Researchers create framework to stop cyber attacks on internet-connected cars

May 29, 2018, University of Texas at San Antonio
Credit: CC0 Public Domain

A new study by Maanak Gupta, doctoral candidate at The University of Texas at San Antonio, and Ravi Sandhu, Lutcher Brown Endowed Professor of computer science and founding executive director of the UTSA Institute for Cyber Security (ICS), examines the cybersecurity risks for new generations of smart which includes both autonomous and internet connected cars.

"Driverless and are increasingly becoming a part of our world, where cybersecurity threats are already a reality," Sandhu said. "It's imperative that we support research that addresses these concerns and presents a strong, innovative solution."

Cars with internet connectivity, also known as "connected cars," offer potential for many conveniences and innovations. They could allow for real-time and location-sensitive communication between drivers or even pedestrians, which could help make the roads safer for both. The connectivity could also allow the cars to capture safety and environmental conditions around the vehicle, including road obstructions, accidents, which also enables real-time vehicle-to-vehicle interaction on road.

"Connected cars have almost infinite possibilities for creative technological applications," Gupta said. "Companies could even take advantage of the connectivity to implement location-based marketing tactics, providing drivers with nearby sales and offers."

However, the researchers caution that as soon as cars are exposed to internet supported functionality, they are also open to the same cybersecurity threats that loom over other electronic devices, such as computers and cell phones. For this reason, Gupta and Sandhu created an authorization for connected cars which provides a conceptual overview of various access control decision and enforcement points needed for dynamic and short-lived interaction in smart cars ecosystem.

"There are vulnerabilities in every machine," said Gupta. "We're working to make sure someone doesn't take advantage of those vulnerabilities and turn them into threats. The questions of 'who do I trust?' and 'how do I trust?' are still to be answered in smart cars."

Gupta and Sandhu framework discussed an access control oriented architecture for connected cars and proposed authorization framework, which is a key to determine what and where vulnerabilities can be exploited. They further discuss several approaches to mitigate cyber threats in this ecosystem.

Using this framework, the team at ICS is trying to create and use security authorization policies in different access control decision points to prevent cyber attacks and unauthorized access to sensors and data in smart cars.

"There are infinite opportunities in this new IoT domain but at the same time cyber threats will have serious implications in . Can you imagine if someone controls your car steering remotely, or shuts down the engine in the middle of the road?" Gupta said. "There should not be absolutely any open end to orchestrate attacks on these cars."

According to Gupta, the authorization framework can also be applied to driverless cars, noting that these vehicles may be even more vulnerable to cyber threats.

"If we're going to open the world to cars driven by machines, we must be absolutely certain that they aren't able to be compromised by a malicious attack," he said. "That it what this framework is for."

Explore further: Here's how we can stop driverless cars from being hacked

More information: Paper: DOI: 10.1145/3205977.3205994

Related Stories

Here's how we can stop driverless cars from being hacked

August 23, 2017

Once hackers get into your internet-connected car, they could disable the air bags, brakes, door locks and even steal the vehicle. That's the finding of researchers who recently uncovered a flaw in the way the different components ...

China to see driverless cars in '3-5 years': Baidu

March 15, 2018

Self-driving cars will hit the roads in China "within three to five years", the founder of Chinese internet giant Baidu, one of the world's leading designers of driverless cars, said Thursday.

Lack of cyber security poses threat to modern cars

January 31, 2017

Cars are becoming increasingly smarter and are connected with each other and their surroundings to an increasing extent via their on-board systems. From April 2018, it will be mandatory for all new cars manufactured in the ...

Cars racing to become 'mobile phones on wheels'

March 1, 2017

The car of the future will let you pay for petrol or parking directly from your vehicle and receive traffic alerts and restaurant recommendations from your onboard digital assistant.

How driverless cars will change travel

December 22, 2017

The idea of a completely autonomous vehicle is exciting—and a bit scary. As we envision future advancements on the road, many would like to know just how much driverless cars could change human travel.

Recommended for you

Permanent, wireless self-charging system using NIR band

October 8, 2018

As wearable devices are emerging, there are numerous studies on wireless charging systems. Here, a KAIST research team has developed a permanent, wireless self-charging platform for low-power wearable electronics by converting ...

Facebook launches AI video-calling device 'Portal'

October 8, 2018

Facebook on Monday launched a range of AI-powered video-calling devices, a strategic revolution for the social network giant which is aiming for a slice of the smart speaker market that is currently dominated by Amazon and ...

Artificial enzymes convert solar energy into hydrogen gas

October 4, 2018

In a new scientific article, researchers at Uppsala University describe how, using a completely new method, they have synthesised an artificial enzyme that functions in the metabolism of living cells. These enzymes can utilize ...

1 comment

Adjust slider to filter visible comments by rank

Display comments: newest first

antialias_physorg
1 / 5 (1) May 29, 2018
"Companies could even take advantage of the connectivity to implement location-based marketing tactics, providing drivers with nearby sales and offers."

Targeted advertising while driving...oh joy.

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.