Towards a systematic security evaluation of the automotive Bluetooth interface

Madeline Cheah; Siraj A. Shaikh; Olivier Haas; Alastair Ruddle

doi:10.1016/j.vehcom.2017.02.008

Towards a systematic security evaluation of the automotive Bluetooth interface

Madeline Cheah, Siraj A. Shaikh, Olivier Haas, Alastair Ruddle

HORIBA MIRA Ltd.

Research output: Contribution to journal › Article › peer-review

40 Citations (Scopus)

477 Downloads (Pure)

Abstract

The modern vehicle requires connectivity in order to enable and enhance comfort and convenience features so desired by customers. This connectivity however also allows the possibility that an external attacker may compromise the security (and therefore the safety) of the vehicle. In order to answer this problem, we propose a framework for a systematic method of security testing for automotive Bluetooth interfaces and implement a proof-of-concept tool to carry out testing on vehicles using this framework. From our findings, we conclude that the method enabled us to enumerate multiple weaknesses and that by continuing to extend the work, we would discover more.

Original language	English
Pages (from-to)	8-18
Number of pages	10
Journal	Vehicular Communications
Volume	9
Early online date	1 Mar 2017
DOIs	https://doi.org/10.1016/j.vehcom.2017.02.008
Publication status	Published - Jul 2017

Keywords

Automotive security
Operational and field testing
Threat model
Wireless security
Bluetooth

Access to Document

10.1016/j.vehcom.2017.02.008

Post-PrintAccepted author manuscript, 696 KBLicence: CC BY-NC-ND

Olivier haas
- Centre for Future Transport and Cities - Associate Professor Academic
Person: Teaching and Research

Cite this

@article{b2f7c108681740b3979686fa74ea86d9,

title = "Towards a systematic security evaluation of the automotive Bluetooth interface",

abstract = "The modern vehicle requires connectivity in order to enable and enhance comfort and convenience features so desired by customers. This connectivity however also allows the possibility that an external attacker may compromise the security (and therefore the safety) of the vehicle. In order to answer this problem, we propose a framework for a systematic method of security testing for automotive Bluetooth interfaces and implement a proof-of-concept tool to carry out testing on vehicles using this framework. From our findings, we conclude that the method enabled us to enumerate multiple weaknesses and that by continuing to extend the work, we would discover more.",

keywords = "Automotive security, Operational and field testing, Threat model, Wireless security, Bluetooth",

author = "Madeline Cheah and Shaikh, {Siraj A.} and Olivier Haas and Alastair Ruddle",

year = "2017",

month = jul,

doi = "10.1016/j.vehcom.2017.02.008",

language = "English",

volume = "9",

pages = "8--18",

journal = "Vehicular Communications",

issn = "2214-2096",

publisher = "Elsevier",

}

TY - JOUR

T1 - Towards a systematic security evaluation of the automotive Bluetooth interface

AU - Cheah, Madeline

AU - Shaikh, Siraj A.

AU - Haas, Olivier

AU - Ruddle, Alastair

PY - 2017/7

Y1 - 2017/7

N2 - The modern vehicle requires connectivity in order to enable and enhance comfort and convenience features so desired by customers. This connectivity however also allows the possibility that an external attacker may compromise the security (and therefore the safety) of the vehicle. In order to answer this problem, we propose a framework for a systematic method of security testing for automotive Bluetooth interfaces and implement a proof-of-concept tool to carry out testing on vehicles using this framework. From our findings, we conclude that the method enabled us to enumerate multiple weaknesses and that by continuing to extend the work, we would discover more.

AB - The modern vehicle requires connectivity in order to enable and enhance comfort and convenience features so desired by customers. This connectivity however also allows the possibility that an external attacker may compromise the security (and therefore the safety) of the vehicle. In order to answer this problem, we propose a framework for a systematic method of security testing for automotive Bluetooth interfaces and implement a proof-of-concept tool to carry out testing on vehicles using this framework. From our findings, we conclude that the method enabled us to enumerate multiple weaknesses and that by continuing to extend the work, we would discover more.

KW - Automotive security

KW - Operational and field testing

KW - Threat model

KW - Wireless security

KW - Bluetooth

U2 - 10.1016/j.vehcom.2017.02.008

DO - 10.1016/j.vehcom.2017.02.008

M3 - Article

SN - 2214-2096

VL - 9

SP - 8

EP - 18

JO - Vehicular Communications

JF - Vehicular Communications

ER -

Towards a systematic security evaluation of the automotive Bluetooth interface

Abstract

Keywords

Access to Document

Fingerprint

Profiles

Olivier haas

Cite this