CYBERSECURITY IN AUTOMOTIVE NETWORKS: MITIGATING THREATS IN CAN, LIN AND AUTOMOTIVE ETHERNET SYSTEMS

Siranjeevi Srinivasa Raghavan

doi:10.5281/zenodo.14892661

Authors

Siranjeevi Srinivasa Raghavan Independent Researcher, USA Author

DOI:

https://doi.org/10.5281/zenodo.14892661

Keywords:

Automotive Cybersecurity, Controller Area Network (CAN) Security, Lightweight Encryption, Intrusion Detection System (IDS), Artificial Intelligence in Automotive Security, Blockchain for ECU Authentication, Automotive Ethernet Security, In-Vehicle Communication Protocols, Secure Vehicle Networks, Standardization in Automotive Cybersecurity

Abstract

The increasing complexity and interconnectivity of modern vehicles have introduced significant cybersecurity challenges in in-vehicle communication networks, particularly in Controller Area Network (CAN), Local Interconnect Network (LIN), and Automotive Ethernet. While these protocols facilitate seamless data exchange between Electronic Control Units (ECUs), they were originally designed without robust security features, making them vulnerable to message spoofing, denial-of-service (DoS) attacks, and unauthorized access. Existing mitigation strategies, including message authentication, hardware security modules (HSMs), and intrusion detection systems (IDSs), have provided partial solutions but still face latency, computational overhead, and backward compatibility challenges.

This study explores alternative security approaches for enhancing CAN bus security, including lightweight cryptographic algorithms, real-time software-based monitoring, and AI-driven anomaly detection. Additionally, emerging technologies such as blockchain-based authentication and machine learning-based intrusion detection offer promising avenues for securing in-vehicle networks against evolving cyber threats. The research also highlights the need for standardized security regulations to ensure industry-wide adoption of robust cybersecurity frameworks. By integrating cryptographic security measures, AI-powered detection mechanisms, and regulatory compliance, automakers can significantly enhance the resilience of vehicle communication networks, ensuring safe and secure mobility in the era of connected and autonomous vehicles.

References

Woo, S., Jo, H. J., & Lee, D. H. (2015). A practical wireless attack on the connected car and security protocol for in-vehicle CAN. IEEE Transactions on Intelligent Transportation Systems, 16(2), 993-1006.

B., Anderson, D., Shacham, H., Savage, S., & Kohno, T. (2011). Comprehensive experimental analyses of automotive attack surfaces. Proceedings of the USENIX Security Symposium, 20, 6-13.

Checkoway, S. (2010). Experimental security analysis of a modern automobile. IEEE Symposium on Security and Privacy, 447-462.

Miller, C., & Valasek, C. (2015). Remote exploitation of an unaltered passenger vehicle. Black Hat USA 2015 Conference.

Groza, B., Murvay, P. S., Pop, T., & van Herrewege, A. (2016). LiBrACAN: Lightweight broadcast authentication for CAN. ACM Transactions on Embedded Computing Systems, 16(3), 1-21.

Van Herrewege, A., Singelee, D., &Verbauwhede, I. (2011). CANAuth – A simple, backward-compatible broadcast authentication protocol for CAN bus. ECRYPT Workshop on Lightweight Cryptography.

Kang, M., Choi, W., & Kim, J. (2019). CAN protocol security enhancement through message authentication and anomaly detection. IEEE Access, 7, 58632-58644.

Petit, J., &Shladover, S. E. (2015). Potential cyberattacks on automated vehicles. IEEE Transactions on Intelligent Transportation Systems, 16(2), 546-556.

Van Bulck, J., Piessens, F., &Strackx, R. (2017). SGX-step: A practical attack framework for precise enclave execution control. Proceedings of the USENIX Security Symposium, 2017, 495-510.

Lukáš, P., & Urbanec, J. (2016). Intrusion detection system for automotive networks: CAN bus anomaly detection. International Conference on Software, Telecommunications and Computer Networks (SoftCOM), 2016.

Javed, A., & Rana, O. (2024). A robust multi-stage intrusion detection system for in-vehicle network security using hierarchical federated learning. Vehicular Communications, Elsevier.

Barletta, V. S., Caivano, D., & Catalano, C. (2024). Quantum-based automotive threat intelligence and countermeasures. Proceedings of the 28th ACM International Conference.

Maodah, K. A., & Alhomdy, S. A. (2024). A comprehensive survey on automotive hacking. 1st International Conference on Security in Digital Transformation, IEEE.

Shen, L., Xiu, J., Zhang, Z., & Yang, Z. (2024). A fuzz testing method based on DDPM for intelligent connected vehicles CAN communication. SAE Technical Paper.

Du, L., Zeng, L., & Gu, Z. (2024). Vehicle network intrusion detection based on K-nearest neighbor variational autoencoder using contrastive learning. IEEE 9th International Conference.

Zhang, D., Liu, J., Fan, Z., & Cai, Y. (2024). Research on vehicle CAN communication cybersecurity. Fourth International Conference on Information Security, SPIE.