scholarly journals CA-CRE: Classification Algorithm-Based Controller Area Network Payload Format Reverse-Engineering Method

Electronics ◽  
2021 ◽  
Vol 10 (19) ◽  
pp. 2442
Author(s):  
Cheongmin Ji ◽  
Taehyoung Ko ◽  
Manpyo Hong

In vehicles, dozens of electronic control units are connected to one or more controller area network (CAN) buses to exchange information and send commands related to the physical system of the vehicles. Furthermore, modern vehicles are connected to the Internet via telematics control units (TCUs). This leads to an attack vector in which attackers can control vehicles remotely once they gain access to in-vehicle networks (IVNs) and can discover the formats of important messages. Although the format information is kept secret by car manufacturers, CAN is vulnerable, since payloads are transmitted in plain text. In contrast, the secrecy of message formats inhibits IVN security research by third-party researchers. It also hinders effective security tests for in-vehicle networks as performed by evaluation authorities. To mitigate this problem, a method of reverse-engineering CAN payload formats is proposed. The method utilizes classification algorithms to predict signal boundaries from CAN payloads. Several features were uniquely chosen and devised to quantify the type-specific characteristics of signals. The method is evaluated on real-world and synthetic CAN traces, and the results show that our method can predict at least 10% more signal boundaries than the existing methods.

Author(s):  
Tain-Lieng Kao ◽  
San-Yuan Wang ◽  
Ming-Hua Wu

Due to the development of modern techniques, in the recent years, electronic vehicles and autopilot systems have beensignificant emerged in automobile and IT industrial. This leads the electronics automotive systems and auto-control systems consistedof a lot of high performance Electronic Control Units(ECUs) connected by controller area network (CAN). For realizing morecomplicated design in ECUs, this work integrates real-time OS and network management function. The results improve the CANbusnodes' designing level to as a gateway to interconnect CANbus nodes. As the number of CANbus nodes increase, the verification processis more and more complicated and takes much time. For speeding up the verification process, this work uses CANoe package toprogram the testing script for automotive verification environment. Then the engineer can connect the testing device by CAN to theenvironment for automatic verification. The engineer can define the network messages of the CANbus nodes and tune the design asthe validating progress. The testing results present as XML format and can be transferred to HTML pages for readability. Hence, thiswork realizes an automatic verification environment for CANbus in-vehicle networks.


Author(s):  
J-X Wang ◽  
J Feng ◽  
X-J Mao ◽  
L Yang ◽  
B Zhou

An interactive user-friendly calibration and monitoring system is critical for the development of electronic control units (ECU). In this study, a controller area network (CAN) driver, CAN calibration protocol (CCP) driver, monitoring program, and calibration program in the ECU were designed with the assembly language. The inquiry mode was used in monitoring the program and the interrupt mode was used in the calibration program, which ensured the real-time, simultaneous communication and interruption for the main control program. Mirror memory and the random access memory (RAM) calibration technique were used to reduce the write and read accesses to ECU, and, with the mapping of calibration RAM, calibration parameters could be changed online and used instantly. An efficient database management was used to achieve an accurate dynamic link between PC and ECU. The present system provides reliable, accurate, and quick CAN communication between ECU and PC, with a baud rate up to 500K bit/s. It also provides a friendly, compatible, and flexible calibration interface, and the functions of online calibration and real-time monitoring. This system has been used successfully in high-pressure, common rail, electronically controlled diesel engines and pure electrical vehicles (after a small modification).


2017 ◽  
Vol 2017 ◽  
pp. 1-13 ◽  
Author(s):  
Jeong-Woo Lee ◽  
Ki-Yong Choi ◽  
Jung-Won Lee

A hardware-in-the-loop (HiL) test is performed to verify the software functions mounted on automotive electronic control units (ECUs). However, the characteristics of HiL test limit the usage of common debugging techniques. Meanwhile, the logs of how the program uses memory can be utilized as debugging information collected by the controller area network (CAN). However, when the 32 KB memory is observed with 10 ms period, about 96% of the data on each cycle is lost, since the CAN only can transfer 1.25 KB of data at each cycle. Therefore, to overcome the above limitations, in this study, the memory is divided into multiple regions to transmit generated data via CAN. Next, the simulation is repeated for the each divided regions to obtain the different areas in each simulation. The collected data can be visualized as update information in each cycle and the cumulative number of updates. Through the proposed method, the ECU memory information during the HiL test was successfully collected using the CAN; the transmission is completed without any loss of data. In addition, the data was visualized in images containing the update information of the memory. These images contribute to shortening the debugging time for developers and testers.


2013 ◽  
pp. 323-342
Author(s):  
Rodrigo Lange ◽  
Rômulo Silva de Oliveira

In recent years, the automotive industry has witnessed an exponential growth in the number of vehicular embedded applications, leading to the adoption of distributed implementations for systems in the powertrain and chassis domains. The Controller Area Network (CAN) protocol has been a de facto standard for intra-vehicular communications, while the FlexRay Communication System is being promoted as the future de facto standard for network interconnections of applications related to X-by-wire systems. Due to the characteristics of CAN and FlexRay, the coexistence of both protocols in the same vehicle is expected, leading to the use of gateways to manage the information exchange between electronic control units connected to different network segments. This chapter describes the main characteristics of CAN and FlexRay protocols, surveying the literature addressing schedulability and time analysis in both FlexRay and CAN protocols. The chapter also outlines the state-of-the-art in research about gateways for intra-vehicular communication networks.


2012 ◽  
Vol 209-211 ◽  
pp. 2138-2141
Author(s):  
Wei Dong Liu ◽  
Xiang Yu Li ◽  
Li'e Gao

A gateway based on ARM is presented to achieve mutil-protocol conversion among different electronic control units. To guarantee its real-time ability and stability, the μC/OS-II embedded operation system was adopted. The first-in-first-out data queue is used to balance the communication rate among the different communication protocols which consist of the Controller Area Network, TCP/IP and RS-232. The gateway can be used in remotely manipulation between the console with Ethernet and remote underwater vehicle with other serial communication protocols.


2019 ◽  
Vol 252 ◽  
pp. 02003 ◽  
Author(s):  
Bartosz Kowalik ◽  
Marcin Szpyrka

Modern cars produced for the last two decades are full of electronic devices called Electronic Control Units (ECU). They are responsible for collecting diagnostic data from different components such as the engine, breaks etc. using probes and sensors. The collected data are validated against built-in heuristic and abnormal behaviour is reported to a driver by a gauge on an instrument cluster. ECUs use data provided by other ECUs. Information is transmitted over the dedicated network called Controlled Area Network (CAN). Every car equipped with ECUs and CAN exposes information over universal diagnostic interface called On-Board Diagnostic. Using the interface, it is possible to gather car's live data. With the data mining approach, it is possible to exploit the collected more effectively to obtain much more information about the functioning of car components than it is provided by standard vehicle equipment. The paper describes how to build a laboratory set to facilitate automated data collection. It consists of three major components: data acquisition, automated logs collection and persistent storage with presentation tools. The first component is based on Torque application for which reverse engineering was performed.


Sign in / Sign up

Export Citation Format

Share Document