Varnost v pametnem avtomobilu : diplomsko delo

Marković, Davor (author), Ciglarič, Mojca (mentor)

V pričujočem diplomskem delu je raziskana danes vse bolj pereča problematika varnosti v pametnem avtomobilu, ki je v povojih, saj se nove varnostne ranljivosti in eksploatacije slednjih pojavljajo tako rekoč na dnevni ravni. Temu pojavu dodatno pripomore zaprtost lastniških protokolov avtomobilskih proizvajalcev in njihova pasivnost pri odpravi odkritih varnostnih pomanjkljivosti. V diplomskem delu smo razdelili in pregledali načine izkoriščanja slabosti varnostnih mehanizmov v splošnem ter hkrati opravili podroben pregled omrežij, njihovih protokolov in aktualnih tehnoloških sistemov znotraj sodobnega avtomobila. Raziskali in razdelili smo napade po načinu dostopa napadalca do avtomobila in po udarnosti, ki jih takšni napadi puščajo na delovanju avtomobilskih sistemov. V nadaljevanju smo opredelili obstoječo programsko in strojno opremo, s katero je mogoče na avtomobilu izvajati napade, ki smo jih z orodjem ICSim izvedli na funkcijah navideznega avtomobila. Naposled smo pripravili opis posledic napadov s stališča proizvajalcev in potnikov v avtomobilu ter predlagali smernice za delno odpravo tveganj napada.

• Language: Slovenian
• Keywords: omrežna varnost, napad, pametni avtomobil, elektronska nadzorna enota, protokol CAN, orodje ICSim
• Work type: Bachelor thesis/paper
• Typology: 2.11 - Undergraduate Thesis
• Organization: FRI - Faculty of Computer and Information Science
• Publisher: [D. Marković]
• Year: 2015
• Number of pages: 95 str.
• PID: 20.500.12556/RUL-73136
• COBISS.SI-ID: 1536644035
• Publication date in RUL: 22.10.2015

Licences

• License: CC BY-SA 2.5 SI, Creative Commons Attribution-ShareAlike 2.5 Slovenia
• Link: https://creativecommons.org/licenses/by-sa/2.5/si/deed.en
• Description: You are free to reproduce and redistribute the material in any medium or format. You are free to remix, transform, and build upon the material for any purpose, even commercially. You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use. If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original. You may not apply legal terms or technological measures that legally restrict others from doing anything the license permits.

Secondary language

• Language: English
• Title: Information security in a smart car

Abstract

In this bachelor thesis we have studied todays most concerning security issues regarding smart car. New security vulnerabilities and new exploits are revealed on a daily basis. This phenomenon is a consequence of mainly closed propietary protocols owned by car manufacturers and their slow reactions to newly published security issues. In bachelor thesis we classify and review general security threats and known attack types. Together with it we made a close review of networks, their protocols and actual technological systems used in typical smart car. We have also analyzed and summarized possible ways of car attacks and evaluated their potential effects. Further we chose a set of existing software and hardware equipment that allow us to perform an attack on a ICSim-simulated smart car. At the end we reviewed potential attack consequences from the car manufacturers' and passengers' viewpoint. We also suggested a few ideas for risk mitigation.

• Keywords: network security, attack, smart car, electronic control unit, CAN protocol, ICSim tool