Browse Topic: Cryptography

Items (148)
Researchers discover texts, phone calls, military communication, internal corporate networks all easily eavesdropped on using off-the-shelf equipment. University of California San Diego, La Jolla, CA With $800 of off-the-shelf equipment and months' worth of patience, a team of U.S. computer scientists set out to find out how well geostationary satellite communications are encrypted. And what they found was shocking. Close to half of the communications beamed from satellites to the ground that the researchers were able to listen in on were not encrypted. This included sensitive data including cellular text messages, voice calls, as well as sensitive military information, data from internal corporate and bank networks, and the in-flight online activity of airline passengers.
The objective of this paper is to understand the effort required to integrate the hardware and software of in-vehicle cybersecurity systems. The in-vehicle cybersecurity method discussed is the SAE J1939-91C, which involves Network formation, Rekeying, and secure Message Exchange between Electronic Control Units (ECUs). The SAE J1939-91C network security protocol operates over a CAN-FD network to perform necessary cryptographic operations and key generation. To evaluate the method, test vectors were created to validate SAE J1939-91C key generations and cryptographic operations on the simulated ECU in-vehicle network system hardware (such as the Beacon or Pi devices). We introduce a lightweight, transport-agnostic benchmark comprising deterministic AES-CMAC test vectors and a simple verification utility, requiring no specialized hardware or build system. This minimal artifact set enables reproducible and machine-parsable validation of SAE J1939-91C security across diverse lab environments.
Zachos, MarkMedam, Krishna Teja
Negotiating Keys for applications such as message authentication within a vehicle presents many problems as, in designing the algorithm; the algorithm must be able to be utilized by small, fixed-point processors. In addition, if there is a desire to do this algorithm in the manufacturing environment, there are severe time constraints placed on how long this algorithm can take, as there are strict station time requirements, which are expensive to change, and any time utilized in the plant can negatively affect vehicle throughput. Additionally, negotiating these keys between many ECUs can greatly increase the time required to negotiate a common key using standard multi-party Diffie-Hellman. Timing would also be an issue in the case of using pair-wise Diffie-Hellman for encryption and distribution of keys utilizing a key master. To solve these problems in multi-party key negotiation, we have utilized the Elliptic Curve variation of the Burmester-Desmedt (ECBD) algorithm. ECBD is relatively fast for a large number of ECUs, though the primary benefit of utilizing this algorithm is that calculation times for key negotiation vary only slightly for a wide range of number of participants. This enables the easy planning of negotiation time based on the number of keys the vehicle requires without worrying about the number of ECUs that require each key. This approach also has advantages over key injection and direct key distribution schemes because it does not require a secure environment at any point in the process. Thus, ECBD can be implemented without a secure clean room in either the manufacturing or maintenance environments. This is especially valuable in the maintenance environment, as it enables easy compliance with right to repair laws without endangering vehicle cyber security.
Van Dam, TheoMazzara, Bill
As the automotive industry transitions toward software-defined vehicles and highly connected ecosystems, cybersecurity is becoming a foundational design requirement. A challenge arises with the advent of quantum computing, which threatens the security of widely deployed cryptographic standards such as RSA and ECC. This paper addresses the need for quantum-resilient security architectures in the automotive domain by introducing a combined approach that leverages Post-Quantum Cryptography (PQC) and crypto-agility. Unlike conventional static cryptographic systems, our approach enables seamless integration and substitution of cryptographic algorithms as standards evolve. Central to this work is the role of Hardware Security Modules (HSMs), which provide secure, tamper-resistant environments for cryptographic operations within vehicles. We present how HSMs can evolve into crypto-agile, quantum-safe platforms capable of supporting both hybrid (RSA/ECC + PQC) and fully post-quantum deployments—ensuring secure transitions without requiring hardware replacement. The novelty of this work lies in the design and validation of a first-of-its-kind operational prototype that supports current cryptographic standards (RSA/ECC) and is engineered for plug-and-play migration to PQC. Our architecture ensures long-term security while minimizing operational disruption and costs. Using a systematic architectural methodology, we integrated both software- and hardware-based HSMs and evaluated their performance under hybrid cryptographic conditions. Key performance metrics such as latency, key negotiation time, and re-keying efficiency demonstrate that crypto agility can be achieved with minimal overhead, confirming its feasibility for real-world deployment. There is an urgent need to adopt quantum-safe and agile security practices today, as vehicles manufactured now will remain in service long after quantum computers become practical. By embracing crypto-agile designs, automakers can mitigate long-term risks and ensure resilience against future cryptographic threats. This paper provides both a technical roadmap and a working prototype demonstration to guide the automotive industry toward a secure, quantum-resilient future.
Kuntegowda, Jyothi
The proliferation of connectivity features (V2X, OTA updates, diagnostics) in modern two-wheelers significantly expands the attack surface, demanding robust security measures. However, the anticipated arrival of quantum computers threatens to break widely deployed publickey cryptography (RSA, ECC), rendering current security protocols obsolete. This paper addresses the critical need for quantum-resistant security in the automotive domain, specifically focusing on the unique challenges of two-wheeler embedded systems. This work presents an original analytical and experimental evaluation of implementing selected Post-Quantum Cryptography (PQC) algorithms, primarily focusing on NIST PQC standardization candidates (e.g., lattice-based KEMs/signatures like Kyber/Dilithium), on microcontroller platforms representative of those used in two-wheeler Electronic Control Units (ECUs) - typically ARM Cortex-M series devices characterized by limited computational power, memory (RAM/ROM), and strict real-time requirements. Our experimental study involved porting and optimizing PQC reference implementations for these constrained environments. We rigorously benchmarked key performance indicators, including key generation time, encapsulation/decapsulation speeds, signing/verification times, and memory footprint (stack usage, code size). The results demonstrate the feasibility of deploying specific PQC schemes, achieving practical execution times (e.g., key operations completing within tens to hundreds of milliseconds) and manageable memory overhead (fitting within typical MCU constraints) for securing functions like secure boot, firmware updates, and authenticated communication. Performance trade-offs between different PQC algorithms regarding speed, key/signature sizes, and memory consumption are analyzed. The significance of this contribution lies in providing the first quantitative performance data and feasibility analysis for PQC adoption within the specific context of two-wheeler embedded systems. These findings offer crucial insights for OEMs and suppliers planning the transition to quantum-safe security architectures, ensuring the long-term security and trustworthiness of connected two-wheelers against future cryptographic threats.
Mishra, Abhigyan
As vehicles transform into complex cyber-physical systems within Intelligent Transportation Systems (ITS), automotive cybersecurity has become a foundational pillar in securing safe, reliable, and trustworthy transportation. This paper examines cybersecurity challenges in connected and autonomous vehicles (CAVs), focusing on Vehicle-to-Everything (V2X) communications technologies, including Vehicle-to-Vehicle (V2V), Vehicle-to-Infrastructure (V2I), and Vehicle-to-Pedestrian (V2P), and critical systems like electronic control units (ECUs), battery management units (BMUs), and sensor fusion modules. Key vulnerabilities, such as remote hacking, denial-of-service (DoS) attacks, malware injection, and data breaches, threaten vehicle functionality, passenger safety, and privacy. Key protection mechanisms, including encryption, intrusion detection systems (IDS), cryptographic protocols, secure over-the-air (OTA) updates, and Advanced Artificial Intelligence (AI) and Machine Learning (ML) algorithms, enhance threat detection, anomaly monitoring, and adaptive security responses. Additionally, emerging blockchain-based security frameworks offer decentralized solutions for data integrity and secure transactions. For electric vehicles (EVs), lightweight and energy-efficient cybersecurity solutions are critical to securing EV-specific architectures. Global standardization efforts, including ISO/SAE 21434 and UN Regulation No. 155, are shaping industry best practices, ensuring interoperability and scalable security frameworks for next-generation vehicles. This review synthesizes research advancements from 2001 to 2024, identifying key challenges such as real-time threat mitigation, scalability, and adaptive security architectures. The paper aims to provide valuable insights for researchers, engineers, and policymakers, fostering the development of secure, resilient, and sustainable automotive ecosystems in an increasingly digitized transportation network.
Kumar, OmKumar, RajivSankar M, GopiHaregaonkar, Rushikesh Sambhaji
The rapid expansion of electric vehicle (EV) charging infrastructure introduces complex cybersecurity challenges across hardware, software, network, and cloud layers. This review paper synthesizes existing research, standards, and documented incidents to identify critical vulnerabilities and propose layered mitigation strategies. We present a structured threat taxonomy based on the STRIDE model, enriched with real-world attack vectors and mapped to mitigation controls. Our analysis spans physical tampering, insecure firmware updates, protocol-level flaws in OCPP and ISO 15118, and cloud misconfigurations. While prior studies often focus on isolated domains, this work unifies fragmented insights into a cohesive framework. We highlight gaps in current literature, such as inconsistent adoption of secure protocols and limited validation of EVSE identity formats. By aligning threats with industry standards (SAE J3061, NIST CSF, IEC 62443) and scoring risks using CVSS v3.1, we offer a practical roadmap for manufacturers, operators, and policymakers. The paper concludes with recommendations for future research, including experimental validation, blockchain-based audit trails, and AI-driven anomaly detection.
Aggarwal, AkshitGupta, SaurabhSirohi, KapilArisetty, VenkateshChatterjee, Avik
The proliferation of wireless charging technology in electric vehicles (EVs) introduces novel cybersecurity challenges that require comprehensive threat analysis and resilient design strategies. This paper presents a proactive framework for assessing and mitigating cybersecurity risks in wireless charger Electronic Control Units (ECUs), addressing the unique vulnerabilities inherent in electromagnetic power transfer systems. Through systematic threat modeling, vulnerability assessment, and the development of defense-in-depth strategies, this research establishes design principles for creating robust wireless charging ecosystems resistant to cyber threats. The proposed framework integrates hardware security modules, encrypted communication protocols, and adaptive threat detection mechanisms to ensure operational integrity while maintaining charging efficiency. Experimental validation demonstrates the effectiveness of the proposed security measures in preventing unauthorized access, data manipulation, and service disruption attacks while preserving system performance.
Uthaman, SreekumarMulay, Abhijit BGadekar, Pundlik
Modern cars have advanced significantly with the rapid growth of connectivity and communication technologies. In the wake of rising cyber attacks and enforcement of regulations, implementation of cybersecurity is imperative to safeguard vehicles. The cybersecurity controls such as secure boot, secure updates, and secure communication require cryptographic primitives (keys/certificates). These security features are largely dependent on robust Key Management System (KMS), as keys are the sensitive assets that must be protected throughout the lifecycle of vehicle. Several security critical applications like over-the-air and car-to-car interaction essentially needs robust KMS to protect the vehicle assets from expanding attack vectors. Traditionally KMS is established centrally in a backend server. The cloud based KMS is becoming complex due to increased number of keys/certificates required to provision in a vehicle. We propose a self-governing in-vehicle key management system for a gateway-based architecture. The solution is derived from core principles of Blockchain technology. Every key or certificate transaction is recorded in a registry, with the first block (genesis block) created during the vehicle manufacturing stage by the gateway. The first stage involves creation of a genesis block, followed by the generation of a PKI blockchain for each ECU during vehicle manufacturing. In the second stage, the established PKI blockchain will be utilized for secure on-road communication during vehicle operations. Key management operations such as key rotation, revocation, addition, and replacement will be performed based on the established blockchain, with the gateway serving as the anchor point. Each key management operation is appended to the chain starting from the genesis block, with updates securely broadcast and replicated across all ECUs ensuring a distributed, tamper-proof key management framework. Several diverse communications like CAN, CAN-FD and Ethernet are comparatively analyzed, against its usage, benefits and complexity in the proposed approach.
Goyal, YogendraSutar, SwapnilJaisingh, Sanjay
As automotive electronic systems become increasingly complex, the demand for robust data security and privacy protection mechanisms has grown significantly. The AUTOSAR (Automotive Open System Architecture) standard has emerged as a widely adopted framework in the automotive industry due to its strong support for interoperability, functional safety, and cybersecurity. Within the AUTOSAR Classic Platform (CP), the Crypto Stack Service as a core component that enables critical security functionalities such as encryption, decryption, digital signature verification, and key management. However, the deployment of the Crypto Stack across heterogeneous Electronic Control Units (ECUs) introduces a series of technical challenges. These challenges stem primarily from variations in hardware resources, differences in operating system implementations, and inconsistencies in software execution environments. As a result, issues such as architectural compatibility, task scheduling efficiency, and secure communication between modules must be addressed for successful integration. This paper presents a systematic adaptation framework for the AUTOSAR Crypto Stack, focusing on three key layers of the software architecture: the Operating System (OS), the Runtime Environment (RTE), and the crypto driver abstraction. The proposed solution includes optimized task scheduling strategies, standardized RTE service encapsulation, and a dynamic dispatch mechanism for coordinating software- and hardware-based crypto processing. To validate the proposed adaptation strategy, a real-world prototype was developed using the NXP S32K148 platform. The system was tested through the generation and verification of MAC, simulating realistic automotive use cases. Experimental results demonstrate that the solution meets the stringent real-time and security requirements of automotive systems, providing valuable insights for the secure deployment of Crypto Stack in modern vehicles.
Wu, ShudiFan, SunjiaYu, YaqiXiu, Jiapeng
Researchers at the German Aerospace Center recently tested a quantum sensor in-flight on a Dornier 228 research aircraft. German Aerospace Center, Cologne, Germany It is not easy to transmit individual photons precisely from an aircraft, capture them in a ground station and detect them successfully. Researchers have, however, now managed to do exactly that. They have even measured, multiple times, various quantum channels between an aircraft and a ground station, sent photons to an ion trap and tested technologies for quantum key distribution (QKD). The flight experiment in question took place as part of the QuNET initiative, aimed at developing quantum-secure communication. Using photons - particles of light - it is possible to generate quantum encryption keys, which will make future communication eavesdrop-proof. The technologies behind this are also paving the way for a future quantum internet, connecting quantum computers with one another.
With the rapid development of Internet of Vehicles (IoV) and cyber-physical systems (CPS), connected autonomous vehicles (CAVs) have also developed rapidly. However, at the same time, in-vehicle networks also face more security challenges, mainly in terms of resource constraints, dynamic attacks, protocol heterogeneity, and high real-time requirements. Firstly, the trade-offs between lightweight encryption primitives and their software and hardware collaborative design in terms of performance, resource overhead, and security strength are analyzed. Secondly, the resource efficiency of AI-based intrusion detection system (IDS) is evaluated at the edge. Finally, we propose a dynamic adaptive collaborative defense framework (DACDF), which integrates federated learning with dynamic weight distillation, blockchain authentication with lightweight verifiable delay function (Light-VDF) and cross-domain IDS with hierarchical attention feature fusion to deal with collaborative attacks in resource-constrained environments. At the same time, we also identify future research directions, including the migration path of quantum-resistant cryptography (PQC) and the application challenges of explainable AI (XAI) in security-critical authentication.
Zhou, YouZhang, JiguiDing, KaniYang, Guozhi
Ensuring secure and ultra-reliable low-latency communication (URLLC) is critical for Vehicle-to-Everything (V2X) systems, which form the backbone of autonomous transportation. This paper presents a theoretical framework for designing secure communication protocols tailored for V2X systems with stringent latency and reliability requirements. The proposed framework incorporates dynamic message prioritization, adaptive encryption, and lightweight authentication to address the unique challenges of V2X networks. The study provides mathematical models to predict latency and security performance under varying network conditions, with a focus on scalability and efficiency. This work aims to contribute a foundational approach for future advancements in URLLC protocols in autonomous vehicle ecosystems.
Imran, Shaik Moinuddin
The automotive industry’s systems and over-the-air (OTA) updates have vulnerabilities in its software supply chain (SSC). Although frameworks like Uptane have improved OTA security, gaps remain in ensuring software integrity and provenance. In this paper, we examine challenges securing the automotive SSC and introduce a framework, GUIXCHAIN, that integrates version control, reproducible builds, blockchain technology, and software bills of materials (SBoMs) for transparency, auditability, and resilience. Reproducible builds guarantee identical resulting binaries when compiling the same source code in different environments, as any deviation in the final output indicates a potential compromise in the build process, such as malware injection. Our preliminary study shows Guixchain’s use of reproducible builds ensures consistent and integrity-secured software across various build environments. The blockchain provides forensic capabilities, offering a history of the what, who and where of discrepancies within the SSC process. SBoMs provide an inventory of the software components used. Our preliminary study demonstrates that Guixchain effectively mitigates risks such as ransomware, unauthorized modifications, and build server compromises, reinforcing the system’s integrity and resilience throughout the software life cycle. Future work will focus on the full implementation of Guixchain and a comprehensive evaluation of its performance in real-world automotive software supply chain scenarios.
Aideyan, IwinosaPesé, Mert D.Brooks, Richard
Data security remains an issue of the utmost concern in contested environments. Mechanisms such as data encryption, beam-forming antennas, and frequency-hopping radio have emerged to mitigate some of the concerns in radio-frequency (RF) communications, but they do not remove all risk. Consequently, there is still a consistent appetite for alternative solutions. This paper presents a case for the use of the free-space optical (FSO) communications technology ImpLi-Fi as one such alternative. FSO communication is promising because of the ease with which the signal beam may be steered and limited, making detection and interception more difficult than with RF, and ImpLi-Fi in particular is desirable for its exceptional outdoor performance and ease of integration into existing light sources. The paper briefly illustrates the origins of the contested logistics (CL) problem and CL use cases for secure communication channels, before describing the ImpLi-Fi technology in some detail; exploring how its field deployment might look, including a telling example with a handheld transmitter device; and foretelling additional potential areas of application. Throughout the paper, ImpLi-Fi is shown to have remarkably high potential utility in contested logistics and beyond.
Brzozowski, AaronReimann, JethroLakshmanan, SridharMarrero, Pedro “Pete”Moyer, Benjamin D.
This research evaluated the practicality of implementing Post-Quantum Cryptography (PQC) algorithms onboard resource-constrained computing devices, especially those found in automotive platforms. While computational efficiency within PQC is high, memory size and bandwidth constraints become relevant upon consideration of end-to-end implementation. The Controller Area Network (CAN) protocol utilizes only eight (8) bytes of data payload per message, requiring the large keys of PQC algorithms to be split into several messages. Power efficient 32-bit ARM microcontrollers were used for testing. Comparison was made between software implementations of both PQC and modern algorithms to evaluate relative computational cost. Ultimately, this research determined that the communication overhead required by PQC algorithms such as CRYSTALS-Kyber, CRYSTALS-Dilithium, and Falcon is not so egregious as to preclude them from implementation on board vehicular networks.
Smith, SethOwens, KyleKozan, Katherine
The added connectivity and transmission of personal and payment information in electric vehicle (EV) charging technology creates larger attack surfaces and incentives for malicious hackers to act. As EV charging stations are a major and direct user interface in the charging infrastructure, ensuring cybersecurity of the personal and private data transmitted to and from chargers is a key component to the overall security. Researchers at Southwest Research Institute® (SwRI®) evaluated the security of direct current fast charging (DCFC) EV supply equipment (EVSE). Identified vulnerabilities included values such as the MAC addresses of both the EV and EVSE, either sent in plaintext or encrypted with a known algorithm. These values allowed for reprogramming of non-volatile memory of power-line communication (PLC) devices as well as the EV’s parameter information block (PIB). Discovering these values allowed the researchers to access the IPv6 layer on the connection between the EV and EVSE and use traditional ethernet penetration testing methods, including port and vulnerability scanning. Port scanning exposed open SSH and HTTP services, the latter of which was vulnerable and allowed unauthenticated retrieval of proprietary information. The ports should be secured, or closed if unneeded, to prevent this type of vulnerability.
Kozan, Katherine
Researchers are leveraging informatics approaches to tackle persistent challenges in data management and sharing, enabling real-world healthcare applications to enhance data security and accessibility.
The modern-day vehicle’s driverless or driver-assisted systems are developed by sensing the surroundings using a combination of camera, lidar, and other related sensors by forming an accurate perception of the driving environment. Machine learning algorithms help in forming perception and perform planning and control of the vehicle. The control of the vehicle which reflects safety depends on the accurate understanding of the surroundings by the trained machine learning models by subdividing a camera image fed into multiple segments or objects. The semantic segmentation system comes with the objective of assigning predefined class labels such as tree, road, and the like to each pixel of an image. Any security attacks on pixel classification nodes of the segmentation systems based on deep learning result in the failure of the driver assistance or autonomous vehicle safety functionalities due to a falsely formed perception. The security compromisations on the pixel classification head of the object segmentation systems result in falsely segmented pixels from the incoming camera images by corrupted pixel labels with wrong object classes for the pixels. The popular encoder–decoder-based deep learning object segmentation network is considered, which is vulnerable to these attacks in its last fully connected neural network layer. Hence, the cryptographic solution mechanism is proposed here, where the pixel classes are encrypted and signed in the classification network nodes before applying the activation functions. RSA-512 algorithm-based encryption and DSA-512 algorithm-based digital signature are used to generate the proposed cryptographic components. The added cryptographic components are verified upon segmenting the objects to ensure the segmented object information is free from described security attacks. The performance of the proposed cryptographic secure object segmentation is evaluated for the popular segmentation network called U-Net for the Cityscapes segmentation dataset with the proposed cryptographic algorithms. The performance evaluation indicates that the secure semantic segmentation is performed with satisfactory precision, recall, and F1 scores of 0.86, 0.85, and 0.85, respectively, along with the added security components.
Prashanth, K.Y.Rohitha , U.M.
The growing ubiquity of autonomous vehicles (AVs) has introduced a new attack surface for malicious actors: the embedded systems that govern a vehicle's critical operations. Security breaches in these systems could have catastrophic consequences, potentially leading to loss of control, manipulation of sensor data, or even physical harm. To mitigate these risks, robust cybersecurity measures are paramount. This research delves into a specific threat – side-channel attacks – where attackers exploit data leakage through unintentional physical emanations, like power consumption or electromagnetic waves, to steal cryptographic keys or sensitive information. While various software and hardware countermeasures have been proposed, this study focuses on the implementation of masking techniques within the realm of embedded security. Masking techniques aim to obfuscate sensitive data during cryptographic operations, making it significantly harder for attackers to exploit side-channel vulnerabilities. This research explores the suitability of a Boolean masking approach within a high-level synthesis environment. This system-level approach offers several advantages over traditional design methodologies. It facilitates faster design processes by enabling early identification and rectification of errors. Additionally, it streamlines hardware-software co-design, allowing for a more integrated and efficient security architecture within the autonomous vehicle's embedded systems. Furthermore, the system-level approach enables the application of advanced validation strategies, ensuring the effectiveness of the implemented masking techniques. To evaluate the efficacy of the Boolean masking approach, the research investigates its application to three prominent block cipher algorithms – PRESENT, AES, and Serpent – all of which are based on substitution-permutation networks (SPNs). By implementing these masked algorithms in C and simulating their performance within an embedded system context, the study assesses factors like resource utilization and overall processing speed. This comparative analysis aims to identify the most effective masking implementation for protecting cryptographic operations in autonomous vehicles. Ultimately, the findings of this research can inform the development of robust security frameworks that safeguard autonomous vehicles against side-channel attacks and other cyber threats, paving the way for a safer and more secure future of transportation.
Deepan Kumar, SadhasivamR, Vishnu Ramesh KumarM, BoopathiManojkumar, RR, GobinathM, Vignesh
The scope of this document is to provide an overview, process, and implementation guidance on use of blockchain technology for a secure, immutable, and traceable digital authorized release certificate. This document does not standardize the process nor is it meant for authorities to recognize the standard as an acceptable means of recording data collected through the required authorized release certificate (ARC) tags.
G-31 Digital Transactions for Aerospace
Cybersecurity, particularly in the automotive sector, is of paramount importance in today’s digital age. With the advent of connected commercial vehicles, which leverage telematics for efficient fleet management, the landscape of automotive cybersecurity is rapidly evolving. These vehicles, integral to logistics and transportation businesses, are becoming increasingly connected, thereby escalating the risks associated with cybersecurity threats. These commercial vehicles are becoming prime targets for cyber-attacks due to their connectivity and the valuable data they hold. The potential consequences of these cyber-attacks can range from data breaches to disruptions in fleet operations, and even safety risks. This paper analyses the unique challenges faced by the commercial vehicle sector, such as the need for robust telematics systems, secure communication channels, and stringent data protection measures. Case studies of notable cybersecurity incidents involving commercial vehicles are presented, providing valuable insights into the modus operandi of cybercriminals. Strategies and best practices to mitigate these risks are proposed, emphasizing the need for secure vehicle architecture and design, intrusion detection systems, and regular OTA updates. The role of employee training programs in enhancing cybersecurity awareness is also highlighted. Emerging trends like AI and machine learning in threat detection, blockchain technology for secure data transmission, and collaborations with ethical hackers for vulnerability assessment are discussed. The paper reviews the current regulatory landscape, stressing the need for international standards specifically for connected commercial vehicles. It concludes with an outlook on anticipated developments in automotive cybersecurity, recommendations for industry stakeholders, and the assertion that prioritizing cybersecurity is crucial for the future of the commercial vehicle industry.
Mahendrakar, ShrinidhiMadarla, ManojGangapuram, SivaDadoo, Vishal
Data encryption is an essential part of keeping patient information private. It’s also remained relatively unchanged in recent decades — a rarity for anything in the cybersecurity space. The dawn of quantum computing will change that.
Supply chain management is key to industry efficiency, while information security and transparency are at the core of operations management. Blockchain technology shows great potential in this regard and can effectively make up for existing shortcomings. This article deeply explores the application of blockchain in new energy vehicle supply chain management, focusing on enhancing the systematization and collaboration of the supply chain through smart contract mechanisms. We established a collaborative contract model for the three-level supply chain. Especially from the perspective of the intermediate supply chain, we designed a smart contract mechanism to optimize key links such as order processing, payment, and logistics tracking, and used the alliance chain to ensure the safe sharing and sharing of information. At the same time, we have also developed an interactive system for each link of the supply chain and achieved smooth interaction in the new energy vehicle supply chain by adjusting the parameters and functions of smart contracts. Using the Ethereum scripting language, we built a blockchain smart contract mechanism based on supply chain contracts. This research not only demonstrates the potential value of blockchain technology in promoting supply chain information sharing and enhancing mutual trust, but also highlights its importance in supply chain management innovation and practical application.
Wang, Peng
Aerospace is an industry where competition is high and the need to ensure safety and security while managing costs is foremost. Stakeholders, who gain the most by working together, do not necessarily trust each other. Changing backbone technologies that drive enterprise systems and secure historical records does not happen quickly (if at all). At best, businesses adapt incrementally, building customized applications on top of legacy systems. The complexity of these legacy systems leads to duplication of efforts and data storage, making them very inefficient. Technology that augments, rather than replaces, is needed to transform these complex systems into efficient, digital processes. Blockchain technology offers collaborative opportunities for solving some of the data problems that have long challenged the aerospace industry. The industry has been slow to adopt the technology even though experts agree that it has real potential to revolutionize the global supply chain—including maintenance, repair, and overhaul (MRO)—driving tremendous cost, excess inventory, and inefficiencies out of the system. This chapter discusses how the adoption of blockchain technology could have a significant impact on the aerospace industry and addresses some of the unsettled concerns surrounding the implementation of the technology.
Walthall, RhondaDavid, AharonFarell, JamesHann, RichardJohansen, Tor A.
The University of Detroit Mercy Vehicle Cyber Engineering (VCE) Laboratory together with The University of Arizona is supporting Secure Vehicle Embedded Systems research work and course projects. The University of Detroit Mercy VCE Laboratory has established several testbeds to cover experimental techniques to ensure the security of an embedded design that includes: data isolation, memory protection, virtual memory, secure scheduling, access control and capabilities, hypervisors and system virtualization, input/output virtualization, embedded cryptography implementation, authentication and access control, hacking techniques, malware, trusted computing, intrusion detection systems, cryptography, programming security and secure software/firmware updates. The VCE Laboratory testbeds are connected with an Amazon Web Services (AWS) cloud-based Cyber-security Labs as a Service (CLaaS) system, which allows students and researchers to access the testbeds from any place that has a secure internet connection. VCE students are assigned predefined virtual machines to perform designated cyber-security experiments. The CLaaS system has low administrative overhead associated with experiment setup and management. One of the testbeds in the VCE Lab is the TestCube vehicle simulator device. The TestCube is a programmable OBD-II vehicle gateway that can operate as an entire vehicle that is running on-board diagnostics communications sequences. VCE Laboratory CLaaS experiments have been developed for demonstrating man-in-the-middle cyber-security attacks from actual compromised hardware or software connected with the TestCube. This paper will describe the CLaaS system and experiments utilizing the TestCube testbed. In addition, we will show that the data transfer latency between experiments running on the VCE Laboratory testbed and the AWS Virtual Private Cloud (VPC) is a sustainable communication rate for operating the testbed. It is also worth noting that the CLaaS vehicle diagnostics security system testbed could be extended for use in applications to support a vehicle digital twin platform.
Zachos, MarkSatam, PratikNaama, Rami
A model predictive control (MPC) energy management strategy (EMS) coupled with offline dynamic programming (ODP) based on historical average vehicle speed, ODP-MPC, is proposed in this paper. The effectiveness of ODP-MPC is verified using historical traffic flow datasets from the open literature. The simulation results show that ODP-MPC can reduce fuel consumption by 1.1% to 7.3% compared to MPC. Moreover, at the prediction area Hp=3(3s), the fuel consumption of ODP-MPC is only 2.1% higher than that of the DP algorithm. This indicates that ODP-MPC can approximate the theoretical fuel economy. As for the computational effort, the online computation time of ODP-MPC is improved by 6.3%~22.9% compared to MPC, but still less than the 1s time step. Reducing the number of grid cells (m) or increasing the distance step (distf) in offline DP reduces the offline computational cost and the fuel economy of ODP-MPC. The coupled locally encrypted meshing strategy (LEMS) in ODP-MPC resolves the trade-off between computational cost and fuel-saving performance. Compared to ODP-MPC with m=1001 and distf=10, when m=21 and distf=30, the fuel consumption of ODP-MPC with LEMS remains nearly unchanged, while the computational cost is reduced by 99.1%.
Wu, ChangkunShi, XiuyongNi, Jimin
With the recent advancement in technologies, researchers worldwide have a growing interest in unmanned aerial vehicles (UAVs). The last few years have been significant in terms of its global awareness, adoption, and applications across industries. In UAV-aided wireless networks, there are some limitations in terms of power consumption, data computation, data processing, endurance, and security. So, the idea of UAVs and Edge or Fog computing together deals with the limitations and provides intelligence at the network’s edge, which makes it more valuable to use in emergency applications. Fog computing distributes data in a decentralized way and blockchain also works on the principle of decentralization. Blockchain, as a decentralized database, uses cryptographic methods including hash functions and public key encryption to secure the user information. It is a prominent solution to secure the user’s information in blocks and maintain privacy. The ongoing development in collaborative UAVs and fog computing networks had put further a major challenge of security that need to be investigated. This article presents a study on security attacks and requirements needed to ensure security in UAV-based fog networks. We provide blockchain security in UAV-based fog computing to secure a large volume of data. The communicated data is stored in the form of blocks with hash functions, which guarantee security in the network. Thus, the aim of blockchain security is to guarantee that any hostile third party cannot corrupt or change the live missions or tasks allocated to actual UAV–Fog nodes.
Gupta, AkshitaGupta, Sachin Kumar
More than half a century has passed since the birth of quantum signal detection theory, which is the cornerstone of modern quantum communication theory. Quantum stream cipher, the quantum-noise-based direct encryption scheme for optical communications at the center of our research, is based on the foundations of quantum communication theory. For quantum cryptography to progress from a theoretical possibility to a more realistic technology, experimental and theoretical research must be complementary.
Automated Vehicles (A)V development historically placed a significant focus on functionality and less on security. Programs such as Cybersecurity for Robotics and Autonomous Systems Hardening (CRASH) are addressing AV cybersecurity, strengthening security while simultaneously supporting the developer focus on functionality. This task is challenging due to continuous interaction by AVs with the environment through sensors and actuators, command and control, and remote connectivity. This paper presents an approach balancing functionality and security through an AV Zero-Trust Architecture (ZTA) which leverages authentication, cyber policy enforcement, and monitoring to detect and mitigate cyber-attacks. The AV ZTA approach is traceable to NIST 800-217 guidance for applying ZT concepts to Information Technology (IT) networks. The presented AV architecture example begins with a non-self-driving baseline, adding sensors, actuators, command/control, and remote connectivity. NIST 800-207 principles are distilled into three (3) components: 1. Authentication 2. Policy Enforcement and 3. Monitoring. Authentication includes verifying software authenticity prior to booting, and use of a combination of public/private key encryption, symmetric key encryption, and Message Authentication Codes (MACs) to secure network communication. Policy Enforcement occurs at every AV network node and is overseen by a central gateway. The gateway also monitors traffic and logs issues. Together, these combine into an AV ZTA. Several recent programs have partially implemented the outlined AV ZTA. For example, the CRASH program has implemented authentication for networked communication, policy enforcement, and monitoring. Other programs are tackling monitoring automotive CAN and ethernet busses and improving resiliency through sensor redundancy and fusion. There remain other unaddressed pieces to fully implement an AV ZTA.
Murray, VictorLathrop, ScottMikulski, Dariusz
The new generation vehicles these days are managed by networked controllers. A large portion of the networks is planned with more security which has recently roused researchers to exhibit various attacks against the system. This paper talks about the liabilities of the Controller Area Network (CAN) inside In-vehicle communication protocol and a few potentials that could take due advantage of it. Moreover, this paper presents a few security measures proposed in the present examination status to defeat the attacks. In any case, the fundamental objective of this paper is to feature a comprehensive methodology known as Intrusion Detection System (IDS), which has been a significant device in getting network data in systems over many years. To the best of our insight, there is no recorded writing on a through outline of IDS execution explicitly in the CAN transport network system. Therefore, we proposed a top-down examination of IDS through a write-up based on the following perspectives: Detection draws near, Organization systems, going after methods, and technical challenges. Likewise, it has additionally arranged the abnormality-based IDS as per the strategies stated below, i.e. Frequency-based, AI-based, measurable-based, and statistical-based strategies as a component.
Appajosyula, Kalyan Sai Vital VamsiPacharla, Sreedhar Reddy
The lack of inherent security controls makes traditional Controller Area Network (CAN) buses vulnerable to Machine-In-The-Middle (MitM) cybersecurity attacks. Conventional vehicular MitM attacks involve tampering with the hardware to directly manipulate CAN bus traffic. We show, however, that MitM attacks can be realized without direct tampering of any CAN hardware. Our demonstration leverages how diagnostic applications based on RP1210 are vulnerable to Machine-In-The-Middle attacks. Test results show SAE J1939 communications, including single frame and multi-framed broadcast and on-request messages, are susceptible to data manipulation attacks where a shim DLL is used as a Machine-In-The-Middle. The demonstration shows these attacks can manipulate data that may mislead vehicle operators into taking the wrong actions. A solution is proposed to mitigate these attacks by utilizing machine authentication codes or authenticated encryption with pre-shared keys between the communicating parties. Various tradeoffs, such as communication overhead encryption time and J1939 protocol compliance, are presented while implementing the mitigation strategy. One of our key findings is that the data flowing through RP1210-based diagnostic systems are vulnerable to MitM attacks launched from the host diagnostics computer. Security models should include controls to detect and mitigate these data flows. An example of a cryptographic security control to mitigate the risk of an MitM attack was implemented and demonstrated by using the SAE J1939 DM18 message. This approach, however, utilizes over twice the bandwidth as normal communications. Sensitive data should utilize such a security control.
Kumar, SharikaDaily, JeremyAhmed, QadeerArora, Anish
CAN bus network proved to be efficient and dynamic for small compact cars as well as heavy-duty vehicles (HDV). However, HDVs are more susceptible to malicious attacks due to lack of security in their intra-vehicle communication protocols. SAE proposed a new standard named J1939-91C for CAN-FD networks which provides methods for establishing trust and securing mutual messages with optional encryption. J1939-91C ensures message authenticity, integrity, and confidentiality by implementing complex cryptographic operations including hash functions and random key generation. In this paper, the three main phases of J1939-91C, i.e., Network Formation, Rekeying, and Message Exchange, are simulated and tested on Electronic Control Units (ECUs) supporting CAN-FD network. Numerous test vectors were generated and validated to support SAE J1939-91C. The mentioned vectors were produced by simulating different encryption and hashing algorithms with variable message and key lengths. Moreover, the output vectors of each phase were passed to the subsequent phase to build up a complete scenario. The obtained simulation results will be used in the future for assessing the benefits of the standard as well as identifying potential strengths or possible shortcomings of the new protocol and to help suggest recommended enhancements and modifications.
Mokhadder, MohomadZachos, MarkPotter, John
ABSTRACT This paper describes a novel network security appliance -- the Tactical Smart Network Interface Card (TSNIC) – that leverages state-of-the-art Field Programmable Gate Array (FPGA) technologies to continuously maintain the integrity of tactical missions. The Smart NIC appears as an all-hardware “bump-in-the-wire” along any network segment or attached to an industry standard bus interface providing infrastructure defense for ground vehicles. It can be custom configured to provide encryption, protocol and file format validation, and/or protocol encapsulation. These capabilities are achieved by several innovations: high-level synthesis (HLS) for rapid circuit development, automated parser generation to adapt to mission requirements, and a hardware nano-marshal to dynamically adapt defensive posture in the face of changing threat profiles. Citation: J. Dahlstrom, S. Padnos, J. Brock, and S. Taylor, “The Tactical Smart NIC,” In Proceedings of the Ground Vehicle Systems Engineering and Technology Symposium (GVSETS), NDIA, Novi, MI, Aug. 16-18, 2022.
Dahlstrom, JasonPadnos, StephenBrock, JamesTaylor, Stephen
ABSTRACT Currently there is no method to ensure that the software loaded on a vehicle has been compromised at the software level. Common practice is to use physical port security to secure all network and data bus connection points with physical devices requiring tool, keys, or damage to tamper evident devices to prevent, inhibit, or discourage unauthorized connection; turn off access to the ports in the BIOS and password protect the BIOS. As well as give non-admin access to user accounts and password protect the operating systems. All these countermeasures help to prevent access but there is no way to tell if the software was compromised if not detected by these methods. Blockchain technology ensures that the software has not been compromised by comparing a hash generated at start up and comparing it to the distributed ledger. This technology helps to bring Warfighter technology into the future.
Fortney, George G
The global big data market had a revenue of $162.6 billion in 2021.1 Data is becoming more valuable to companies than gold. However, this data has been used, historically, without contributors’ informed consent and without them seeing a penny from the discoveries the data led to. This article discusses how non-fungible tokens (NFTs) can provide a helpful tool for pharmaceutical companies to track contributed data and compensate contributors accordingly. NFTs are unique, untradable cryptographic assets that can be tracked on a blockchain. NFTs provide a unique traceable token that cannot be replicated, providing a perfect tool to store biodata. The term biodata refers to details regarding a patient’s history and behavioral patterns.
A powerful new generation of test and sim solutions aims to address specific security concerns associated with automotive designs. Today's vehicle is a mobile computer growing in complexity. From infotainment systems to propulsion, to advanced driver assistance systems (ADAS) and autonomous vehicles (AV), computers now drive how automobiles and trucks are designed, how they operate and how they're increasingly connected. For that reason, the transformation of vehicles, roadways and cities has created new design considerations for engineers. One aspect that can't be overlooked is cybersecurity and the need for an all-encompassing approach to ensure vehicle safety. A 2019 study conducted by SAE International (in conjunction with Synopsis) highlights the level of angst around securing the advanced technologies designed into automobiles. Eighty-four percent (84%) of survey respondents are concerned that cybersecurity practices are not keeping up with the security landscape. As worrisome, 63% of survey respondents admitted they test less than half of hardware, software and other technologies for security vulnerabilities.
Hendricks, Craig
Members of the electric vehicle industry gathered at the National Renewable Energy Laboratory (NREL) in early April to evaluate enhanced cybersecurity for the connections between EVs and charging infrastructure. As more EVs enter the market and connect to the electrical grid, potentially exposing cyber vulnerabilities, vehicle security is drawing increased interest. The collaborative event supports a two-year project led by SAE International to strengthen EV cybersecurity through wide industry engagement on pre-competitive research and technology prototyping in the EV charging space. The event, held at NREL's Golden, Colorado Energy Systems Integration Facility, was organized to evaluate the application of public key infrastructure (PKI) - a method for encrypting information exchange and certifying the trusted authenticity of devices - to help protect the connection between vehicles and charging stations. Although PKI had been adopted for many industries, this kind of authentication between different companies' electric vehicles and charging stations is not commonplace nor has it matured in the EV charging ecosystem.
Weisenberger, Tim
The critical role of spectrum superiority in the success of battlefield campaigns is evidenced by the enormous investments being made in electronic warfare (EW) capabilities by governments worldwide. Communication technologies, such as 5G, are quickly being adopted by militaries in an attempt to satisfy the demand for exponentially larger amounts of data transmission in a shorter period of time. As quickly as secure communication strategies are being developed to encrypt mission critical data, so too are the technologies used to detect, decode, and disrupt such communications. The security and integrity of critical communications is of the utmost importance as the world progresses towards an increasingly networked theater of operations. The militaries of the world appear to be in widespread agreement that the critical communication infrastructure of tomorrow's battlefields need to be: Rapidly deployable and reconfigurable for mission readiness. Designed for minimal spectral footprint to minimize risk of detection. Secure against spectral manipulation tactics and immune to remote disruption. Ruggedized to survive harsh environment deployment, but small enough in form factor to enable maximum mobility. Open-source and future-proof to enable the seamless integration of next-generation systems and technologies.
The critical role of spectrum superiority in the success of battlefield campaigns is evidenced by the enormous investments being made in electronic warfare (EW) capabilities by governments worldwide. Communication technologies, such as 5G, are quickly being adopted by militaries in an attempt to satisfy the demand for exponentially larger amounts of data transmission in a shorter period of time. As quickly as secure communication strategies are being developed to encrypt mission critical data, so too are the technologies used to detect, decode, and disrupt such communications. The security and integrity of critical communications is of the utmost importance as the world progresses towards an increasingly networked theater of operations.
Security in encrypted communication is a top priority because of our highly connected and mobile society’s increasing reliance on the internet. Engineers at Department of Electrical Engineering and Computer Science and the Research Laboratory of Electronics, MIT, have developed a new protocol for high-speed communication between two parties with security vouchsafed by the laws of quantum physics. The protocol can also be used to distribute cryptographic keys, as in quantum key distribution (QKD) at much higher secure key rates than existing QKD methods.
Significant growth of Unmanned Aerial Vehicles (UAV) has unlocked many services and applications opportunities in the healthcare sector. Aerial transportation of medical cargo delivery can be an effective and alternative way to ground-based transport systems in times of emergency. To improve the security and the trust of such aerial transportation systems, Blockchain can be used as a potential technology to manage, operate and monitor the entire process. In this paper, we present a blockchain network solution based on Ethereum for the transportation of medical cargo such as blood, medicines, vaccines, etc. The smart contract solution developed in solidity language was tested using the Truffle program. Ganache blockchain test network was employed to host the blockchain network and test the operation of the proposed blockchain model. The suitability of the model is validated in real-time using a UAV and all the flight data are captured and uploaded into the blockchain. The model was executed successfully, and the data uploaded in the blockchain is found to be in line with the developed model. The developed blockchain model provides features such as data immutability and data traceability which are very important for these classes of critical applications. The data once created is sent to blocks and based on the time stamp the data is traced back.
M K, PadmanabhanKumar, RaviManoharan, DineshR, PrithvirajS, Rajesh
Curtiss-Wright Defense Solutions Ashburn, VA 703-779-7800
To help address the issue of message authentication on the Controller Area Network (CAN) bus, researchers at Virginia Tech and Ford Motor Company have developed a proof-of-concept time-evolving watermark-based authentication mechanism that offers robust, cryptographically controlled confirmation of a CAN message's authenticity. This watermark is injected as a common-mode signal on both CAN-HI and CAN-LO bus voltages and has been proven using a low-cost software-defined radio (SDR) testbed. This paper extends prior analysis on the design and proof-of-concept to consider robustness testing over the range of voltages, both steady state drifts and transients, as are commonly witnessed within a vehicle. Overall performance results, along with a dynamic watermark amplitude control, validate the concept as being a practical near-term approach at improving authentication confidence of messages on the CAN bus.
Michaels, Alan J.Fletcher, MichaelHenshaw, ChrisPalukuru, Venkata Sai SrikarMoore, John
Bitcoin and other digital currencies utilize blockchain. Blockchain, in summary, is a collection of blocks. Within each block is a collection of transactions. Each computer (node) has the same list of blocks and transactions, which they can see as the blocks are filled with the transactions. While this is the traditional application experienced, there are other applications relevant to cybersecurity. As part of the blockchain technology, the nodes are responsible for decision-making. The blockchain technology may be used for this function in these systems. In adjusting the data flow, this is an option to increase the cybersecurity for a complete system. This addition to the cybersecurity system provides a clear benefit.
Parker, Charles
The advancements of the automotive system in all the aspects from safety to user experience brings never ending list of electronics components into the system. One of the pure critical components in providing the vehicle safety is the digital key or wireless vehicle entry systems. This component is responsible for protecting all the other components of the vehicle and the vehicle itself from thieves and illegal usage of the vehicle. The compromisations of this critical component is equivalent to a compromisations of the entire vehicle along with some legal implications on the vehicle owner. There are numerous additional systems in automotive electronics which enhances the security of the critical, digital key/wireless vehicle entry system in protecting the vehicles from attackers. However, there is no component available in the market which does user/owner authentication considering its impact and criticality on both the vehicle and its owner. Either the lost key or the stolen key in the hands of the illegitimate person who may be an attacker or a thief result in the vehicle theft or the usage of the stolen vehicle for the illegal purposes. These situations cause legal circumstances on the legitimate owner of the vehicle. Hence, in this regard there is a need of user/owner authentication in the existing digital key/wireless vehicle entry systems. The proposed system tries to address this concern by combining the user/owner biometrics with the command passing from the user in-hand device. The proposed system transmits the cryptographically secure combined bio-crypto data from the user in-hand device to the vehicle, where the cryptographic verification if followed by a user verification before proceeding on executing the user requested commands on the vehicle. Upon successful user verification, the respective command actions will be undertaken. Otherwise, the command is considered to be from an illegitimate user using the in-hand device and is discarded. This system also proposes an infrastructure support and mechanism for the user biometric enrollments through Tier-1s and Original Equipment Manufacturers (OEMs).
Ansari, AsadullahP.C., KarthikD.H., SharathAziz, MohammadMukherjee, Sourik
Legacy electronic control units are, nowadays, required to implement cybersecurity measures, but they often do not have all the elements that are necessary to realize industry-standard cybersecurity controls. For example, they may not have hardware cryptographic accelerators, segregated areas of memory for storing keys, or one-time programmable memory areas. Such systems must still be protected with a sufficient level of rigor against attackers who wish to modify their operation or extract confidential information from them. A critical interface to defend is the Unified Diagnostics Service (UDS) interface which is used in many areas across the whole vehicle lifecycle. While the UDS service $27 (Security Access) has a reputation for poor cybersecurity, there is nothing inherent in the way it operates which prevents a secure access-control from being implemented. This paper describes an approach to providing UDS Security Access within systems which have very constrained processors (in terms of processing power, memory size and, in particular, cybersecurity features) which can be applied to multiple vehicles across many manufacturers. It describes, in detail, methods for generating UDS-Seeds and UDS-Keys in the absence of a hardware security module (HSM) with a true-random number generator, and without use (by the user who is requesting access) of IT-infrastructure. In addition, the problem of key-management and distribution is tackled head-on and not left as an implementation detail. A threat analysis has been performed (according to ISO/SAE 21434) using model-based tools, the results of which are presented in this paper. The constraints (some of which make it difficult to properly secure certain key material) result in risks which become clear in the threat analysis. Potential future users of this scheme can use this analysis to assess the residual risks in their own applications.
Thompson, Martin
Items per page:
1 – 50 of 148