How Security Mechanisms Can Protect Cars Against Hackers · How Security Mechanisms Can Protect...

How Security Mechanisms Can Protect Cars Against Hackers

Christoph Dietachmayr, CIS Solution Manager

EB USA Techday, Dec. 3rd 2015


Driver´s Fears Are Being Fueled by Recent News

© Elektrobit (EB) 2015 2

Connected Cars,

new opportunies

for hackers

IAA: New

Autonomous Driving

Concepts


Connected Car Offers New Business Models for Hackers?



Autonomous Theft?



Agenda

• Electronic Control Unit (ECU) Security

• On-board Network Security

• Excursion: Security Issues in a Safety Environment

• Vehicle Security

• The Connected Car

5


Agenda






6


ECU Security


Secure update

Secure boot

Hardware security module

Software as a product


Secure ECU Software Architecture

© Elektrobit (EB) 2015

OS(opt.)

OS(opt.)

Bootloader /

Flasher

Bootloader /

Flasher

e.g. Ethernet, FlexRay, CAN, LIN

OSOS

RTERTE

Applications

AutoCoreAutoCore

HardwareHardware Security

Module (HSM)

CSM

CryHSM

Application Bootloader/Flasher

Authentication

SW signature

verification

SW as a

product

Secure Boot

EB SoftwareEB Software

Elektrobit‘s Security Solutions

Software and Hardware Security Modules

© Elektrobit (EB), 2015 9

CryShe

Application

AUTOSAR Csm

{

data = “42mil/h”;

key = 0x1234;

secure(data, key);

…

}

{


key = 0x1234;

secure(data, key);

…

}

Software implementation

Implementation layer

Cry

Interface layer

Csm

Security Hardwareperipheral

Elektrobit‘s Security Solutions

Software and Hardware Security Modules


Application

AUTOSAR Csm

{


key = 0x1234;

secure(data, key);

…

}

{


key = 0x1234;

secure(data, key);

…

}

Security Hardwareperipheral

Software implementation

Implementation layer

Cry

Interface layer

Csm HSM Core

CryHsm/ CryIf

HSM Com

SHE-Firmware

EB supports the algorithms you need!


Agenda






11


On-Board Network Security


Theft protection

Anomaly detection

Intrusion detection

Secure communication


On-Board Network Security


OS(opt.)

OS(opt.)

Bootloader /

Flasher

Bootloader /

Flasher

ECUECU

Ethernet, FlexRay, CAN, LIN

OSOS

RTERTE

Applications

AutoCoreAutoCore


Module (HSM)

Hardware Security

Module (HSM)

CSM

CryHSM

CSM

CryHSMSecOC

Application Bootloader/Flasher

AuthenticationAuthentication

SW signature

verification

SW signature

verification

Anti theft

SW as a

product

SW as a

productMilage prot.

Secure BootSecure Boot

Intrusion Det.



Agenda






14


• Security: Protection against

external access, e.g. hacks

• Safety: reliable execution

environment for ECUs.“knowing what the system does”


Security protects Safety

There is no safety without security

and vice versa


Agenda






16


Vehicle Security: Various Access Points


Internet connection

Bluetooth connection

Wireless key

Tire pressure monitor

Remote start

Remote HVAC

WiFi Hotspot

Car2Infrastructure

Car2Car

eCall


Current Vehicle Systems Architecture


GatewayCAN CAN FlexRay … …


Future Vehicle Systems Architecture


GatewayEthernet Ethernet Ethernet Ethernet Ethernet

Intrusion

detection

Anomaly

detection


Use Case: Smart Antenna



Smart Antenna


ECUECU

Ethernet, FlexRay, CAN

ASIL

SWCs

OSOS

Cloud

App

RTERTE

e.g. Linux

AS

SWCs

AS

SWCs

AutoCoreAutoCore

Cloud

App

Cloud

App

HypervisorHypervisor

Secure COM

Firewall


Module (HSM)

CSM

CryHSMSecOC

Fir

ew

all

Threat monitoring

Concentrate Wireless access

Secure Separation

Denial of Service prev.



Vehicle Security



Agenda






23


The Connected Car


How security mechanisms can protect cars against hackers

The Connected Car



Over the Air Functionality


Target

ECU

Target

ECU

Ethernet, FlexRay, CAN

HypervisorHypervisor

Secure COMSecure COM

Firewall


Module (HSM)

Hardware Security

Module (HSM)

Fir

ew

allSecure Backend

Channel

SW storageOver the Air:

• SW update agent

• Remote Diagnostics

agent

• …


Remote diagnostics

100% security is an illusion

Secure OTA update

Identity vs. privacy

EB Security Platform

EB Security Portfolio

Secure HW

•HSM firmware

•Future Security HW

•Security architecture

Security applications

•Unlock / Download

•SW as Product

•Secure Com …

Secure separation

•Hypervisor

•Virtualisation

Crypto

•Algorithms

•SHE drivers

•HSM drivers

Key management

•Sym/Asym

•Key Derivation

•Initial / Update

Secure Communication

•Firewall

•Intrusion-/Anomaly detectionOTA

•Secure Connection

•Update strategies

•Implementation

•Backend

Car2X

•Consulting

•Implementation

•Testing

Security Consulting

•Architecture

•Solutions

•How-To

Testing & Certification

•Functional

•Penetration Testing

•FIPS / Com. Criteria


Summary

Summary

• Security is necessary on all levels

‒ In ECUs and between ECUs

‒ In the vehicle and between vehicles

‒ In the backend

• A big challenge, but you are not alone

‒ Existing and approved mechanisms available

‒ EB secures vehicles for more than 15 years

• Security needs constant care

‒ Monitoring on all levels

‒ Update over the air is key to keep cars secure

• Visit us at: https://www.elektrobit.com/security


Thank you

[email protected]

automotive.elektrobit.com

How Security Mechanisms Can Protect Cars Against Hackers · How Security Mechanisms Can Protect...

Documents

Transcript of How Security Mechanisms Can Protect Cars Against Hackers · How Security Mechanisms Can Protect...