CANsec: A Practical in-Vehicle Controller Area Network Security Evaluation Tool.

Area of Science:

• Cybersecurity
• Automotive Engineering
• Internet of Things (IoT)
• Intelligent Transportation Systems (ITS)

Background:

• The Internet of Vehicles (IoV) is a critical component of intelligent transportation, leveraging IoT technologies.
• Smart vehicles rely on the Controller Area Network (CAN) for in-vehicle communication.
• The existing CAN bus protocol lacks essential security features like encryption, authentication, and integrity checks, posing significant safety risks.

Purpose of the Study:

• To address the security vulnerabilities inherent in the In-Vehicle CAN bus protocol.
• To propose and evaluate a practical tool for assessing the security risks of in-vehicle CAN networks.
• To demonstrate the effectiveness of the proposed tool in simulating real-world attack scenarios.

Main Methods:

• Development of CANsec, a specialized tool for evaluating the security of In-Vehicle CAN.
• Simulation of major attack models to identify and assess CAN bus vulnerabilities.
• Demonstration of CANsec's utility through a practical usage case, independent of manufacturer-specific information.

Main Results:

• CANsec effectively simulates malicious attacks on In-Vehicle CAN networks.
• The tool provides a practical method for evaluating the security risks associated with CAN bus vulnerabilities.
• A successful usage case demonstrates CANsec's applicability without requiring prior vehicle-specific knowledge.

Conclusions:

• The In-Vehicle CAN protocol presents critical security risks that can be exploited by malicious actors.
• CANsec offers a valuable solution for assessing and mitigating these security threats in intelligent vehicles.
• The proposed tool contributes to enhancing the safety and security of intelligent transportation systems.