Modern vehicles rely heavily on embedded systems, i.e., Electrical Control units (ECUs), in addition to using communication to the external network with technologies like 5G, cellular, Bluetooth, WiFi, and Vehicle to Everything (V2X) communication. This makes the car similar to an Internet Of Things (IoT) device on wheels. This increase in the vehicle's connectivity increases the vehicle's attack surface, making it susceptible to cyber attacks just like an IOT device, with the main difference being that the car is a safety-critical system, and the driver's safety must not be compromised. Monitoring this complex environment with the limited resources available in vehicles is a significant challenge. In this paper, we present a proof of concept for a Vehicle Security Operations Center (V-SOC) framework for real-time threat detection. In this project, we are directly tapping into the car's inner communication networks to capture and decode raw Controller Area Network (CAN) data and Automotive Ethernet messages. We utilize real-time data to analyze and identify potential threats and anomalies. For our proof of concept, we have implemented a set of simple rules and performed tests to evaluate their effectiveness.
- Címlap
- Publikációk
- Cloud-based cybersecurity and data management system for near Real-Time Monitoring and Alerting in Vehicle-SOC - a proof of concept