eUF: A framework for detecting over-the-air malicious updates in autonomous vehicles
Software updates are highly significant in autonomous vehicles. These updates are utilized to provide enhanced features and updated security mechanisms. In order to ensure scalability and smooth roll-out Over-the-air (OTA) mechanism is a preferred option to propagate a software update. However, this...
| Main Authors: | , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
Elsevier
2022-09-01
|
| Series: | Journal of King Saud University: Computer and Information Sciences |
| Subjects: | |
| Online Access: | http://www.sciencedirect.com/science/article/pii/S1319157821001087 |
| _version_ | 1811309984519028736 |
|---|---|
| author | Anam Qureshi Murk Marvi Jawwad Ahmed Shamsi Adnan Aijaz |
| author_facet | Anam Qureshi Murk Marvi Jawwad Ahmed Shamsi Adnan Aijaz |
| author_sort | Anam Qureshi |
| collection | DOAJ |
| description | Software updates are highly significant in autonomous vehicles. These updates are utilized to provide enhanced features and updated security mechanisms. In order to ensure scalability and smooth roll-out Over-the-air (OTA) mechanism is a preferred option to propagate a software update. However, this approach is vulnerable to security attacks because of existence of wireless communication channel between the vehicle and the manufacturer. In that, an attacker can replace the legitimate software with a malicious software with an intent to get control over the vehicle. In this work, we are motivated to address this problem. We develop an enhanced uptane framework for detection of malicious OTA software updates in autonomous vehicles. For enhancing security, we incorporate convolutional neural network (CNN) in the uptane framework. The proposed framework is able to distinguish between malicious and benign software executables with high accuracy. For training and testing, we create two datasets by collecting executables of Windows and Linux operating system. We encourage the use of transfer learning by exploiting the developed CNN models in order to detect malicious executable designed for autonomous vehicles. We also benchmark the CNN models against state-of-the art models. Our work is highly beneficial for the community in providing a secure mechanism for software updates. |
| first_indexed | 2024-04-13T09:51:46Z |
| format | Article |
| id | doaj.art-45cbd3bbfb5a44888e33e79f97794ed9 |
| institution | Directory Open Access Journal |
| issn | 1319-1578 |
| language | English |
| last_indexed | 2024-04-13T09:51:46Z |
| publishDate | 2022-09-01 |
| publisher | Elsevier |
| record_format | Article |
| series | Journal of King Saud University: Computer and Information Sciences |
| spelling | doaj.art-45cbd3bbfb5a44888e33e79f97794ed92022-12-22T02:51:34ZengElsevierJournal of King Saud University: Computer and Information Sciences1319-15782022-09-0134854565467eUF: A framework for detecting over-the-air malicious updates in autonomous vehiclesAnam Qureshi0Murk Marvi1Jawwad Ahmed Shamsi2Adnan Aijaz3Systems Research Laboratory, Department of Computer Science, National University of Computer and Emerging Sciences, Pakistan; Corresponding author.Department of Computer and Information Systems Engineering, NED University of Engineering and Technology, PakistanSystems Research Laboratory, Department of Computer Science, National University of Computer and Emerging Sciences, PakistanBristol Research and Innovation Laboratory, Toshiba Europe Ltd., United KingdomSoftware updates are highly significant in autonomous vehicles. These updates are utilized to provide enhanced features and updated security mechanisms. In order to ensure scalability and smooth roll-out Over-the-air (OTA) mechanism is a preferred option to propagate a software update. However, this approach is vulnerable to security attacks because of existence of wireless communication channel between the vehicle and the manufacturer. In that, an attacker can replace the legitimate software with a malicious software with an intent to get control over the vehicle. In this work, we are motivated to address this problem. We develop an enhanced uptane framework for detection of malicious OTA software updates in autonomous vehicles. For enhancing security, we incorporate convolutional neural network (CNN) in the uptane framework. The proposed framework is able to distinguish between malicious and benign software executables with high accuracy. For training and testing, we create two datasets by collecting executables of Windows and Linux operating system. We encourage the use of transfer learning by exploiting the developed CNN models in order to detect malicious executable designed for autonomous vehicles. We also benchmark the CNN models against state-of-the art models. Our work is highly beneficial for the community in providing a secure mechanism for software updates.http://www.sciencedirect.com/science/article/pii/S1319157821001087Autonomous vehicleMalicious softwareOver-the-airSoftware updateUptane framework |
| spellingShingle | Anam Qureshi Murk Marvi Jawwad Ahmed Shamsi Adnan Aijaz eUF: A framework for detecting over-the-air malicious updates in autonomous vehicles Journal of King Saud University: Computer and Information Sciences Autonomous vehicle Malicious software Over-the-air Software update Uptane framework |
| title | eUF: A framework for detecting over-the-air malicious updates in autonomous vehicles |
| title_full | eUF: A framework for detecting over-the-air malicious updates in autonomous vehicles |
| title_fullStr | eUF: A framework for detecting over-the-air malicious updates in autonomous vehicles |
| title_full_unstemmed | eUF: A framework for detecting over-the-air malicious updates in autonomous vehicles |
| title_short | eUF: A framework for detecting over-the-air malicious updates in autonomous vehicles |
| title_sort | euf a framework for detecting over the air malicious updates in autonomous vehicles |
| topic | Autonomous vehicle Malicious software Over-the-air Software update Uptane framework |
| url | http://www.sciencedirect.com/science/article/pii/S1319157821001087 |
| work_keys_str_mv | AT anamqureshi eufaframeworkfordetectingovertheairmaliciousupdatesinautonomousvehicles AT murkmarvi eufaframeworkfordetectingovertheairmaliciousupdatesinautonomousvehicles AT jawwadahmedshamsi eufaframeworkfordetectingovertheairmaliciousupdatesinautonomousvehicles AT adnanaijaz eufaframeworkfordetectingovertheairmaliciousupdatesinautonomousvehicles |