V2X 통신 환경 기반 커넥티드카 악성코드 탐지 및 수집 방안
A Study on the Malicious Code Detection Method for Connected Cars Based on V2X Communication Environment
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
지능형 모빌리티 산업의 혁신이 고도화됨에 따라 자동차 분야에서 커넥티드카에 대한 서비스가활발히 진행 중이다. 커넥티드카는 자동차와 인터넷, 스마트폰 등 IT 기술을 결합하여 사용자에게 편의성을 제공해주는 자동차로 주변 사물들과 V2X 통신을 통해 사고 정황, 교통정보 등의 정보를 주고받는다. 이를 위해 자동차에 IoT 기기를 연결하는데 최근 자동차에 탑재되는 IoT 기기의 수가 증가함에 따라 IT 기술이 결합되고 범용 운영체제인 리눅스 기반에서 동작하는 IoT 기기의 특성과 같이 IT 보안 위협이 커넥티드카에 그대로 상속될 수 있다. 이는 커넥티드카에 치명적인 보안 약점이 될 수 있다. 따라서 본 논문에서는 자동차와 기지국 통신 시에 악성코드를 사전에 탐지하고 대응책을 마련하여 보안을 강화하는 V2X 통신 환경 기반 커넥티드카 악성코드 탐지 및 수집 방안을 제시한다.
Abstract
As innovation in the intelligent mobility industry is advanced, services for connected cars are actively underway in the automobile sector. The connected car is a car that provides convenience to users by combining IT technologies such as cars, the Internet, and smartphones, and exchanges information such as accident situations and traffic information with nearby objects through V2X communication. To this end, the recent increase in the number of IoT devices in cars can lead to the inheritance of IT security threats to connecting IoT devices, such as the characteristics of IoT devices that combine IT technologies and operate on Linux, a general-purpose operating system. This can be a fatal security weakness for connected cars. Therefore, this paper presents a method for detecting and collecting malicious code of connected cars based on the V2X communication environment to enhance security by detecting malicious code in advance and preparing countermeasures when communicating with cars and base stations.
참고문헌 (20)
- Autonomous driving and V2X com-munication technology trends, "T.-H. Lim", IITP, ~ (2017)
- T. Ring, "Connected cars–the next targe tfor hackers", Network Security, 11, pp.11~16 (2015)
- S. Malik, "Analysis and simulation of cyber attacks against connected and autonomous vehicles", Proceeding of IEEE, pp.62~70 (2020)
- H. -J. Kang, "Car hacking and defense competition on in-vehicle network", Workshop on Automotive and Autonomous Vehicle Security(AutoSec), 2021 (2021)
- J. Ingers, "IoT Penetration Testing:Examining the cyber security of connected vehicles", ~ (2022)
- K.-C. Jo, "Overall reviews of autonomous vehicle a1-system architecture and algorithms", Proceeding of IFAC, 46(10), pp.114~119 (2013)
- C. Miller, "Remote exploitation of an unaltered passenger vehicle", Black Hat USA, S 91~ (2015)
- S. Singh, "Intrusion Detection System-Based Security Mechanism for Vehicular Ad-Hoc Networks for Industrial IoT", IEEE Consumer Electronics Magazine, 11(6), pp.83~92 (2021)
- V. Verendel, "An approach to using honeypots in in-vehicle networks", 2008 IEEE 68th Vehicular Technology Conference, pp.1~5 (2008), IEEE
- S. Malik, "Analysis and simulation of cyber attacks against connected and autonomous vehicles", Proceeding of IEEE, pp.62~70 (2020)
- P. Bajpai, "Ransomware targeting automobiles", Proceedings of the Second ACM Workshop on Automotive and Aerial Vehicle Security, pp.23~29 (2020)
- A. A. Elkhail, "Vehicle Security: A Survey of Security Issues and Vulnerabilities, Malware Attacks and Defenses", IEEE Access, 9, pp.162401~162437 (2021)
- K. A. Scarfone, "Sp 800-61 rev. 1. computer security incident handling guide", ~ (2008)
- S. Adepu, "An investigation into the response of a water treatment system to cyber attacks", Proceeding of IEEE, pp.141~148 (2016)
- K. Shafique, "Internet of things (IoT) for next-generation smart systems: A review of current challenges, future trends and prospects for emerging 5G-IoT scenarios", Ieee Access, 8, pp.23022~23040 (2020)
- Z. El-rewini, "Cybersecurity attacks in vehicular sensors", IEEE Sensors Journal, 20(22), pp.13752~13767 (2020)
- Hyun-Bo Shim, "커넥티드 카의 기술", 한국정보통신학회논문지, 20(3), pp.590~598 (2016), 한국정보통신학회[DOI]
- W. H. Hassan, "Current research on Internet of Things (IoT) security: A survey", Computer networks, 148, pp.283~294 (2019)
- H. Uddin, "IoT for 5G", B5G applications in smart homes, smart cities, wearables and connected cars, 2019, 1~5
- Capellupo, Marc, "Security and attack vector analysis of IoT devices", International Conference on Security, Privacy and Anonymity in Computation, Communication and Storage (SpaCCS), pp.593~606 (2017)