Automotive IT-Security as a Challenge: Basic Attacks from the Black Box Perspective on the Example of Privacy Threats

  • Authors:
  • Tobias Hoppe;Stefan Kiltz;Jana Dittmann

  • Affiliations:
  • Research Group on Multimedia and Security, Otto-von-Guericke University of Magdeburg, Magdeburg, Germany 39106;Research Group on Multimedia and Security, Otto-von-Guericke University of Magdeburg, Magdeburg, Germany 39106;Research Group on Multimedia and Security, Otto-von-Guericke University of Magdeburg, Magdeburg, Germany 39106

  • Venue:
  • SAFECOMP '09 Proceedings of the 28th International Conference on Computer Safety, Reliability, and Security
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Since automotive IT is becoming more and more powerful, the IT-security in this domain is an evolving area of research. In this paper we focus on the relevance of the black box perspective in the context of threat analyses for automotive IT systems and discuss typical starting points and implications of respective attacks. We put a special focus on potential privacy issues, which we expect to be of increasing relevance in future automotive systems. To motivate appropriate provision for privacy protection in future cars we discuss potential scenarios of privacy violations. To underline the relevance even today, we further present a novel attack on a recent gateway ECU enabling an attacker to sniff arbitrary internal communication even beyond subnetwork borders.