Cyber-Physical Systems Security—A Survey <s> 4) Smart Cars Vulnerabilities: <s> This work presents a study of current and future bus systems with respect to their security against various malicious attacks. After a brief description of the most well-known and established vehicular communication systems, we present feasible attacks and potential exposures for these automotive networks. We also provide an approach for secured automotive communication based on modern cryptographic mechanisms that provide secrecy, manipulation prevention and authentication to solve most of the vehicular bus security issues. <s> BIB001 </s> Cyber-Physical Systems Security—A Survey <s> 4) Smart Cars Vulnerabilities: <s> Abstract The IT security of automotive systems is an evolving area of research. To analyse the current situation and the potentially growing tendency of arising threats we performed several practical tests on recent automotive technology. With a focus on automotive systems based on CAN bus technology, this article summarises the results of four selected tests performed on the control systems for the window lift, warning light and airbag control system as well as the central gateway. These results are supplemented in this article by a classification of these four attack scenarios using the established CERT taxonomy and an analysis of underlying security vulnerabilities, and especially, potential safety implications. With respect to the results of these tests, in this article we further discuss two selected countermeasures to address basic weaknesses exploited in our tests. These are adaptations of intrusion detection (discussing three exemplary detection patterns) and IT-forensic measures (proposing proactive measures based on a forensic model). This article discusses both looking at the four attack scenarios introduced before, covering their capabilities and restrictions. While these reactive approaches are short-term measures, which could already be added to today’s automotive IT architecture, long-term concepts also are shortly introduced, which are mainly preventive but will require a major redesign. Beneath a short overview on respective research approaches, we discuss their individual requirements, potential and restrictions. <s> BIB002
If not physically protected, cars can be vulnerable to numerous attacks that do not necessarily require cyber-capabilities. For example, TPMS parts could be destroyed resulting in DoS attack such that TPMS cannot send tires' air pressure to the designated ECU. In addition, exposing the car to any kind of physical access is another vulnerability that could cause critical attacks. For example, a mechanic can get physical access to a car's internal parts directly through OBD-II port BIB001 . Furthermore, some external parts can be used to access critical components in the car's CAN network. Some attackers could get access to the internal network through exterior exposed components such as the exterior mirrors BIB002 .