Modern automobiles are no longer mere mechanical devices; they are pervasively monitored and controlled by dozens of digital computers coordinated via internal vehicular networks. While this transformation has driven major advancements in efficiency and safety, it has also introduced a range of new potential risks. In this paper we experimentally evaluate these issues on a modern automobile and demonstrate the fragility of the underlying system structure. We demonstrate that an attacker who is able to infiltrate virtually any Electronic Control Unit (ECU) can leverage this ability to completely circumvent a broad array of safety-critical systems. Over a range of experiments, both in the lab and in road tests, we demonstrate the ability to adversarially control a wide range of automotive functions and completely ignore driver input\dash including disabling the brakes, selectively braking individual wheels on demand, stopping the engine, and so on. We find that it is possible to bypass rudimentary network security protections within the car, such as maliciously bridging between our car's two internal subnets. We also present composite attacks that leverage individual weaknesses, including an attack that embeds malicious code in a car's telematics unit and that will completely erase any evidence of its presence after a crash. Looking forward, we discuss the complex challenges in addressing these vulnerabilities while considering the existing automotive ecosystem.

/pdf/experimental-security-analysis-of-a-modern-automobile-27zp79jtxi.pdf

Experimental Security Analysis of a Modern Automobile

Modern automobiles are pervasively computerized, and hence potentially vulnerable to attack. However, while previous research has shown that the internal networks within some modern cars are insecure, the associated threat model--requiring prior physical access--has justifiably been viewed as unrealistic. Thus, it remains an open question if automobiles can also be susceptible to remote compromise. Our work seeks to put this question to rest by systematically analyzing the external attack surface of a modern automobile. We discover that remote exploitation is feasible via a broad range of attack vectors (including mechanics tools, CD players, Bluetooth and cellular radio), and further, that wireless communications channels allow long distance vehicle control, location tracking, in-cabin audio exfiltration and theft. Finally, we discuss the structural characteristics of the automotive ecosystem that give rise to such problems and highlight the practical challenges in mitigating them.

/pdf/comprehensive-experimental-analyses-of-automotive-attack-2k60wr8zvw.pdf

Comprehensive experimental analyses of automotive attack surfaces

Recommender systems have been researched extensively by the Technology Enhanced Learning (TEL) community during the last decade. By identifying suitable resources from a potentially overwhelming variety of choices, such systems offer a promising approach to facilitate both learning and teaching tasks. As learning is taking place in extremely diverse and rich environments, the incorporation of contextual information about the user in the recommendation process has attracted major interest. Such contextualization is researched as a paradigm for building intelligent systems that can better predict and anticipate the needs of users, and act more efficiently in response to their behavior. In this paper, we try to assess the degree to which current work in TEL recommender systems has achieved this, as well as outline areas in which further work is needed. First, we present a context framework that identifies relevant context dimensions for TEL applications. Then, we present an analysis of existing TEL recommender systems along these dimensions. Finally, based on our survey results, we outline topics on which further research is needed.

Context-Aware Recommender Systems for Learning: A Survey and Future Challenges

Significant developments have taken place over the past few years in the area of vehicular communication systems. Now, it is well understood in the community that security and protection of private user information are a prerequisite for the deployment of the technology. This is so precisely because the benefits of VC systems, with the mission to enhance transportation safety and efficiency, are at stake. Without the integration of strong and practical security and privacy enhancing mechanisms, VC systems can be disrupted or disabled, even by relatively unsophisticated attackers. We address this problem within the SeVeCom project, having developed a security architecture that provides a comprehensive and practical solution. We present our results in a set of two articles in this issue. In this first one, we analyze threats and types of adversaries, identify security and privacy requirements, and present a spectrum of mechanisms to secure VC systems. We provide a solution that can be quickly adopted and deployed. In the second article we present our progress toward the implementation of our architecture and results on the performance of the secure VC system, along with a discussion of upcoming research challenges and our related current results.

/pdf/secure-vehicular-communication-systems-design-and-417ruy2758.pdf

Secure vehicular communication systems: design and architecture

Digital twin (DT) is an emerging concept that is gaining attention in various industries It refers to the ability to clone a physical object (PO) into a software counterpart The softwarized object, termed logical object, reflects all the important properties and characteristics of the original object within a specific application context To fully determine the expected properties of the DT, this article surveys the state-of-the-art starting from the original definition within the manufacturing industry It takes into account related proposals emerging in other fields, namely augmented and virtual reality (eg, avatars), multiagent systems, and virtualization This survey thereby allows for the identification of an extensive set of DT features that point to the “softwarization” of POs To properly consolidate a shared DT definition, a set of foundational properties is identified and proposed as a common ground outlining the essential characteristics (must-haves) of a DT Once the DT definition has been consolidated, its technical and business value is discussed in terms of applicability and opportunities Four application scenarios illustrate how the DT concept can be used and how some industries are applying it The scenarios also lead to a generic DT architectural model This analysis is then complemented by the identification of software architecture models and guidelines in order to present a general functional framework for the DT This article, eventually, analyses a set of possible evolution paths for the DT considering its possible usage as a major enabler for the softwarization process

/pdf/digital-twin-in-the-iot-context-a-survey-on-technical-4dp6h32olt.pdf

Digital Twin in the IoT Context: A Survey on Technical Features, Scenarios, and Architectural Models

In a dynamic heterogeneous environment, such as Pervasive Computing, context-aware adaptation is a key concept to meet the varying requirements of different clients. In order to enable context-aware adaptation, context information must be gathered and eventually presented to the application performing the adaptation. Therefore, a common representation format for the context information is required. In this paper we examine possible representation formats for context information. We discuss requirements for such a representation format and how those requirements are met by existing approaches. Based on our findings about the flaws of existing approaches we propose a novel representation format that is comprehensive and thoroughly structured to meet all the requirements: Comprehensive Structured Context Profiles (CSCP). CSCP is based on the Resource Description Framework (RDF) and overcomes the shortcomings of the Composite Capability/Preference Profiles language (CC/PP) regarding structuring. Furthermore it extends the mechanisms to express user preferences.

https://www.rn.inf.tu-dresden.de/uploads/SCI2002-paper512JH.pdf

Modeling of Context Information for Pervasive Computing Applications

Traffic telematics applications, like road traffic management, operate in an extremely dynamic mobile computing environment. The Mobile Agent paradigm here becomes a promising alternative to the conventional client/server approach. In this article we evaluate the application of Mobile Agent Technology in the area of vehicular traffic management and introduce a general application partitioning model which facilitates the combination of asynchronous and autonomous operation, data filtering and scheduling in a user specific manner. A sample application and performance results are presented.

An Agent Based Application for Personalized Vehicular Traffic Management

In future networks, mobile computers will become increasingly important. Distributed, mobile applications enable information access anywhere, anytime. Mobility, location independence and adequate information access will be supported simultaneously. Major problems due to mobility and the specific characteristics of portable computers and wireless communications are dynamic configuration, moving resources, reachability, data and functional consistency. In this paper we present a system called MOBI-DICK that addresses the problems of mobile computing. The requirements and solutions for service mobility are described in detail.

/pdf/system-integration-for-mobile-computing-and-service-mobility-3qh4790acy.pdf

System integration for mobile computing and service mobility

Previous research in mobile data management has been focused on scenarios where mobile clients replace fixed ones. However, not all potential application fields of mobile computing fit into this scenario. There exist scenarios where mobile clients will not replace but accompany fixed ones. In this paper, we introduce a real-world application scenario requiring the capability to process a transaction from alternating, potentially mobile client hosts. With this scenario in mind, we have developed three approaches for supporting multiple clients in combination with a so-called TXAgent (Transaction Processing Agent), which is an object in the fixed network which manages transactions on behalf of the client, and an approach to realise the client as a migrating object. Finally, we present a prototype implementation of the most promising approach.

Transaction processing in a mobile computing environment with alternating client hosts

Modern vehicles and in particular automated or autonomous vehicles utilize data gained from wheel speed sensors for various functionalities like determining current speed or electronic stability control. The wheel speed is derived from a multitude of hall sensors. By generating an electromagnetic field with a fitting frequency it is possible to change the wheel speed sensor's interpretation of wheel speed. The braking system and electronic stability control would then base their actions on incorrect data possibly leading to a dangerous situation. In this research, we investigate practical feasibility and impact of such attacks. For this, an audio amplifier and a Helmholtz coil were used to emit electromagnetic fields with varying frequencies. We then analyse the effect of a single manipulated wheel speed sensor on the electronic stability control used in modern vehicles (using a hardware-in-the-loop setup). We finally describe consequences and possible countermeasure for the upcoming autonomous and highly automated vehicles.

On The Manipulation of Wheel Speed Sensors and Their Impact in Autonomous Vehicles

Handle everyday research tasks with reliable, citation-backed results

Your personal Research Agent to handle research tasks with citation-backed results

Popular Tasks used by Researchers

How can I help with your research?

Meet SciSpace

Get more enhanced response by uploading the PDFs you want me to reference.

No relevant PDFs in your library

SciSpace is the AI research assistant for academics. Run systematic literature reviews on 280M+ papers, and write papers with cited sources. Trusted by 1M+ students, PhDs & researchers.

SciSpace | AI for Research

Analyze PDFs

Code & Manuscripts

Funding & Grants

Literature & Patents

Medical & Clinical Data

Systematic Review

Visualize & Present

Web & Data

Build a Google Scholar-like website for your research.

Build a website

Create charts and images for your research

Create a Chart

Write a paper for submission to a journal

Draft a manuscript

Patent Search

Design eye-catching scientific posters in minutes.

Scientific Poster Generation

Systematic Literature Review

One task is running at the moment. Your messages will be shown right after.

Drag and drop or click here to browse

Loved by <highlight>1 million+</highlight> researchers

Extract a list of specific topics and their sources from unstructured text

Topics

Compare and analyze relevant papers that matches with your search

Papers

Get insights from PDFs and bookmarked papers from your library

My library

Recent searches

Try searching for:

Catch AI-generated content in scholarly and non-scholarly content

{ai} Detector

Ai Writer

Get PDF Summaries, highlighted text explanations 

Chat with PDF

Effortlessly create in-text citations and bibliographies in APA and 2,500 other formats

Citation generator

Get explanations, summaries, and answers on academic papers

Ease up your research workflow with {scispace}'s cohort of exciting AI tools

Elevate your academic writing skills and convey your ideas the way you want

Paraphraser

Explore our range of reading and writing tools

Your file is being prepared and should be ready in a few minutes. If it's a large file, it might take a bit longer. You can close this window, and we'll email you the file when it's done.

You have reached a maximum limit of <strong>{limit}</strong> columns in the table. Remove at least <strong>1</strong> column to add or create another one.

Albert Held

Author Tools

Chat about Author