Threat Analysis and Detection in In-Vehicle Infotainment System Leveraging MITRE...
summary
Built a realistic testbed running Automotive Grade Linux on Raspberry Pi 4, the work defines 11 attack scenarios across five classes (recon, exfiltration, manipulation, redirection, DoS) and maps them to MITRE ATT&CK v16.1. Examples include a port scan that discovers 37 open ports, navigation API exfil of real‑time GPS, Bluetooth PBAP/MAP phone and message theft, HVAC commands that generate CAN messages, map‑tile hijacking via ARP/DNS, and HTTP POST floods that crash the media player. Suricata rules detect four scenarios with 100% precision; CPU stays ≤22.2% and memory <328 MB.
AI-written summary · about
chapters (14)
- 0:00IVI system threats
- 1:15Research contributions and testbed
- 2:18Threat model and attack scenarios
- 3:01Reconnaissance and port scanning
- 4:04Exfiltration on navigation and phone data
- 5:53Manipulation of HVAC and navigation
- 7:40Spoofing via Bluetooth APIs
- 8:45Redirection of navigation map data
- 9:52DoS on media player
- 11:17Multi-phase attack sequences and impact
- 12:02Detection system design
- 13:27Detection system performance
- 13:50Conclusion and future work
- 14:55Q&A
related talks
58mA Survey of Remote Automotive Attack Surfaces
12mDetect Denial of Service on an Open Embedded Automotive Platform
41mPanel: Tackling Automotive Hardware Vulnerabilities
51mSteering Clear of Danger: Decrypting the Realities of Remote Car Hacking
26mThreat Modeling for IoT
19mSecuring the future of mobility: Automotive threat modeling
01mFrom Bugs to Breaches
36mCar Hacking