ANALYSIS OF THREATS FOR VEHICLE ELECTRONIC CONTROL UNITS IN CAN NETWORK

The security issues of the information exchange protocol CAN for vehicle electronic control units, the general scheme of attacker's actions for attack performing against the car is considered, and car safety standards are considered. The methodology of threat modeling is described. Descriptions of practical attacks are collected and the classification of attacks is given. The assessment of threats of practical attacks based upon five criteria is given, the most important of which are driver's life safety and ability to cope with consequences of the attacker's actions. Calculated estimates allow one to compare attacks on potential damage and identify the most critical one. Weight coefficients for the threats assessment are provided. The threat modeling methodology for vehicles is applied with results of practical attacks.