analysis and Risk Assessment (TARA) of a general E/E architecture to identify high-risk interfaces and functions. Next, we discuss the strategies for continuous fuzz testing and the technical requirements for
Oka, Dennis Kengo, Vinzenz, Nico
Attacking vehicles with ransomware: Watch the horizon2022-01-04413/29/2022
Ransomware use is rampant throughout most industries. With the number of successful ransomware attacks through the industrial economy, this feels like a tsunami of attacks. These attacks seemingly originate from anywhere with an internet connection. There are vast numbers of bad actors creating these attacks, all focused on your systems. With the large number of attacks, it is granted there have been many breaches. While there have been a large number of successful attacks, each attack’s objectives have varied. These have historically been to generate revenue in the form of fees for the decrypt key or a promise not to publish exfiltrated data. The landscape has become saturated with ransomware attacks on consumers and the enterprise. There has been extensive training for staff in an effort to mitigate these issues. The next potential targets are vehicles and ground systems. These, as targets, have not been evaluated via a full risk assessment to the recommended extent. While not widely
Parker, Charles
Evaluating Cybersecurity Vulnerabilities in V2X Communications 2022-01-01303/29/2022
Over the years there has been an enormous interest in V2X communications that enable an array of benefits such as road safety, traffic efficiency and to pave the way for fully automated driving through its non-line of sight sensing. Hence, there is a need for these V2X communications to be secured and reliable by ensuring that the cybersecurity properties like Confidentiality, Integrity, and Availability (CIA) are not compromised. This paper evaluates the potential cybersecurity use-cases developed, focusing on vulnerabilities like black hole attack, sybil attack and timing attack in V2X communications. The proposed cybersecurity vulnerabilities were tested and evaluated on FEV’s Smart Vehicle Demonstrator. Furthermore, the best practice countermeasure methods to avoid and overcome the risks identified based on the results were also discussed.
Nagavelli, Sai Krishnanand, Yedida, Siddhartha, Alzu'bi, Hamzeh, Tasky, Tom
Hoping CAN DB approach for enhanced security2022-01-01263/29/2022
Controller Area Network (CAN) is very popular data transportation mechanism in all modern vehicles. CAN bus by design is not security oriented. It is an open communication with transparent messaging. Messages transmitted on bus can be easily read/decoded/spoofed by intruder This paper explores specific method of in-vehicle network security for CAN. This paper presents new method which is based on principal of changing CAN message ID’s during vehicle run time. This method uses vehicle sensors to change CAN message ID on bus. This paper also describes various possible combinations in which network sensors can be connected to various ECU on system. Also covered are aspects of timelines when these messages are shifted, how all ECUs sync with each other and participates in the encoding process. Paper covers below 3 aspects (A) System design System will be based on N number of different CAN database (DB) each having same messages with different ordering inside. All ECU’s involved in CAN bus
Kulkarni, Ashwin
Automotive Diagnostics: Threat or a boon for cybersecurity2022-01-01393/29/2022
The Automotive industry went through a revolution of all sorts with the addition of a lot of electronic components in the vehicles subsequently increasing dependency on the software that these components carried on them. With large number of vehicles sold out in 90’s the service stations became burdened with providing quick and efficient service, and the competing OEMs lead to advancement of the way production and servicing of the vehicles were handled. As in any complex system where diverse components interact with each other the problems of such interactions multiplied causing diagnostics to become lean and efficient so that they can be diagnosed and fixed quickly. These diagnostics resulted in many open interfaces which could control mechanical parts without the intervention of driver with the help of a diagnostic tester. These open interfaces allowed hackers to exploit them for malicious purposes thus triggering cybersecurity protocols to be pulled in for these interfaces during
Prakash, Vignesh
Functional verification and validation of secure controller area network (CAN) communication2022-01-01183/29/2022
In agriculture industry, increasing use of Vehicle Internet of Things (IoT), telematics and emerging technologies are resulting in smarter machines with connected solutions. Inter and Intra Communication with vehicle to vehicle and inside vehicle - Electronic Control Unit (ECU) to ECU or ECU to sensor, requirement for flow of data increased in-turn resulting in increased need for secure communication. In this paper, we focus on functional verification and validation of secure Controller Area Network (CAN) for intra vehicular communication to establish confidentiality, integrity, authenticity, and freshness of data, supporting safety, advanced automation, protection of sensitive data and IP (Intellectual Property) protection. Network security algorithms and software security processes are the layers supporting to achieve our cause. Test environment setup with secured hardware and simulated models, test scenarios and test data created to achieve our objective. For validation, we relied
Khatik, Gourab, Katragadda, Praveen, Labade, Chetan
testing tasks 2 jms test citSAE-PP-004629/28/2021
2 go
SintzADMIN, Jeneane, SintzUSER, Jeneane
“Connected Vehicles – A Testing Approach and Methodology”2021-26-04509/22/2021
With the introduction of Connected vehicles, it is possible to extend the limited horizon of vehicles on the road by collective perceptions, where vehicles periodically share their information with others vehicles / servers using cloud. Nevertheless, by the time the connected vehicle spread expands, it is critical to understand the validation techniques which can be used to ensure a flawless transfer of data and connectivity. Usually the connected vehicle validation is limited to Application layer only in most of the OEMs. However in this work, we focus on validation of all the 4 layers involved namely, Physical hardware layer, Communication layer, Cloud platform and Application layer. For physical and communication layer, we simulated the in-vehicle environment using standalone vehicle electronic control units (ECUs) which communicate with the telematics control unit (TCU) available in the vehicle and a localized load box for replicating the actual load cases. By applying various use
PATHAK, ISHA, Shinde, Vivek
EVALUATION OF PROTECTED BOOT MECHANISM IN AUTOMOTIVE DOMAIN2021-26-05069/22/2021
In the recent years the electronics and software in the car has been increased with the request of new features. Todays vehicles are vulnerable to cyber-attacks due to their connectivity with internet and infrastructure. Due to this security in the automotive domain has gained importance. Earlier the software updates were done at the service station and probability of tampering the software was less. As the vehicles are connected through internet, the car manufacturers are shifting towards over the air updates (OTA). It should be ensured that only authentic software is executed on the micro controller. Protected boot is a security control used to ensure authentic software is executed on the microcontroller. Protected boot is a mechanism in which authenticity and integrity of the software is checked during the booting phase by using the chain of Trust mechanism. Protected boot can be achieved by using authenticated boot or secure boot mechanism. Integrity of the software is ensured by
Panchakseri, Shashikiran, Karabasannavar, Mahesh
SAE TOMORROW TODAY: The Online Criminal Underground: Cybersecurity and Corporate Threats131629/9/2021
There are constant news blasts highlighting ransomware incidents, company data hacks, and online theft. These threats are real and growing more present by the day - ultimately, increased connectivity, untraceable cryptocurrency, and bad international actors all but ensure that online data is at risk. What is it that causes company risk? Who are the actors at fault? And, perhaps most importantly, what can be done to mitigate these risks? Greg Otto, Chief Cybercrime Reporter at Intel 471 discusses prevention methods as well as how international agencies, businesses, the federal government, and insurance companies are working diligently to protect their own interests as well as our data. As hacking prevention methods become simpler and more convenient, the field of cybersecurity will become more secure. Learn more about the current challenges, relevance and importance of cybersecurity with SAE's Automotive Cybersecurity Certification course. The program teaches the context and
Hineman, Marcie
Items per page:
1 – 50 of 347