Vehicle ECU Classification Based on Safety-Security Characteristics
Paper in proceedings, 2008

An upcoming trend for automotive manufacturers is to perform remote diagnostics and firmware updates over the air, which allows identifying hardware problems and correction of software flaws with minimal customer inconvenience. These procedures require that the previously isolated in-vehicle network permits external communication, which introduces a number of security risks, e.g., cyber attack threats. In this paper, we identify cyber attack threats and classify the electronic control units (ECUs) in the in-vehicle network to assist in determining which ones to protect and restrict access to. We divide the ECUs into five categories: powertrain, vehicle safety, comfort, infotainment, and telematics. We then use four safety integrity levels to classify the ECU categories. Moreover, we define safety effect levels of security threats which are used to classify identified attacks in the remote diagnostics and firmware updates over the air procedures. The safety and security levels are combined to classify the ECU categories. From the results we conclude that ECU categories such as powertrain and vehicle safety require further protection prior to introducing remote connectivity. As a conclusion, we suggest that automotive manufacturers should emphasize security or restrict the remote diagnostics and firmware updates over the air procedures to certain ECUs.

Classification

Security

ECU

Safe

Vehicle

Author

[Person db0fada4-49ef-4e31-b307-f24ef298117a not found]

Chalmers, Computer Science and Engineering (Chalmers), Computer Engineering (Chalmers)

[Person 941424f2-a729-4c54-9c5d-66bd1480d37d not found]

Chalmers, Computer Science and Engineering (Chalmers)

[Person d86817e7-924d-4b6a-bebb-b7b5c0e4433e not found]

Chalmers, Computer Science and Engineering (Chalmers), Computer Engineering (Chalmers)

Proceedings of 13th IET Road Transport Information and Control - RTIC2008, May 20-22, 2008, Manchester, UK

0537-9989 (ISSN)

Subject Categories

Computer Engineering

ISBN

978-0-86341-920-1

More information

Created

10/6/2017