The Dangers of Malicious Hacking in Modern Day Automobiles
Open Access
- Author:
- Dulan, Michael Sean
- Area of Honors:
- Supply Chain and Information Systems
- Degree:
- Bachelor of Science
- Document Type:
- Thesis
- Thesis Supervisors:
- Dr. Robert Alexander Novack, Thesis Supervisor
Dr. John C. Spychalski, Thesis Honors Advisor - Keywords:
- Automobiles
Security
Hacking
Safety
Transportation
Networks
CAN
OBD-II
Electronic Control Unit
J1939
Fuzzing
Drivers - Abstract:
- The purpose of this study is to understand how automobiles are vulnerable to cyber-attack, to identify the level of control outside parties can secure over a vehicle, and to determine the feasibility of an individual with malicious intent to put those using our transportation system in danger. The question of whether outside parties can access the network inside an automobile has already been answered. IEEE has a very stunning paper about their research into controlling a car remotely and proved that it was possible to enter the network a number of different ways (Checkoway, 2014). It is this study and the research performed by Dr. Charlie Miller and Chris Valasek, outlined in their paper “Adventures in Automotive Networks and Control Units,” that has largely inspired this thesis (Miller, 2013). This paper will explain in simpler terms how networks are run in modern vehicles, where they are most vulnerable, what an attacker with access to a vehicle network is capable of, and how these networks can be improved to ensure safer road transportation. No cyber-attack has ever been recorded so far by vehicle owners or manufacturers. However, there is no detection system currently to record an attack should one occur, and likely if an attacker caused an incident it would be thought of as a malfunction. Through analysis, it is clear that the addition of detection systems and improved security is necessary to ensure customer safety. It is up to car manufacturers to determine what level of improvement customers will expect and be willing to pay for moving forward.