DOCSLIB.ORG

Cybersecurity Research Considerations for Heavy Vehicles

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Cybersecurity Research Considerations for Heavy Vehicles DOT HS 812 636 December 2018 Cybersecurity Research Considerations for Heavy Vehicles Disclaimer This publication is distributed by the U.S. Department of Transportation, National Highway Traffic Safety Administration, in the interest of information exchange. The opinions, findings, and conclusions expressed in this publication are those of the authors and not necessarily those of the Department of Transportation or the National Highway Traffic Safety Administration. The United States Government assumes no liability for its contents or use thereof. If trade or manufacturers’ names are mentioned, it is only because they are considered essential to the object of the publication and should not be construed as an endorsement. The United States Gov- ernment does not endorse products or manufacturers. Suggested APA Format Citation: Stachowski, S., Bielawski, R., & Weimerskirch, A. (2018, December). Cybersecurity research considerations for heavy vehicles (Report No. DOT HS 812 636). Washington, DC: National Highway Traffic Safety Administration. 1. Report No. 2. Government Accession No. 3. Recipient's Catalog No. DOT HS 812 636 4. Title and Subtitle 5. Report Date Cybersecurity Research Considerations for Heavy Vehicles December 2018 6. Performing Organization Code 7. Authors 8. Performing Organization Report No. Stephen Stachowski, P.E. (UMTRI), Russ Bielawski (UMTRI), André Weimerskirch 9. Performing Organization Name and Address 10. Work Unit No. (TRAIS) University of Michigan Transportation Research Institute 2901 Baxter Rd Ann Arbor, MI 48109 11. Contract or Grant No. DTNH22-15-R-00101, a Vehicle Electronics Systems Safety IDIQ 12. Sponsoring Agency Name and Address 13. Type of Report and Period Covered National Highway Traffic Safety Administration Final Report 1200 New Jersey Avenue SE. 14. Sponsoring Agency Code Washington, DC 20590 15. Supplementary Notes Laura Gillespie was the Contracting Office Representative for this report. 16. Abstract The intent of this research is to investigate cybersecurity aspects of medium-duty/heavy-duty (MD/HD) trucks (classes 1 to 8) and compare those aspects to passenger vehicles. Information collected had a significant bias to- wards HD vehicles (class 7/8), as opposed to MD vehicles. This was due to the discovery process yielding very limited data on MD vehicles (class 3 to 6). This directly correlates to the types of responses provided by industry experts and their cybersecurity concerns (mainly by heavy truck OEMs and suppliers). Much focus was centered around their higher electronic content products that typically occur on class 7/8 vehicle platforms. Often, stake- holder feedback indicated that MD trucks have similar vulnerabilities to either light-duty or heavy-duty trucks but not necessarily anything particularly unique to that segment. This generality likely originates from the simi- larities between MD truck architectures/designs and HD truck architectures. The objective is to develop a frame- work to understand common features and differences between passenger vehicle and heavy-duty vehicle cyber- security in terms of lifecycle, threats and risks, electrical/electronic architectures, control applications, security countermeasures, and industry aspects. Considering recent public awareness of passenger vehicle cybersecurity vulnerabilities, NHTSA undertook this research to understand potential impacts in the heavy-truck vehicle do- main. This task started with the investigation of heavy-vehicle cybersecurity practices by contrasting the passen- ger vehicle cybersecurity knowledge-base to that of heavy vehicles. The project next considered risks in a more generic manner, and identified possible mitigation mechanisms. The comparison framework developed in this document was leveraged to help indemnify the possible mitigation mechanisms. The investigation and data gath- ering concentrated efforts on issues that affect vehicle safety, but not necessarily asset protection. 17. Key Words 18. Distribution Statement Driver Document is available to the public from the National Technical Information Service www.ntis.gov. 19. Security Classif. (of this report) 20. Security Classif. (of this page) 21. No. of Pages 22. Price Unclassified Unclassified 112 i Table of Contents Glossary ..........................................................................................................................................v 1. Executive Summary .................................................................................................................1 1.1 Key Findings .....................................................................................................................1 1.2 Conclusions .......................................................................................................................4 1.3 Prologue ............................................................................................................................4 2. Introduction: Develop a Comparison Framework (Task 2) ................................................5 2.1 Information Collection Methodology ...............................................................................5 2.2 Relevant Standards: SAE J1939: Serial Control & Communications Heavy-Duty Vehicle Network ..........................................................................................6 2.3 Comparison Framework Overview ...................................................................................9 2.4 Comparison Framework Categories ...............................................................................11 2.4.1 Truck Classification ............................................................................................11 2.4.2 Communication Bus Communications Protocols ...............................................14 2.4.3 Electronics Architecture......................................................................................15 2.4.4 Communication Interfaces ..................................................................................18 2.4.5 Control Systems Impacting Vehicle Dynamics ..................................................19 2.4.6 Privacy ................................................................................................................20 2.4.7 Fleet Management ...............................................................................................20 2.4.8 Private and Commercial Sector ..........................................................................20 2.4.9 Customer Demands .............................................................................................21 2.4.10 Hardware Interoperability ...................................................................................21 2.4.11 Organizational Structure .....................................................................................21 2.4.12 Development Process ..........................................................................................22 2.4.13 Federal Compliance ............................................................................................22 2.4.14 Future Applications .............................................................................................22 2.5 Conclusion: Develop a Comparison Framework (Task 2) .............................................23 3. Introduction: Compile a Body of Findings (Task 3) ...........................................................25 3.1 Information Collection Methodology .............................................................................25 3.1.1 Interviews ............................................................................................................25 3.1.2 Internal expertise .................................................................................................25 3.1.3 Literature review .................................................................................................25 3.2 Technical Standards review ............................................................................................26 3.3 Literature Review: Passenger Vehicle Domain ............................................................26 3.3.1 Comprehensive Experimental Analyses of Automotive Attack Surfaces ..........26 3.3.2 Adventures in Automotive Networks and Control Units ....................................27 3.3.3 Remote Exploitation of an Unaltered Passenger Vehicle ...................................27 3.3.4 Remote Control Automobiles .............................................................................27 3.3.5 Fast and Vulnerable: A Story of Telematics Failures .........................................28 3.3.6 OwnStar Attack on OnStar .................................................................................28 3.4 Compile a Body of Findings - Framework Overview ....................................................28 ii 3.5 Potential Threat Vectors – Wired ...................................................................................32 3.5.1 Diagnostic Connector..........................................................................................32 3.5.2 USB Ports, CD Drives, SD Cards, and Auxiliary Audio Inputs .........................34 3.5.3 12-Volt Accessory Outlet ...................................................................................36 3.5.4 Body Builder Interface ........................................................................................36 3.5.5 Trailer Power Line Communication (PLC-J2497) .............................................36
Load more

Recommended publications
  • Request for Proposal
    Request For Washington Proposal Metropolitan Area Transit Authority Procurement of Heavy-Duty Transit Low Floor 40 Foot Compressed Natural Gas Buses 40 Foot Hybrid/Electric Buses 60 Foot Hybrid/Electric Articulated Buses TECHNICAL SPECIFICATION PART V RFP NO. FQ12269/JWW WASHINGTON METROPOLITAN AREA TRANSIT AUTHORITY SUPPLY AND SERVICE CONTRACT RFP FQ12269/JWW TABLE OF CONTENTS WMATA/ADA REQUIREMENTS FOR HEAVY DUTY TRANSIT BUSES ...................................... 1 WMATA E&D REQUIREMENTS FOR TRANSIT BUSES IN ACCORDANCE WITH AMERICAN WITH DISABILITIES ACT (ADA) PROVISIONS ......................................................... 2 I. LEGAL REQUIREMENTS ..................................................................................................................... 2 II. DEFINITIONS.......................................................................................................................................... 2 III. REQUIREMENTS.................................................................................................................................... 2 5.1 GENERAL .................................................................................................................................. 8 5.1.1 SCOPE ..................................................................................................................................................... 8 5.1.2 DEFINITIONS ........................................................................................................................................ 9 5.1.3
    [Show full text]
  • The Problems in Fibre Optic Communication in the Communication Systems of Vehicles
    TEKA Kom. Mot. i Energ. Roln. – OL PAN, 2011, 11, 363–372 THE PROBLEMS IN FIBRE OPTIC COMMUNICATION IN THE COMMUNICATION SYSTEMS OF VEHICLES Sumorek Andrzej, Buczaj Marcin Department of Computer and Electrical Engineering, Lublin University of Technology, Poland Summary. The diversifi cation of technical solutions occurred as a result of almost thirty years of evolution of the communication systems between the mechatronic systems in motor vehicles. The vehicles are equipped with the conventional cable connections between the switches and actuators as well as with advanced data exchange networks. These networks show more and more similarities to computer networks. They are the new solutions; even their classifi cation has been created a few years ago (class D). Therefore the personnel engaged in the scope of functional programming and vehicles servicing encounter the problems associated with networks operation. The purpose of the article is to present the principles of functioning of the basic networks with the medium in the form of an optical fi bre. Particular emphasis has been placed on the detection of failures consisting in the damage of communication node and optical fi bre. Key words: Media Oriented Systems Transport, Domestic Digital Bus. INTRODUCTION The systematics associated with networks classifi cation presented in the year 1994 contained 3 types of networks. Such systematics was also presented in 2007 in literature in 2007 [12]. This approach has been established as a result of the standardization introduced by SAE J1850 [5, 10]. Three classes of communication systems have been specifi ed in SAE J1850. The applications group associated with bus throughput is used as the criterion of subdivision.
    [Show full text]
  • SAE J1587 (2002 Standard).Pdf
    SURFACE REV. VEHICLE J1587 FEB2002 RECOMMENDED Issued 1988-01 400 Commonwealth Drive, Warrendale, PA 15096-0001 PRACTICE Revised 2002-02 Superseding J1587 JUL1998 Electronic Data Interchange Between Microcomputer Systems in Heavy-Duty Vehicle Applications 1. Scope—This SAE Recommended Practice defines a document for the format of messages and data that is of general value to modules on the data communications link. Included are field descriptions, size, scale, internal data representation, and position within a message. This document also describes guidelines for the frequency of and circumstances in which messages are transmitted. In order to promote compatibility among all aspects of electronic data used in heavy-duty applications, it is the intention of the SAE Truck and Bus Low Speed Communications Network Subcommittee (formerly Data Format Subcommittee) (in conjunction with other industry groups) to develop recommended message formats for: a. Vehicle and Component Information—This includes all information that pertains to the operation of the vehicle and its components (such as performance, maintenance, and diagnostic data). b. Routing and Scheduling Information—Information related to the planned or actual route of the vehicle. It includes current vehicle location (for example, geographical coordinates) and estimated time of arrival. c. Driver Information—Information related to driver activity. Includes driver identification, logs, (for example, DOT), driver expenses, performance, status, and payroll data. d. Freight Information—Provides data associated with cargo being shipped, picked up, or delivered. Includes freight status, overage, shortage and damage reporting, billing and invoice information as well as customer and consignee data. This document represents the recommended formats for basic vehicle and component identification and performance data.
    [Show full text]
  • Body Builder Connectors, Schematic
    BODY BUILDER INSTRUCTIONS Mack Trucks Electrical Wiring and Connections CHU, CXU, GU, TD, MRU, LR Section 3 Introduction This information provides design and function, specification and procedure details for Electrical Wiring and Connections for MACK vehicles. Note: For information on mDrive PTO installation and wiring see Section 9 PTO Installation, mDrive. Note: For information on PTO parameter programming see Section 9 PTO Parameter Programming. Unless stated otherwise, following a recommendation listed in this manual does not automatically guarantee compliance with applicable government regulations. Compliance with applicable government regulations is your responsibility as the party making the additions/modifications. Please be advised that the MACK Trucks, Inc. vehicle warranty does not apply to any MACK vehicle that has been modified in any way, which in MACK's judgment might affect the vehicles stability or reliability. Contents • “Abbreviations”, page 3 • “General Wiring Definitions”, page 4 • “Routing and Clipping Guidelines”, page 5 • “Body Builder Connectors, Schematic Examples”, page 17 • “Remote Start n Stop”, page 23 • “Remote Engine Stop”, page 24 • “Adding Auxiliary Accelerator Pedal”, page 25 • “BodyLink III”, page 26 • “Auxiliary Switch Locations (Cab)”, page 30 • “Power Connections”, page 31 • “Control Link II”, page 37 • “LR Workbrake”, page 50 Mack Body Builder Instructions CHU, CXU, GU, TD, MRU, LR USA139448393 Date 9.2017 Page 1 (94) All Rights Reserved • “Wiring J1939”, page 52 • “9-pin Diagnostic Connector”,
    [Show full text]
  • Study of an Error in Engine ECU Data Collected for In-Use Emissions Testing and Development and Evaluation of a Corrective Procedure
    Graduate Theses, Dissertations, and Problem Reports 2007 Study of an error in engine ECU data collected for in-use emissions testing and development and evaluation of a corrective procedure Petr Sindler West Virginia University Follow this and additional works at: https://researchrepository.wvu.edu/etd Recommended Citation Sindler, Petr, "Study of an error in engine ECU data collected for in-use emissions testing and development and evaluation of a corrective procedure" (2007). Graduate Theses, Dissertations, and Problem Reports. 1840. https://researchrepository.wvu.edu/etd/1840 This Thesis is protected by copyright and/or related rights. It has been brought to you by the The Research Repository @ WVU with permission from the rights-holder(s). You are free to use this Thesis in any way that is permitted by the copyright and related rights legislation that applies to your use. For other uses you must obtain permission from the rights-holder(s) directly, unless additional rights are indicated by a Creative Commons license in the record and/ or on the work itself. This Thesis has been accepted for inclusion in WVU Graduate Theses, Dissertations, and Problem Reports collection by an authorized administrator of The Research Repository @ WVU. For more information, please contact [email protected]. Study of an Error in Engine ECU Data Collected for In-Use Emissions Testing and Development and Evaluation of a Corrective Procedure Petr Sindler Thesis submitted to the College of Engineering and Mineral Resources at West Virginia University in partial fulfillment of the requirements for the degree of Master of Science in Mechanical Engineering Mridul Gautam, Ph.D., Chair Gregory J.
    [Show full text]
  • SAE International® PROGRESS in TECHNOLOGY SERIES Downloaded from SAE International by Eric Anderson, Thursday, September 10, 2015
    Downloaded from SAE International by Eric Anderson, Thursday, September 10, 2015 Connectivity and the Mobility Industry Edited by Dr. Andrew Brown, Jr. SAE International® PROGRESS IN TECHNOLOGY SERIES Downloaded from SAE International by Eric Anderson, Thursday, September 10, 2015 Connectivity and the Mobility Industry Downloaded from SAE International by Eric Anderson, Thursday, September 10, 2015 Other SAE books of interest: Green Technologies and the Mobility Industry By Dr. Andrew Brown, Jr. (Product Code: PT-146) Active Safety and the Mobility Industry By Dr. Andrew Brown, Jr. (Product Code: PT-147) Automotive 2030 – North America By Bruce Morey (Product Code: T-127) Multiplexed Networks for Embedded Systems By Dominique Paret (Product Code: R-385) For more information or to order a book, contact SAE International at 400 Commonwealth Drive, Warrendale, PA 15096-0001, USA phone 877-606-7323 (U.S. and Canada) or 724-776-4970 (outside U.S. and Canada); fax 724-776-0790; e-mail [email protected]; website http://store.sae.org. Downloaded from SAE International by Eric Anderson, Thursday, September 10, 2015 Connectivity and the Mobility Industry By Dr. Andrew Brown, Jr. Warrendale, Pennsylvania, USA Copyright © 2011 SAE International. eISBN: 978-0-7680-7461-1 Downloaded from SAE International by Eric Anderson, Thursday, September 10, 2015 400 Commonwealth Drive Warrendale, PA 15096-0001 USA E-mail: [email protected] Phone: 877-606-7323 (inside USA and Canada) 724-776-4970 (outside USA) Fax: 724-776-0790 Copyright © 2011 SAE International. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, distributed, or transmitted, in any form or by any means without the prior written permission of SAE.
    [Show full text]
  • Trends in Automotive Communication Systems
    Trends in Automotive Communication Systems NICOLAS NAVET, YEQIONG SONG, FRANÇOISE SIMONOT-LION, AND CÉDRIC WILWERT Invited Paper The use of networks for communications between the electronic windows, and, recently, entertainment and communication control units (ECU) of a vehicle in production cars dates from the equipment (e.g., radio, DVD, hands-free phones, navigation beginning of the 1990s. The specific requirements of the different systems). car domains have led to the development of a large number of auto- motive networks such as Local Interconnect Network, J1850, CAN, In the early days of automotive electronics, each new TTP/C, FlexRay, media-oriented system transport, IDB1394, etc. function was implemented as a stand-alone electronic This paper first introduces the context of in-vehicle embedded sys- control unit (ECU), which is a subsytem composed of a tems and, in particular, the requirements imposed on the commu- microcontroller and a set of sensors and actuators. This nication systems. Then, a comprehensive review of the most widely approach quickly proved to be insufficient with the need for used automotive networks, as well as the emerging ones, is given. Next, the current efforts of the automotive industry on middleware functions to be distributed over several ECUs and the need technologies, which may be of great help in mastering the hetero- for information exchanges among functions. For example, geneity, are reviewed. Finally, we highlight future trends in the de- the vehicle speed estimated by the engine controller or by velopment of automotive communication systems. wheel rotation sensors has to be known in order to adapt Keywords—Car domains, in-vehicle embedded systems, field- the steering effort, to control the suspension, or simply to buses, middlewares (MWs), networks, real-time systems.
    [Show full text]
  • SAE J1850 PWM Y VPW
    AGRADECIMIENTOS En primer lugar, quiero dar las gracias a todos aquellos que han hecho posible que hoy en día esté estudiando esta carrera, mi familia. Sin ellos no hubiera llegado tan lejos en la vida y no sería la persona que hoy soy. Pero especialmente quiero agradecer a mi hermana el que me haya dado todo su apoyo en todo momento. En segundo lugar, también agradecer a mis amigos y amigas, compañeros y compañeras del Grado en Ingeniería de Tecnologías de Telecomunicación (GITT), que me han acompañado en todo momento. Además, agradecer a todos los profesores que me han impartido clase a lo largo de estos años por todos los conocimientos que me han enseñado. Y especialmente, quiero dar las gracias a mis directores César Sánchez Meléndez y Raúl Alcaraz Martínez por su gran ayuda, dedicación y por darme la oportunidad de tenerles en este gran proyecto. INDICE RESUMEN .............................................................................................................................................. 1 ABSTRACT .............................................................................................................................................. 3 PARTE I: MEMORIA ................................................................................................................................ 5 INTRODUCCIÓN ..................................................................................................................................... 6 MOTIVACIONES ...........................................................................................................................................
    [Show full text]
  • Automotive Ethernet: the Definitive Guide
    Automotive Ethernet: The Definitive Guide Charles M. Kozierok Colt Correa Robert B. Boatright Jeffrey Quesnelle Illustrated by Charles M. Kozierok, Betsy Timmer, Matt Holden, Colt Correa & Kyle Irving Cover by Betsy Timmer Designed by Matt Holden Automotive Ethernet: The Definitive Guide. Copyright © 2014 Intrepid Control Systems. All rights reserved. No part of this work may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage or retrieval system, without the prior written permission of the copyright owner and publisher. Printed in the USA. ISBN-10: 0-9905388-0-X ISBN-13: 978-0-9905388-0-6 For information on distribution or bulk sales, contact Intrepid Control Systems at (586) 731-7950. You can purchase the paperback or electronic version of this book at www.intrepidcs.com or on Amazon. We’d love to hear your feedback about this book—email us at [email protected]. Product and company names mentioned in this book may be the trademarks of their respective owners. Rather than use a trademark symbol with every occurence of a trademarked name, we are using the names only in an editorial fashion and to the benefit of the trademark owner, with no intention of infringement of the trademark. The information in this book is distributed on an “As Is” basis, without warranty. While every precaution has been taken in the preparation of this book, neither the authors nor Intrepid Control Systems shall have any liability to any person or entity with respect to any loss or damage caused or alleged to be caused directly or indirectly by the information contained in this book.
    [Show full text]
  • Private Radio Systems Price Catalog
    All pricing is 30% off list L3Harris-Tait Products & Services Catalog August 2020 Company Proprietary and Confidential All prices and products are subject to change without notice. NOTICE! The material contained herein is subject to U.S. export approval. No export or re-export is permitted without written approval from the U.S. Government. Rated: EAR99; in accordance with U.S. Dept. of Commerce regulations 15CFR774, Export Administration Regulations. Issued: 07/30/20 Page ii https://premier.pspc.harris.com/infocenter Company Proprietary and Confidential All prices and products are subject to change without notice. Table of Contents Latest Revision 1. Customer Service and Ordering Information ......................................................................... 1.1-1 07/30/20 2. Services Support Packages ................................................................................................................. 2.1-1 07/30/20 Technical Training ............................................................................................................... 2.2-1 07/30/20 3. P25 Portables TP9600 Portables ................................................................................................................. 3.1-1 08/31/20 TP9400 Portables ................................................................................................................. 3.1-9 08/31/20 TP9400 Intrinsically Safe Portables ..................................................................................... 3.1-17 08/31/20 4. P25 Mobiles TM9400
    [Show full text]
  • Surface Vehicle Standard
    SURFACE J1939-01 VEHICLE Issued 2000-09 STANDARD Submitted for recognition as an American National Standard Recommended Practice for Control and Communications Network for On-Highway Equipment Foreword—This series of SAE Recommended Practices have been developed by the Truck and Bus Control and Communications Network Subcommittee of the Truck and Bus Electrical and Electronics Committee. The objectives of the subcommittee are to develop information reports, recommended practices and standards concerned with the requirements design and usage of devices which transmit electrical signals and control information among vehicle components. The usage of these recommended practices is not limited to truck and bus applications, other applications may utilize them as long as they adhere to the recommended practices listed herein. These SAE Recommended Practices are intended as a guide toward standard practice and are subject to change so as to keep pace with experience and technical advances. As described in the parent document, SAE J1939, there are a minimum of five documents required to fully define a complete version of this network. This particular document, SAE J1939-01, identifies one such complete network by specifying the particular set of SAE J1939 documents which define the Truck and Bus Control and Communications Vehicle Network as it applies to on-highway equipment. Table of Contents 1 Scope ......................................................................................................................................2 1.1 Degree
    [Show full text]
  • CAN Gateway in the Implementation of Vehicle Speed Control
    Investigation of a Flexray - CAN Gateway in the Implementation of Vehicle Speed Control A DISSERTATION SUBMITTED TO THE DEPARTMENT OF ENGINEERING TECHNOLOGY OF WATERFORD INSTITUTE OF TECHNOLOGY IN COMPLETE FULFILMENT OF THE REQUIREMENTS FOR THE DEGREE OF MASTERS OF ENGINEERING Author Brian Somers Supervisor Mr. John Manning June 2009 Dedicated to: My Mother: Ann Somers and My Father: Tom Somers Declaration I hereby declare that the material presented in this document is entirely my own work and has not been submitted previously as an exercise or degree at this or any other establishment of higher education. I, the author alone, have undertaken the work except where otherwise stated. Signed: Date: Acknowledgements I hereby acknowledge the contributions to my work and offer my thanks to people who have helped and supported me during the course of this research. My Supervisor: Mr. John Manning: I would like to thank John for his continuous supervision, encouragement and invaluable guidance in all areas throughout the course of this research. My Family and Friends: I would like to thank my family and friends for their support, encouragement and understanding throughout all of my studies. The AAEC (Advanced Automotive Electronic Control) Research Group: I would like to take this opportunity to thank all members of the research group, both past and present, whose assistance, knowledge and support has been first-rate. In particular I would like to thank Henry Acheson and Niall Murphy for their addi- tional support throughout the project. There are also many more people who have contributed in countless others way and deserve my thanks also - Thank you! Abstract As the quantity of in-vehicle electronics has increased, automotive networking has been introduced to replace point to point wiring.
    [Show full text]