Automotive Security on Abnormal Vehicle Behavior Using Only Fabricated Informative CAN Messages

抄録

We present a method for influencing vehicle behaviors using only informative Controller Area Network (CAN) messages that are used to inform vehicle status. Some recent vehicle attack techniques have been shown to have a significant impact on the automotive industry. Almost all previous studies employ active CAN messages that directly induce actions for the attacks, but there have been no studies that explicitly use only the informative CAN messages. This is the first report of using only informative CAN messages in an attack especially targeting a driving-support system. Through experiments, we show that abrupt acceleration/deceleration is abnormally induced using informative messages regarding the wheel speed while the cruise control system is activated. We also find that the speed limit control of the cruise control system can be disabled and the parking assist system can be canceled using fabricated informative messages. The experimental results reveal that fabricated informative CAN messages can manipulate the vehicle to yield an improper behavior. We evaluate the effectiveness of some countermeasures by applying them to the attacks and clarify the strength and weakness of each countermeasure. We believe that this study will bring a new perspective to the automotive security toward vehicle system design.