Cyber-Physical Systems Security—A Survey <s> b) Malware injection via Bluetooth: <s> Modern automobiles are pervasively computerized, and hence potentially vulnerable to attack. However, while previous research has shown that the internal networks within some modern cars are insecure, the associated threat model--requiring prior physical access--has justifiably been viewed as unrealistic. Thus, it remains an open question if automobiles can also be susceptible to remote compromise. Our work seeks to put this question to rest by systematically analyzing the external attack surface of a modern automobile. We discover that remote exploitation is feasible via a broad range of attack vectors (including mechanics tools, CD players, Bluetooth and cellular radio), and further, that wireless communications channels allow long distance vehicle control, location tracking, in-cabin audio exfiltration and theft. Finally, we discuss the structural characteristics of the automotive ecosystem that give rise to such problems and highlight the practical challenges in mitigating them. <s> BIB001 </s> Cyber-Physical Systems Security—A Survey <s> b) Malware injection via Bluetooth: <s> Vehicle-IT convergence technology is a rapidly rising paradigm of modern vehicles, in which an electronic control unit (ECU) is used to control the vehicle electrical systems, and the controller area network (CAN), an in-vehicle network, is commonly used to construct an efficient network of ECUs. Unfortunately, security issues have not been treated properly in CAN, although CAN control messages could be life-critical. With the appearance of the connected car environment, in-vehicle networks (e.g., CAN) are now connected to external networks (e.g., 3G/4G mobile networks), enabling an adversary to perform a long-range wireless attack using CAN vulnerabilities. In this paper we show that a long-range wireless attack is physically possible using a real vehicle and malicious smartphone application in a connected car environment. We also propose a security protocol for CAN as a countermeasure designed in accordance with current CAN specifications. We evaluate the feasibility of the proposed security protocol using CANoe software and a DSP-F28335 microcontroller. Our results show that the proposed security protocol is more efficient than existing security protocols with respect to authentication delay and communication load. <s> BIB002
Checkoway et al. BIB001 conducted an attack that exploits compromised devices connected to the car through a Bluetooth connection. The authors assume the attacker's ability to first compromise a connected device to the car, usually a smartphone. Then they launch an attack exploiting the connectivity between the Bluetooth's ECU, which is the TCU, with the other ECUs. This was realized by installing a hidden malware, Trojan Horse, on the connected smartphone. The malware captures Bluetooth connections and then sends a malicious payload to the TCU. Then once the TCU is compromised, the attacker can communicate with safety-critical ECUs, such as the ABS. In addition, Woo et al. BIB002 showed a wireless attack that exploits a malicious diagnostic mobile app connected to the OBD-II port via Bluetooth. Since the app runs on a mobile device, the attack can be launched through a cellular network. c) Malware injection via cellular network: The cellular channel in the TCU is exploitable and vulnerable to malware injection attacks. The attack is realized by calling the target car and injecting the payload by playing an MP3 file BIB001 .