TAILIEUCHUNG - Security and Privacy Vulnerabilities of In-Car Wireless Networks: A Tire Pressure Monitoring System Case Study

Wireless networks are being integrated into the modern automobile. The security and privacy implications of such in-car networks, however, have are not well under- stood as their transmissions propagate beyond the con- nes of a car's body. To understand the risks associated with these wireless systems, this paper presents a privacy and security evaluation of wireless Tire Pressure Moni- toring Systems using both laboratory experiments with isolated tire pressure sensor modules and experiments with a complete vehicle system. We show that eaves- dropping is easily possible at a distance of roughly 40m from a passing vehicle. Further, reverse-engineering of the underlying protocols revealed static 32 bit identi- ers and that messages can be. | Security and Privacy Vulnerabilities of In-Car Wireless Networks A Tire Pressure Monitoring System Case Study Ishtiaq Roufa Rob Millerb Hossen Mustafaa Travis Taylor1 Sangho Ohb Wenyuan Xua Marco Gruteserb Wade Trapped Ivan Seskar a Dept. ofCSE Univ. of South Carolina Columbia SC USA frouf mustafah taylort9 wyxug@ b WINLAB Rutgers Univ. Piscataway NJ USA rdmiller sangho gruteser trappe seskarg@ Abstract Wireless networks are being integrated into the modern automobile. The security and privacy implications of such in-car networks however have are not well understood as their transmissions propagate beyond the confines of a car s body. To understand the risks associated with these wireless systems this paper presents a privacy and security evaluation of wireless Tire Pressure Monitoring Systems using both laboratory experiments with isolated tire pressure sensor modules and experiments with a complete vehicle system. We show that eavesdropping is easily possible at a distance of roughly 40m from a passing vehicle. Further reverse-engineering of the underlying protocols revealed static 32 bit identifiers and that messages can be easily triggered remotely which raises privacy concerns as vehicles can be tracked through these identifiers. Further current protocols do not employ authentication and vehicle implementations do not perform basic input validation thereby allowing for remote spoofing of sensor messages. We validated this experimentally by triggering tire pressure warning messages in a moving vehicle from a customized software radio attack platform located in a nearby vehicle. Finally the paper concludes with a set of recommendations for improving the privacy and security of tire pressure monitoring systems and other forthcoming in-car wireless sensor networks. 1 Introduction The quest for increased safety and efficiency of automotive transportation system is leading car makers to integrate wireless communication systems into .

• Cơ khí - Chế tạo máy
• Brazilian Agribusiness
• Forestry and Life
• Cycle Assessment
• Wildlife Forestry
• Fire Ignition
• Trends in Durango