2026-09-20T09:36:40Zhttps://digital.lib.washington.edu/server/oai/request

oai:digital.lib.washington.edu:1773/450932026-02-15T22:39:28Zcom_1773_4888col_1773_4915

Bushnell, Linda Poovendran, Radha Sagong, Sang Uk 2020-02-04T19:23:04Z 2020-02-04T19:23:04Z 2020-02-04 2019 Sagong_washington_0250E_20914.pdf http://hdl.handle.net/1773/45093 Thesis (Ph.D.)--University of Washington, 2019 A contemporary automobile is equipped with many sensors and actuators that are controlled by electronic units. These electronic units are connected via wired bus networks, and data for controlling the automobile is exchanged among the electronic units using in-vehicle network protocols. The in-vehicle network protocols were designed to be isolated from external networks, and they do not encrypt data or authenticate messages as a consequence. To provide a higher quality of service, such as traffic information or over-the-air software updates, electronic units that can be connected to the external networks are installed in the contemporary automobile. These electronic units with outward-facing interfaces act as attack surfaces to in-vehicle networks and other electronic units. In this dissertation, we identify vulnerabilities of in-vehicle network protocols such as the Controller Area Network (CAN) and existing intrusion detection systems. In order to enhance the security of the CAN protocol from these vulnerabilities, we develop software and hardware-based defense mechanisms that can detect attacks by exploiting timing, voltage, and motion information, where the hardware-based defense mechanism can also mitigate these attacks. We implement the attacks and demonstrate that the proposed defense mechanisms can effectively detect and mitigate the attacks using a CAN bus testbed and a real vehicle. application/pdf en_US none Controller Area Network protocol intrusion detection systems security Electrical engineering Computer engineering Electrical engineering Physics-based Security Analysis of Controller Area Network Protocols Thesis Open Access open.access