Publications

Publications in 2022 of type Conference Proceedings

Filter by Year: All, 2022, 2021, 2020, 2019, 2018, 2017, 2016, 2015, 2014, 2013, 2012, 2011, 2010, 2009, 2008,
Filter by Type: All, Book, Article, Chapter, Conference Proceedings, Edited Conference Proceedings, Master Thesis, Bachelor Thesis, Technical Report, Miscellaneous,
Filter by Language: All, English, German,

    2022

    • Timo Häckel, Philipp Meyer, Lukas Stahlbock, Falk Langer, Sebastian A. Eckhardt, Franz Korf, and Thomas C. Schmidt. A Multilayered Security Infrastructure for Connected Vehicles — First Lessons from the Field. In: 2022 IEEE Intelligent Vehicles Symposium Workshops (IV Workshops). Piscataway, NJ, USA, May. 2022, IEEE Press,
      [Abstract], [Bibtex]

      Connected vehicles are vulnerable to manipulation and a broad attack surface can be used to intrude in-vehicle networks from anywhere on earth. In this work, we present an integrated security infrastructure comprising network protection, monitoring, incident management, and counteractions, which we built into a prototype based on a production car. Our vehicle implements a Software-Defined Networking Ethernet backbone to restrict communication routes, network anomaly detection to make misbehavior evident, virtual controller functions to enable agile countermeasures, and an automotive cloud defense center to analyse and manage incidents on vehicle fleets. We present first measurements and lessons learned from operating the prototype: many network attacks can be prevented through software-defined access control in the backbone; anomaly detection can reliably detect misbehavior but needs to improve on false positive rate; controller virtualization needs tailored frameworks to meet in-car requirements; and cloud defence enables fleet management and advanced countermeasures. Our findings indicate attack mitigation times in the vehicle from 257 ms to 328 ms and from 2,168 ms to 2,713 ms traversing the cloud.

      @InProceedings{   hmsle-msijr-22,
        author        = {Timo H\"ackel AND Philipp Meyer AND Lukas Stahlbock AND
                        Falk Langer AND Sebastian A. Eckhardt AND Franz Korf AND
                        Thomas C. Schmidt},
        title         = {{A Multilayered Security Infrastructure for Connected
                        Vehicles -- First Lessons from the Field}},
        booktitle     = {2022 {IEEE} Intelligent Vehicles Symposium Workshops ({IV}
                        Workshops)},
        month         = may,
        year          = 2022,
        publisher     = {IEEE Press},
        address       = {Piscataway, NJ, USA},
        abstract      = { Connected vehicles are vulnerable to manipulation and a
                        broad attack surface can be used to intrude in-vehicle
                        networks from anywhere on earth. In this work, we present
                        an integrated security infrastructure comprising network
                        protection, monitoring, incident management, and
                        counteractions, which we built into a prototype based on a
                        production car. Our vehicle implements a Software-Defined
                        Networking Ethernet backbone to restrict communication
                        routes, network anomaly detection to make misbehavior
                        evident, virtual controller functions to enable agile
                        countermeasures, and an automotive cloud defense center to
                        analyse and manage incidents on vehicle fleets. We present
                        first measurements and lessons learned from operating the
                        prototype: many network attacks can be prevented through
                        software-defined access control in the backbone; anomaly
                        detection can reliably detect misbehavior but needs to
                        improve on false positive rate; controller virtualization
                        needs tailored frameworks to meet in-car requirements; and
                        cloud defence enables fleet management and advanced
                        countermeasures. Our findings indicate attack mitigation
                        times in the vehicle from 257 ms to 328 ms and from 2,168
                        ms to 2,713 ms traversing the cloud. },
        groups        = {own, publications, security, sdn, anomaly-detection}
      }