CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN
New vehicles have become increasingly targeted for cyber-attacks as their rate of digitalization is accelerated. Research on vehicle hacking has highlighted the security vulnerabilities of in-vehicle controller area networks (CANs) as the biggest problem. In particular, a CAN does not offer access c...
| Main Authors: | , , , , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
IEEE
2019-01-01
|
| Series: | IEEE Access |
| Subjects: | |
| Online Access: | https://ieeexplore.ieee.org/document/8631032/ |
| _version_ | 1819170330020675584 |
|---|---|
| author | Samuel Woo Daesung Moon Taek-Young Youn Yousik Lee Yongeun Kim |
| author_facet | Samuel Woo Daesung Moon Taek-Young Youn Yousik Lee Yongeun Kim |
| author_sort | Samuel Woo |
| collection | DOAJ |
| description | New vehicles have become increasingly targeted for cyber-attacks as their rate of digitalization is accelerated. Research on vehicle hacking has highlighted the security vulnerabilities of in-vehicle controller area networks (CANs) as the biggest problem. In particular, a CAN does not offer access control, authentication, or confidentiality, so it fails to prevent reconnaissance operations conducted by an adversary. Because its static configuration (CAN ID, data frame transmission cycle, and data field format) is used in an in-vehicle network environment, the adversary can conduct reconnaissance and easily acquire information to be used for an attack. One of the moving target defense strategies, network address shuffling (NAS), is an extremely practical security solution that can prevent in-vehicle CAN reconnaissance acts. In this paper, we propose a CAN ID shuffling technique using NAS. Our proposed security solution aims to increase the cost burden for the adversary to analyze CAN data frames. To evaluate the performance of the proposed security solution, we conducted an evaluation based on a labcar. Our proposed security solution may be implemented without altering the unique characteristics of the CAN standard. Hence, it can be used as a practical countermeasure to solve the problems affecting in-vehicle CANs. |
| first_indexed | 2024-12-22T19:33:40Z |
| format | Article |
| id | doaj.art-a6e4444eceea447aac565c0c9e399b4c |
| institution | Directory Open Access Journal |
| issn | 2169-3536 |
| language | English |
| last_indexed | 2024-12-22T19:33:40Z |
| publishDate | 2019-01-01 |
| publisher | IEEE |
| record_format | Article |
| series | IEEE Access |
| spelling | doaj.art-a6e4444eceea447aac565c0c9e399b4c2022-12-21T18:15:02ZengIEEEIEEE Access2169-35362019-01-017155211553610.1109/ACCESS.2019.28929618631032CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CANSamuel Woo0Daesung Moon1https://orcid.org/0000-0002-9961-0401Taek-Young Youn2Yousik Lee3Yongeun Kim4Information Security Research Division, Electronics and Telecommunications Research Institute, Daejeon, South KoreaInformation Security Research Division, Electronics and Telecommunications Research Institute, Daejeon, South KoreaInformation Security Research Division, Electronics and Telecommunications Research Institute, Daejeon, South KoreaESCRYPT GmbH, Gyeonggi, South KoreaKorea Automotive Technology Institute, Cheonan, South KoreaNew vehicles have become increasingly targeted for cyber-attacks as their rate of digitalization is accelerated. Research on vehicle hacking has highlighted the security vulnerabilities of in-vehicle controller area networks (CANs) as the biggest problem. In particular, a CAN does not offer access control, authentication, or confidentiality, so it fails to prevent reconnaissance operations conducted by an adversary. Because its static configuration (CAN ID, data frame transmission cycle, and data field format) is used in an in-vehicle network environment, the adversary can conduct reconnaissance and easily acquire information to be used for an attack. One of the moving target defense strategies, network address shuffling (NAS), is an extremely practical security solution that can prevent in-vehicle CAN reconnaissance acts. In this paper, we propose a CAN ID shuffling technique using NAS. Our proposed security solution aims to increase the cost burden for the adversary to analyze CAN data frames. To evaluate the performance of the proposed security solution, we conducted an evaluation based on a labcar. Our proposed security solution may be implemented without altering the unique characteristics of the CAN standard. Hence, it can be used as a practical countermeasure to solve the problems affecting in-vehicle CANs.https://ieeexplore.ieee.org/document/8631032/Controller area networkin-vehicle network securitymoving target defensenetwork address shufflingvehicular cyber kill chain |
| spellingShingle | Samuel Woo Daesung Moon Taek-Young Youn Yousik Lee Yongeun Kim CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN IEEE Access Controller area network in-vehicle network security moving target defense network address shuffling vehicular cyber kill chain |
| title | CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN |
| title_full | CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN |
| title_fullStr | CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN |
| title_full_unstemmed | CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN |
| title_short | CAN ID Shuffling Technique (CIST): Moving Target Defense Strategy for Protecting In-Vehicle CAN |
| title_sort | can id shuffling technique cist moving target defense strategy for protecting in vehicle can |
| topic | Controller area network in-vehicle network security moving target defense network address shuffling vehicular cyber kill chain |
| url | https://ieeexplore.ieee.org/document/8631032/ |
| work_keys_str_mv | AT samuelwoo canidshufflingtechniquecistmovingtargetdefensestrategyforprotectinginvehiclecan AT daesungmoon canidshufflingtechniquecistmovingtargetdefensestrategyforprotectinginvehiclecan AT taekyoungyoun canidshufflingtechniquecistmovingtargetdefensestrategyforprotectinginvehiclecan AT yousiklee canidshufflingtechniquecistmovingtargetdefensestrategyforprotectinginvehiclecan AT yongeunkim canidshufflingtechniquecistmovingtargetdefensestrategyforprotectinginvehiclecan |