커넥티드 카 환경에서 안드로이드 앱 리패키징을 이용한 자동차 강제 제어 공격
A Practical Attack on In-Vehicle Network Using Repacked Android Applications
2
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
자동차에 여러 종류의 통신기기가 장착되고 운전자는 통신기기를 이용해 다양한 정보를 자동차에서 수집할 수 있게되었다. 최근 운전자는 스마트폰을 이용하여 자동차의 상태정보를 실시간으로 획득하고 원격으로 자동차를 제어할 수있다. 그러나 안드로이드 기반 앱은 변조와 재배포가 쉽다. 운전자는 임의의 공격자가 변조하여 배포한 악성 앱을 사용하게 되면 자동차에서 발생하는 다양한 정보의 유출위협과 운전자의 의도와 다른 제어로 사고를 유발하는 위협에 노출될 수 있다. 더욱이 자동차 내부 네트워크에는 보안기법이 적용되어 있지 않아 보안 위협으로부터 쉽게 노출되어 사고발생 시 인명과 재산상의 큰 피해를 야기할 수 있다. 본 논문에서는 안드로이드 공식 앱 마켓인 구글 플레이에 배포된다양한 자동차 진단용 앱의 취약점을 분석한다. 분석된 취약점을 통해 배포된 자동차 진단용 앱에서 발생 가능한 공격모델을 알아본다. 그리고 실제 자동차에서 실험으로 공격모델에 대한 위험성을 검증한다. 마지막으로 자동차 진단용 앱리패키징을 사용한 공격자의 악성행위로부터 안전한 보호기법을 제안한다.
Abstract
As vehicle started to contain many different communication devices, collecting external information became possible in IoT environment. In such environment, remotely controling vehicle is possible when vehicle information is obtained by looking in to vehicle network through smart device. However, android based smart device applications are vulnerable to malicious modulation and redistribution. Modulated android application can lead to vehicle information disclosure that could bring about vehicle control accident which becomes threat to drivers. furthermore, since vehicles today does not contain security methods to protect it, they are very vulnerable to security threats which can cause serious damage to users and properties. In this paper, many different vehicle management android applications that are sold in Google Play has been analyzed. With this information, possible threats that could happen in vehicle management applications are being analysed to prove the risks. the experiment is done on actual vehicle to prove the risks. Also, access control method to protect the vehicle against malicious actions that could happen through external network in IoT environment is suggested in the paper.
참고문헌 (32)
- "Robert n. charette. this car runs on code"[URL]
- A. Saad, "Automotive software engineering and concepts", GI. Jahrestagung, 34, pp.318~319 (2003)
- E. Nickel, "IBM automotive software foundry", Proc. Conf. Comput. Sci. Autom. Ind., Frankfurt (2003)
- M.Wolf, "State of the art: Embedding security in vehicles", EURASIP J. Embedded Syst., 5, pp.1~ (2007)
- T. Nolte, "Automotive communications-past, current and future", Proceedings of ETFA(Emerging Technologies and Factory Automation) (2005)
- K.H. Johansson, "Handbook of Networked and Embedded Control Systems" (2005), Springer
- P. Kleberger, "Security aspects of the in-vehicle network in the connected car", Intelligent Vehicles Symposium (IV), 2011, pp.528~533 (2011), IEEE
- K. Koscher, "Experimental security analysis of a modern automobile", Security and Privacy (SP), 2010 IEEE Symposium on, pp.447~462 (2010)
- S. Checkoway, "Comprehensive experimental analyses of automotive attack surfaces", Proceedings of the 20th USENIX Conference on Security, pp.6~6 (2011), USENIX Association
- W. Enck, "A study of android application security", Proceedings of the 20th USENIX Conference on Security, pp.21~21 (2011), USENIX Association
- A. Tahat, "Android-based universal vehicle diagnostic and tracking system", Consumer Electronics (ISCE), 2012 IEEE 16th International Symposium on, pp.137~143 (2012)
- "e/e diagnostic test modes"[URL]
- C. Lin, "Development of on-line diagnostics and real time early warning system for vehicles", Sensors for Industry Conference, 2005, pp.45~51 (2005)
- C. Furmanczyk, "Integrating odb-ii, android, and google app engine to decrease emissions and improve driving habits", ~
- "Elm electronics"[URL]
- "Elm327 data sheet"[URL]
- T. Bla?sing, "An android application sandbox system for suspicious software detection", Malicious and Unwanted Software (MALWARE), 2010 5th International Conference on, pp.55~62 (2010)
- "Google android application developer self -sign"[URL]
- J.-H. Jung, "Repackaging attack on android banking applications and its countermeasures", Wireless Personal Communications, 73(4), pp.1421~1437 (2013)
- Patrick, S., "Code Protection in Android. Technical report", University of Bonn, ~ (2012)
- "ProGuard"[URL]
- "DexGuard"[URL]
- "DexProtector"[URL]
- T. Hoppe, "Sning", replay attacks on can buses: A simulated attack on the electric window lift classied using an adapted cert taxonomy
- T. Hoppe, "Security threats to automotive can networks | practical examples and selected short-term countermeasures", Proceedings of the 27th International Conference on Computer Safety, Reliability, and Security, pp.235~248 (2008), Springer-Verlag
- 조태남, "A Strengthened Android Signature Management Method", KSII Transactions on Internet and Information Systems, 9(3), pp.1210~1230 (2015), 한국인터넷정보학회[DOI]
- J. Xu, "Security analysis and protection based on smali injection for android applications. In Algorithms and Architectures for Parallel Processing", Lecture Notes in Computer Science, 8630, pp.577~586 (2014), Springer International Publishing
- "Implementation result"[URL]
- S. Woo, "A practical wireless attack on the connected car and security protocol for in-vehicle CAN", Intelligent Transportation Systems, IEEE Transactions on, 16(2), pp.993~1006 (2015)
- 이세영, "APK에 적용된 난독화 기법 역난독화 방안 연구및 자동화 분석 도구 구현", 정보보호학회논문지, 25(5), pp.1201~1215 (2015), 한국정보보호학회[DOI]