大陆关于车辆网络安全的介绍
合集下载
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
2010: Experimental Security Analysis of a Modern Automobile (Center for Automotive Embedded Systems Security)
2007: Hackers can take over car navigation system (The Telegraph)
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
5
We Shape the Megatrends in the Automotive Industry: Safety, Environment, Information, Affordable Cars
2003: Gentlemen, Start Hacking Your Engines (NY Times) 2002: How To Hack Your Car (Forbes)
< 2005
2010: Security and Privacy Vulnerabilities of In-Car Wireless Networks: A Tire Pressure Monitoring System Case Study (Rutgers, USC)
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
30
Introduction to Automotive Security Consequences
PWIN Guest Lecture Public
„After this jeep hack, Chrysler recalled 1.4 Mio. vehicles for a security bug fix.”
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
27
Introduction to Automotive Security Increasing Complexity
Increasing number of ECUs
4
Our Vision Your Mobility. Your Freedom. Our Signature.
Our world is made up of:
Highly developed, intelligent technologies for mobility, transport and processing
› 1997: 5 ECUs in Audi A6 › 2007: about 50 ECUs in Audi A4 › today: about 80 to 100 ECUs
Variety of Applications
› Lane Assistance › Collision avoidance › Accident Reporting (eCall) › Autonomous and Cooperative Driving
Employees
Chassis & Safety HQ 4 BUs, Corporate
Divisions/ Business Units
EBS, ESC
Main Products
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
Doing more.
For safe mobility.
Doing more.
For intelligent driving.
PWIN Guest Lecture Public
Doing more.
For clean power.
Doing more.
For global mobility.
January 23rd, 2018
During the Hacking Conferences - “Black Hat Las Vegas & Defcon Las Vegas” Aug 2015 - a video was shown and distributed via social media.
PWIN Guest Lecture Public
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
28
Introduction to Automotive Security Understanding Security
NO
security
Lack of Security has a deep impact on a companie’s value
Even if the hack is done by only friendly scientists
PWIN Guest Lecture Public
January 23rd, 2018
We want to provide:
The best solutions for each of our customers in each of our markets
PWIN Guest Lecture Public
For our stakeholders:
The most valuecreating, highly reliable and respected partner
Dr. Markus Tschersich © Continental AG
2
Cybersecurity in the Automotive Domain Agenda
1 Introduction to Continental 2 Automotive Security 3 New Challenges of Automotive Megatrends 4 Interplay of Safety and Security 5 Developing a Cybersecurity Engineering Standard 6 Entry Possibilities at Continental
Dr. Markus Tschersich © Continental AG
6
Continental Corporation Over 140 Years of Innovation and Progress
1871
1900
1930
PWIN Guest Lecture Public
1960
1990
PWIN Guest Lecture Public
20%
drop in 2 weeks
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
33
Introduction to Automotive Security Stock Value Fiat Chrysler August 2015
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
3
„My“ Continental Location Continental Teves | Frankfurt am Main
4,000
29
Introduction to Automotive Security Consequences from a lack of security
From Black Hat and Defcon
Researchers showed all manner of serious attacks on everything from browsers to automobiles
2017
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
7
Continental Corporation Overview 2016
13%
ContiTech
26%
Tires
Sales of appr. €40.5 billion
21%
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
32
Introduction to Automotive Security Stock Value Fiat Chrysler August 2015
10 SD
20
Cybersecurity in the Automotive Domain Agenda
1 Introduction to Continental 2 Automotive Security 3 New Challenges of Automotive Megatrends 4 Interplay of Safety and Security 5 Developing a Cybersecurity Engineering Standard 6 Entry Possibilities at Continental
Dr. Markus Tschersich | January 23rd, 2018 | Goethe University Frankfurt
https:///
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
34
Introduction to Automotive Security … and more attacks with increasing press perception
2004: DRIVING; Altering Your Engine With New Chip (NY Times)
Bitte decken Sie die schraffierte Fläche mit einem Bild ab. Please cover the shaded area with a picture. (24,4 x 7,6 cm)
Cybersecurity in the Automotive Domain PWIN Guest Lecture
Interior
PWIN Guest Lecture Public
22%
Chassis & Safety
Sales by division
in %
18%
Powertrain
Status: December 2015
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
Security
BYPASSED
security „gate“
OKAY
Unfortunately, implementation attacks are hard to predict.
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
2005: RFID Chips in Car Keys and Gas Pump Pay Tags Carry Security Risks (John Hopkins University)
2005: Linux Bluetooth hackers hijack car audio (The Register) 2005: Hacking the Hybrid Vehicle (Wired)
Change in ECU usage
› Traditionally one task per ECU › New trend of
› distributing functions across ECUs › Integration multiple functions on one ECU
ECU: Electronic Control Unit
2007: Hackers can take over car navigation system (The Telegraph)
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
5
We Shape the Megatrends in the Automotive Industry: Safety, Environment, Information, Affordable Cars
2003: Gentlemen, Start Hacking Your Engines (NY Times) 2002: How To Hack Your Car (Forbes)
< 2005
2010: Security and Privacy Vulnerabilities of In-Car Wireless Networks: A Tire Pressure Monitoring System Case Study (Rutgers, USC)
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
30
Introduction to Automotive Security Consequences
PWIN Guest Lecture Public
„After this jeep hack, Chrysler recalled 1.4 Mio. vehicles for a security bug fix.”
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
27
Introduction to Automotive Security Increasing Complexity
Increasing number of ECUs
4
Our Vision Your Mobility. Your Freedom. Our Signature.
Our world is made up of:
Highly developed, intelligent technologies for mobility, transport and processing
› 1997: 5 ECUs in Audi A6 › 2007: about 50 ECUs in Audi A4 › today: about 80 to 100 ECUs
Variety of Applications
› Lane Assistance › Collision avoidance › Accident Reporting (eCall) › Autonomous and Cooperative Driving
Employees
Chassis & Safety HQ 4 BUs, Corporate
Divisions/ Business Units
EBS, ESC
Main Products
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
Doing more.
For safe mobility.
Doing more.
For intelligent driving.
PWIN Guest Lecture Public
Doing more.
For clean power.
Doing more.
For global mobility.
January 23rd, 2018
During the Hacking Conferences - “Black Hat Las Vegas & Defcon Las Vegas” Aug 2015 - a video was shown and distributed via social media.
PWIN Guest Lecture Public
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
28
Introduction to Automotive Security Understanding Security
NO
security
Lack of Security has a deep impact on a companie’s value
Even if the hack is done by only friendly scientists
PWIN Guest Lecture Public
January 23rd, 2018
We want to provide:
The best solutions for each of our customers in each of our markets
PWIN Guest Lecture Public
For our stakeholders:
The most valuecreating, highly reliable and respected partner
Dr. Markus Tschersich © Continental AG
2
Cybersecurity in the Automotive Domain Agenda
1 Introduction to Continental 2 Automotive Security 3 New Challenges of Automotive Megatrends 4 Interplay of Safety and Security 5 Developing a Cybersecurity Engineering Standard 6 Entry Possibilities at Continental
Dr. Markus Tschersich © Continental AG
6
Continental Corporation Over 140 Years of Innovation and Progress
1871
1900
1930
PWIN Guest Lecture Public
1960
1990
PWIN Guest Lecture Public
20%
drop in 2 weeks
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
33
Introduction to Automotive Security Stock Value Fiat Chrysler August 2015
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
3
„My“ Continental Location Continental Teves | Frankfurt am Main
4,000
29
Introduction to Automotive Security Consequences from a lack of security
From Black Hat and Defcon
Researchers showed all manner of serious attacks on everything from browsers to automobiles
2017
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
7
Continental Corporation Overview 2016
13%
ContiTech
26%
Tires
Sales of appr. €40.5 billion
21%
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
32
Introduction to Automotive Security Stock Value Fiat Chrysler August 2015
10 SD
20
Cybersecurity in the Automotive Domain Agenda
1 Introduction to Continental 2 Automotive Security 3 New Challenges of Automotive Megatrends 4 Interplay of Safety and Security 5 Developing a Cybersecurity Engineering Standard 6 Entry Possibilities at Continental
Dr. Markus Tschersich | January 23rd, 2018 | Goethe University Frankfurt
https:///
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
34
Introduction to Automotive Security … and more attacks with increasing press perception
2004: DRIVING; Altering Your Engine With New Chip (NY Times)
Bitte decken Sie die schraffierte Fläche mit einem Bild ab. Please cover the shaded area with a picture. (24,4 x 7,6 cm)
Cybersecurity in the Automotive Domain PWIN Guest Lecture
Interior
PWIN Guest Lecture Public
22%
Chassis & Safety
Sales by division
in %
18%
Powertrain
Status: December 2015
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
Security
BYPASSED
security „gate“
OKAY
Unfortunately, implementation attacks are hard to predict.
PWIN Guest Lecture Public
January 23rd, 2018
Dr. Markus Tschersich © Continental AG
2005: RFID Chips in Car Keys and Gas Pump Pay Tags Carry Security Risks (John Hopkins University)
2005: Linux Bluetooth hackers hijack car audio (The Register) 2005: Hacking the Hybrid Vehicle (Wired)
Change in ECU usage
› Traditionally one task per ECU › New trend of
› distributing functions across ECUs › Integration multiple functions on one ECU
ECU: Electronic Control Unit