Skip to main content
Fachgebiete
Automobil + Motoren Bauwesen + Immobilien Business IT + Informatik Elektrotechnik + Elektronik Energie + Nachhaltigkeit Finance + Banking Management + Führung Marketing + Vertrieb Maschinenbau + Werkstoffe Versicherung + Risiko
DE
EN
Themenseiten
Organisationspsychologie Projektmanagement Marketing Smart Manufacturing
Bücher
Zeitschriften
Weitere Formate
Podcasts Webinare Technik Webinare Wirtschaft Kongresse Veranstaltungskalender Awards
Jetzt Einzelzugang starten
Zugang für Unternehmen
Referenzkunden
MTZ-Fachkongress

Antriebe und Energiesysteme von morgen


Austausch von Automobil- und Energiewirtschaft

Am 14./15. Mai geht es in Chemnitz um die Mobilitätswende durch Elektro- und Wasserstofffahrzeuge.
Erweiterte Suche
Anmelden
nach oben
Erschienen in:
Introduction Kapitel lesen Erstes Kapitel lesen

2024 | OriginalPaper | Buchkapitel

2. Basics and Related Work

verfasst von : Martin Salfer

Erschienen in: Automotive Security Analyzer for Exploitability Risks

Verlag: Springer Fachmedien Wiesbaden

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config
loading …

Abstract

The Basics and Related Work chapter provides background information on this dissertation’s basis. The parts of this chapter follow a funnel shape: from the initial motivator, hacker attacks on vehicles and their data, over state-of-the-art IT security countermeasures and assessments, e.g., attack graphs, till its foundations, e.g., stochastics.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

  • über 102.000 Bücher
  • über 537 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Finance + Banking
  • Management + Führung
  • Marketing + Vertrieb
  • Maschinenbau + Werkstoffe
  • Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

  • über 67.000 Bücher
  • über 390 Zeitschriften

aus folgenden Fachgebieten:

  • Automobil + Motoren
  • Bauwesen + Immobilien
  • Business IT + Informatik
  • Elektrotechnik + Elektronik
  • Energie + Nachhaltigkeit
  • Maschinenbau + Werkstoffe




 

Jetzt Wissensvorsprung sichern!

Jetzt informieren
Vorheriges Kapitel Introduction
Nächstes Kapitel System Model, Attacker Profile, Exploit Model, Attack Graphs and Exploitability Quantification
Fußnoten
1
A potent and open-source SRE framework made by and used by the National Security Agency (NSA) is Ghidra; see https://​github.​com/​NationalSecurity​Agency/​ghidra.
 
6
Freely translated by me for readers who are not fluent in German.
 
7
Stuxnet is an allegedly American-Israeli malware that spreads from IT to OT, infects embedded systems, and destroys them; see “Operation Olympic Games” and “Nitro Zeus” [99, 283, 284].
 
8
Metasploit Framework: https://​metasploit.​com/​.
 
9
“exploit-db” alone listed already more than 40 000 IT exploits at the end of 2018; see https://​www.​exploit-db.​com/​.
 
12
Two full Ethernet frames (1530 Bytes) comprise \(2 * 1530 * 8 = 24\,480\) bits.
 
13
Even though Intel comprises more than 80 % of the top-500 high-performance computing share, Intel is not even within the top 10 of the automotive IC market share; see Figure 2.7.
 
14
GENIVI (Geneva In-Vehicle Infotainment) Alliance: https://​www.​genivi.​org/​.
 
15
Safety prefers more mature technology, even if it is older already. For example, the chips in vehicles or spaceships are extra hardened and analyzed instead of being bleeding edge high-tech. The Soyuz spacecraft and rocket technology is an example of a vehicle still actively being used today; it is engineered with robust and proven technology that works well even today.
 
16
This is a big reason why regular Ethernet is rejected in automotive engineering: it is too heavy and unsustainable. Fast Ethernet requires at least four wires and heavy shielding; CAN requires only two wires without any shielding, resulting in a fraction of the weight and \(CO_2\) emissions.
 
17
Only local emissions are sanctioned so that coal-powered electric vehicles may emit more \(CO_2\) than diesel vehicles without sanction.
 
18
The fines for an automaker registering 2 million cars yearly in the EU from 2019 on with an average excess of ten gram \(CO_2\) are \(95 \text { EUR } / gCO_2 * 10 gCO_2 * 2\,000\,000 = 1\,900\,000\,000 \text { EUR } \approx 2\) billion EUR every year.
 
19
The arguments of Chess [61] might be biased by his affiliation with a vendor of such a product.
 
21
The invention of attack graphs is often falsely attributed to Bruce Schneier in 1999, but Salter et al., Edward Amoroso, Jonathan D. Weiss and Veseley et al. published up to 18 years earlier.
 
22
“Bayes Net Toolbox for Matlab”: https://​github.​com/​bayesnet/​bnt.
 
24
The EDF is operating huge nuclear and hydropower plants. Thinking about the usage suggestions in the publication, the BDMP might have been used for these power plants.
 
Metadaten
Titel
Basics and Related Work
verfasst von
Martin Salfer
Copyright-Jahr
2024
Buch
Automotive Security Analyzer for Exploitability Risks

Print ISBN: 978-3-658-43505-9

Electronic ISBN: 978-3-658-43506-6

Copyright-Jahr: 2024

DOI
https://doi.org/10.1007/978-3-658-43506-6_2

Neuer Inhalt

    Bildnachweise