(Semi-)Automatically Parsing Private Protocols for In-Vehicle ECU Communications
In-vehicle electronic control unit (ECU) communications generally count on private protocols (defined by the manufacturers) under controller area network (CAN) specifications. Parsing the private protocols for a particular vehicle model would be of great significance in testing the vehicle’s resista...
| Main Authors: | , |
|---|---|
| Format: | Article |
| Language: | English |
| Published: |
MDPI AG
2021-11-01
|
| Series: | Entropy |
| Subjects: | |
| Online Access: | https://www.mdpi.com/1099-4300/23/11/1495 |
| _version_ | 1797510395711193088 |
|---|---|
| author | Tongtong Chen Xiangxue Li |
| author_facet | Tongtong Chen Xiangxue Li |
| author_sort | Tongtong Chen |
| collection | DOAJ |
| description | In-vehicle electronic control unit (ECU) communications generally count on private protocols (defined by the manufacturers) under controller area network (CAN) specifications. Parsing the private protocols for a particular vehicle model would be of great significance in testing the vehicle’s resistance to various attacks, as well as in designing efficient intrusion detection and prevention systems (IDPS) for the vehicle. This paper proposes a suite of methods for parsing ECU private protocols on in-vehicle CAN network. These methods include an algorithm for parsing discrete variables (encoded in a discrete manner, e.g., gear state), an algorithm for parsing continuous variables (encoded in a continuous manner, e.g., vehicle speed), and a parsing method based on upper-layer protocols (e.g., OBD and UDS). Extensive verifications have been performed on five different brands of automobiles (including an electric vehicle) to demonstrate the universality and the correctness of these parsing algorithms. Some parsing tips and experiences are also presented. Our continuous-variables parsing algorithm could run in a semi-automatic manner and the parsing algorithm from upper-layer protocols could execute in a completely automatic manner. One might view the results obtained by our parsing algorithms as an important indicator of penetration testing on in-vehicle CAN network. |
| first_indexed | 2024-03-10T05:31:49Z |
| format | Article |
| id | doaj.art-c6865ca4517f46d4a7620d9312ecf9a3 |
| institution | Directory Open Access Journal |
| issn | 1099-4300 |
| language | English |
| last_indexed | 2024-03-10T05:31:49Z |
| publishDate | 2021-11-01 |
| publisher | MDPI AG |
| record_format | Article |
| series | Entropy |
| spelling | doaj.art-c6865ca4517f46d4a7620d9312ecf9a32023-11-22T23:15:48ZengMDPI AGEntropy1099-43002021-11-012311149510.3390/e23111495(Semi-)Automatically Parsing Private Protocols for In-Vehicle ECU CommunicationsTongtong Chen0Xiangxue Li1School of Software Engineering, East China Normal University, Shanghai 200062, ChinaSchool of Software Engineering, East China Normal University, Shanghai 200062, ChinaIn-vehicle electronic control unit (ECU) communications generally count on private protocols (defined by the manufacturers) under controller area network (CAN) specifications. Parsing the private protocols for a particular vehicle model would be of great significance in testing the vehicle’s resistance to various attacks, as well as in designing efficient intrusion detection and prevention systems (IDPS) for the vehicle. This paper proposes a suite of methods for parsing ECU private protocols on in-vehicle CAN network. These methods include an algorithm for parsing discrete variables (encoded in a discrete manner, e.g., gear state), an algorithm for parsing continuous variables (encoded in a continuous manner, e.g., vehicle speed), and a parsing method based on upper-layer protocols (e.g., OBD and UDS). Extensive verifications have been performed on five different brands of automobiles (including an electric vehicle) to demonstrate the universality and the correctness of these parsing algorithms. Some parsing tips and experiences are also presented. Our continuous-variables parsing algorithm could run in a semi-automatic manner and the parsing algorithm from upper-layer protocols could execute in a completely automatic manner. One might view the results obtained by our parsing algorithms as an important indicator of penetration testing on in-vehicle CAN network.https://www.mdpi.com/1099-4300/23/11/1495CANECUin-vehicle networkprivate protocols |
| spellingShingle | Tongtong Chen Xiangxue Li (Semi-)Automatically Parsing Private Protocols for In-Vehicle ECU Communications Entropy CAN ECU in-vehicle network private protocols |
| title | (Semi-)Automatically Parsing Private Protocols for In-Vehicle ECU Communications |
| title_full | (Semi-)Automatically Parsing Private Protocols for In-Vehicle ECU Communications |
| title_fullStr | (Semi-)Automatically Parsing Private Protocols for In-Vehicle ECU Communications |
| title_full_unstemmed | (Semi-)Automatically Parsing Private Protocols for In-Vehicle ECU Communications |
| title_short | (Semi-)Automatically Parsing Private Protocols for In-Vehicle ECU Communications |
| title_sort | semi automatically parsing private protocols for in vehicle ecu communications |
| topic | CAN ECU in-vehicle network private protocols |
| url | https://www.mdpi.com/1099-4300/23/11/1495 |
| work_keys_str_mv | AT tongtongchen semiautomaticallyparsingprivateprotocolsforinvehicleecucommunications AT xiangxueli semiautomaticallyparsingprivateprotocolsforinvehicleecucommunications |