Abstract:Abstract In intelligent vehicular networks, vehicles have enhanced sensing capabilities and carry computing and communication platforms to enable new versatile systems known as Vehicular Communication (VC) systems. Vehicles communicate with other vehicles and with nearby fixed equipment to support different applications, including those which increase driver awareness of the surroundings. This should result in improved safety and may optimize traffic. However, VC systems are vulnerable to cyber attacks involving message manipulation. Research aimed at tackling this problem has resulted in the proposal of multiple authentication protocols. Several existing survey papers have attempted to classify some of these protocols based on a limited set of characteristics. However, to date there is no generic framework to support the comparison of these protocols and provide guidance for design and evaluation. Most existing classifications either use computation complexity of cryptographic techniques as a criterion, or they fail to make connections between different important aspects of authentication. This paper provides such a framework, proposing a new taxonomy to enable a consistent means of classifying authentication schemes based upon seven main criteria. The main contribution of this study is a framework to enable protocol designers and investigators to adequately compare and select authentication schemes when deciding on particular protocols to implement in an application. Our framework can be applied in design, making choices appropriate for the intended context in both intra-vehicle and inter-vehicle communications. We demonstrate the application of our framework using two different types of case study: individual analysis and hypothetical design. Additionally, this work makes several related contributions. We present the network model, outline the applications, list the communication patterns and the underlying standards, and discuss the necessity of using cryptography and key management in VC systems. We also review the threats, authentication, and privacy requirements in vehicular networks.

Security Analysis of Automotive Protocols

Authentication strategies in vehicular communications: a taxonomy and framework

Towards Automatically Reverse Engineering Vehicle Diagnostic Protocols

Cybersecurity challenges in vehicular communications

Lightweight Secure Communication Protocols for In-Vehicle Sensor Networks

A Systematic Approach to Automotive Security

Security Risk Analysis Methodologies for Automotive Systems

Security in Automotive Networks: Lightweight Authentication and Authorization

A Survey and Comparative Analysis of Security Properties of CAN Authentication Protocols

A Formal Model to Facilitate Security Testing in Modern Automotive Systems

Survey of Model-Based Security Testing Approaches in the Automotive Domain

Security Modeling and Analysis on Intra Vehicular Network.

Applying Security Testing Techniques to Automotive Engineering

Security threats to automotive CAN networks—Practical examples and selected short-term countermeasures

A Multilayered Security Infrastructure for Connected Vehicles -- First Lessons from the Field

Cyber-Security Internals of a Skoda Octavia vRS: A Hands on Approach

Revisiting Automotive Attack Surfaces: a Practitioners’ Perspective

Cybersecurity Threat Analysis, Risk Assessment and Design Patterns for Automotive Networked Embedded Systems: A Case Study

Security issues in controller area networks in automobiles

Review of the Security of Backward-Compatible Automotive Inter-ECU Communication

Combining Cyber Security Intelligence to Refine Automotive Cyber Threats