Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection

Manu Jo Varghese; Frank Jiang; Rakib Abdur; Robin Doss; Adnan Anwar

doi:10.1007/978-981-96-1624-4_17

Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection

Manu Jo Varghese
, Frank Jiang
, Rakib Abdur
, Robin Doss
, Adnan Anwar

Centre for Future Transport and Cities

Deakin University

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding › peer-review

Abstract

Vehicular systems are becoming interconnected digital ecosystems, reliant on complex networks for operations and safety. Cybersecurity vulnerabilities in these networks can jeopardize road safety. This study introduces a fuzzing framework to identify vulnerabilities in the Controller Area Network (CAN) bus. Using Automated Reverse Engineering-Guided Fuzzing, modified data packets are injected into the CAN framework, and Electronic Control Units (ECUs) reactions are monitored to uncover vulnerabilities. This approach identifies CAN bus network weaknesses and enhances understanding of their operational characteristics, setting a new standard for automotive cybersecurity.

Original language	English
Title of host publication	Information Security Applications. WISA 2024
Editors	Jong-Hyouk Lee, Keita Emura, Sokjoon Lee
Publisher	Springer, Singapore
Pages	219–230
Number of pages	12
Volume	15499
ISBN (Electronic)	978-981-96-1624-4
ISBN (Print)	978-981-96-1623-7
DOIs	https://doi.org/10.1007/978-981-96-1624-4_17
Publication status	E-pub ahead of print - 5 Feb 2025
Event	25th International Conference on Information Security Applications, WISA 2024 - Jeju Island, Korea, Republic of Duration: 21 Aug 2024 → 23 Aug 2024

Publication series

Name	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume	15499 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	25th International Conference on Information Security Applications, WISA 2024
Country/Territory	Korea, Republic of
City	Jeju Island
Period	21/08/24 → 23/08/24

Bibliographical note

Publisher Copyright:
© The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2025.

Keywords

CAN bus
Vulnerability detection
CAN test-bed
CAN security

ASJC Scopus subject areas

Theoretical Computer Science
General Computer Science

Access to Document

10.1007/978-981-96-1624-4_17

Cite this

Varghese, M. J., Jiang, F., Abdur, R., Doss, R., & Anwar, A. (2025). Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection. In J.-H. Lee, K. Emura, & S. Lee (Eds.), Information Security Applications. WISA 2024 (Vol. 15499, pp. 219–230). (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 15499 LNCS). Springer, Singapore. Advance online publication. https://doi.org/10.1007/978-981-96-1624-4_17

Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection. / Varghese, Manu Jo; Jiang, Frank; Abdur, Rakib et al.
Information Security Applications. WISA 2024. ed. / Jong-Hyouk Lee; Keita Emura; Sokjoon Lee. Vol. 15499 Springer, Singapore, 2025. p. 219–230 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics); Vol. 15499 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding › peer-review

Varghese, MJ, Jiang, F, Abdur, R, Doss, R & Anwar, A 2025, Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection. in J-H Lee, K Emura & S Lee (eds), Information Security Applications. WISA 2024. vol. 15499, Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics), vol. 15499 LNCS, Springer, Singapore, pp. 219–230, 25th International Conference on Information Security Applications, WISA 2024, Jeju Island, Korea, Republic of, 21/08/24. https://doi.org/10.1007/978-981-96-1624-4_17

Varghese MJ, Jiang F, Abdur R, Doss R, Anwar A. Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection. In Lee JH, Emura K, Lee S, editors, Information Security Applications. WISA 2024. Vol. 15499. Springer, Singapore. 2025. p. 219–230. (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)). Epub 2025 Feb 5. doi: 10.1007/978-981-96-1624-4_17

Varghese, Manu Jo ; Jiang, Frank ; Abdur, Rakib et al. / Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection. Information Security Applications. WISA 2024. editor / Jong-Hyouk Lee ; Keita Emura ; Sokjoon Lee. Vol. 15499 Springer, Singapore, 2025. pp. 219–230 (Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)).

@inproceedings{1158eda1f8a049388e8898a01c9a6573,

title = "Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection",

abstract = "Vehicular systems are becoming interconnected digital ecosystems, reliant on complex networks for operations and safety. Cybersecurity vulnerabilities in these networks can jeopardize road safety. This study introduces a fuzzing framework to identify vulnerabilities in the Controller Area Network (CAN) bus. Using Automated Reverse Engineering-Guided Fuzzing, modified data packets are injected into the CAN framework, and Electronic Control Units (ECUs) reactions are monitored to uncover vulnerabilities. This approach identifies CAN bus network weaknesses and enhances understanding of their operational characteristics, setting a new standard for automotive cybersecurity.",

keywords = "CAN bus, Vulnerability detection, CAN test-bed, CAN security",

author = "Varghese, \{Manu Jo\} and Frank Jiang and Rakib Abdur and Robin Doss and Adnan Anwar",

note = "Publisher Copyright: {\textcopyright} The Author(s), under exclusive license to Springer Nature Singapore Pte Ltd. 2025.; 25th International Conference on Information Security Applications, WISA 2024 ; Conference date: 21-08-2024 Through 23-08-2024",

year = "2025",

month = feb,

day = "5",

doi = "10.1007/978-981-96-1624-4\_17",

language = "English",

isbn = "978-981-96-1623-7",

volume = "15499",

series = "Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)",

publisher = "Springer, Singapore",

pages = "219–230",

editor = "Lee, \{Jong-Hyouk \} and Emura, \{ Keita \} and Lee, \{Sokjoon \}",

booktitle = "Information Security Applications. WISA 2024",

}

TY - GEN

T1 - Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection

AU - Varghese, Manu Jo

AU - Jiang, Frank

AU - Abdur, Rakib

AU - Doss, Robin

AU - Anwar, Adnan

PY - 2025/2/5

Y1 - 2025/2/5

N2 - Vehicular systems are becoming interconnected digital ecosystems, reliant on complex networks for operations and safety. Cybersecurity vulnerabilities in these networks can jeopardize road safety. This study introduces a fuzzing framework to identify vulnerabilities in the Controller Area Network (CAN) bus. Using Automated Reverse Engineering-Guided Fuzzing, modified data packets are injected into the CAN framework, and Electronic Control Units (ECUs) reactions are monitored to uncover vulnerabilities. This approach identifies CAN bus network weaknesses and enhances understanding of their operational characteristics, setting a new standard for automotive cybersecurity.

AB - Vehicular systems are becoming interconnected digital ecosystems, reliant on complex networks for operations and safety. Cybersecurity vulnerabilities in these networks can jeopardize road safety. This study introduces a fuzzing framework to identify vulnerabilities in the Controller Area Network (CAN) bus. Using Automated Reverse Engineering-Guided Fuzzing, modified data packets are injected into the CAN framework, and Electronic Control Units (ECUs) reactions are monitored to uncover vulnerabilities. This approach identifies CAN bus network weaknesses and enhances understanding of their operational characteristics, setting a new standard for automotive cybersecurity.

KW - CAN bus

KW - Vulnerability detection

KW - CAN test-bed

KW - CAN security

U2 - 10.1007/978-981-96-1624-4_17

DO - 10.1007/978-981-96-1624-4_17

M3 - Conference proceeding

AN - SCOPUS:85219190310

SN - 978-981-96-1623-7

VL - 15499

T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

SP - 219

EP - 230

BT - Information Security Applications. WISA 2024

A2 - Lee, Jong-Hyouk

A2 - Emura, Keita

A2 - Lee, Sokjoon

PB - Springer, Singapore

T2 - 25th International Conference on Information Security Applications, WISA 2024

Y2 - 21 August 2024 through 23 August 2024

ER -

Reverse Engineering-Guided Fuzzing for CAN Bus Vulnerability Detection

Abstract

Publication series

Conference

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Fingerprint

Cite this