DEFEND research project

The number of attacks on automotive systems is increasing due to existing vulnerabilities in modern connected vehicles, with the majority of attacks reported in recent years being carried out remotely. In this context, the emergence of new in-vehicle network paradigms introduces new security challenges as well as the opportunity to design security at an architectural level.

DEFEND targets the security of next generation in-vehicle networks by addressing architectural security as well as the design of specific security mechanisms. As a first goal we aim to introduce security by design through a layered security approach toward defining clear security mechanisms, access control rules and roles for each of the layers present in emerging automotive electrical/electronic (E/E) architecture paradigms.

To provide the means for identifying attacks, we will design and implement practical mechanisms for intrusion detection targeting the Controller Area Network as well as other in-vehicle communication protocols such as FlexRay and automotive Ethernet. Our project will also approach the subject of securing over-the-air firmware update systems as they represent a critical component in assuring timely distribution of safety and security related firmware updates. We will also analyze potential security risks involved with emerging in-vehicle communication protocols (e.g., automotive Ethernet, CAN XL) and design mechanisms to secure communication over these channels.