Automotive CAN Network Information Security Research

Cars are an important means of transportation in people's daily lives.However,with the development of technology,the car has changed from the original mechanical device to a complex device that integrates many intelligent sensors,networked devices,and communication interfaces.With the rapid development of technologies such as networked cars,autonomous driving,and intelligent transportation,the problem of automobile information security has become more and more severe,which has caused more and more people's attention.In particular,the car safety incidents that have occurred in recent years have aroused people's concerns.The CAN bus is a bus protocol widely used in modern automobiles.The car CAN network is connected to many electronic devices related to car control.Attackers often control the car by injecting data into the CAN network,thereby threatening the safety of life and property of drivers and passengers.The information security of vehicle CAN network is an important part of automobile information security.It is of great significance and value to carry out information security research on CAN network.This paper studies the information security of automotive CAN network,introduces the working methods of CAN bus protocol and automobile diagnostic protocol,discusses their potential safety hazards,analyzes the entrance of automotive CAN network that may be attacked,and comprehensively summarizes the automotive CAN.The attack surface of the network introduces the method of replay attack,and proposes a method to quickly reverse the ordinary data packet control instruction of the car.It introduces a communication feature based on the UDS protocol client-server and solves the car diagnostic mode..Finally,based on the above research,this paper developed a car safety test platform software to facilitate researchers to conduct safety tests on cars.In this paper,an attack experiment was carried out on the car.The control instructions of the ordinary data packet of the car were successfully cracked by means of replay attackand reverse analysis,and the control of the car door state,the lamp,the wiper and the tachometer were realized.Then,based on the method of cracking the car diagnosis mode,the control command of the car diagnostic data package is obtained,and the control of the control lock is realized,and the purpose of opening the door without a key is achieved.The experimental results show that there is a possibility of cracking at a lower cost regardless of the ordinary packet control command or the diagnostic packet control command of the car CAN network.