Comprehensive Experimental Analyses of （综合实验分析）.pdfVIP

Comprehensive Experimental Analyses of Automotive Attack Surfaces Stephen Checkoway, Damon McCoy, Brian Kantor, Danny Anderson, Hovav Shacham, and Stefan Savage University of California, San Diego Karl Koscher, Alexei Czeskis, Franziska Roesner, and Tadayoshi Kohno University of Washington Abstract This situation suggests a significant gap in knowledge, Modern automobiles are pervasively computerized, and and one with considerable practical import. To what ex- hence potentially vulnerable to attack. However, while tent are external attacks possible, to what extent are they previous research has shown that the internal networks practical, and what vectors represent the greatest risks? within some modern cars are insecure, the associated Is the etiology of such vulnerabilities the same as for threat model — requiring prior physical access — has desktop software and can we think of defense in the same justifiably been viewed as unrealistic. Thus, it remains an manner? Our research seeks to fill this knowledge gap open question if automobiles can also be susceptible to through a systematic and empirical analysis of the remote remote compromise. Our work seeks to put this question attack surface of late model mass-production sedan. to rest by systematically analyzing the external attack We make four principal contributions: surface of a modern automobile. We discover that remote Threat model characterization. We systematically exploitation is feasible via a broad range of attack vectors synthesize a set of possible external attack vectors as (including mechanics tools, CD players, Bluetooth and