Automotive Security Analyzer for Exploitability Risks (eBook)

An Automated and Attack Graph-Based Evaluation of On-Board Networks

Martin Salfer (Autor)

eBook Download: PDF

2024 | 2024
XXV, 243 Seiten
Springer Fachmedien Wiesbaden (Verlag)
978-3-658-43506-6 (ISBN)

Infos

Our lives depend on automotive cybersecurity, protecting us inside and near vehicles. If vehicles go rogue, they can operate against the driver's will and potentially drive off a cliff or into a crowd. The 'Automotive Security Analyzer for Exploitability Risks' (AutoSAlfER) evaluates the exploitability risks of automotive on-board networks by attack graphs. AutoSAlfER's Multi-Path Attack Graph algorithm is 40 to 200 times smaller in RAM and 200 to 5 000 times faster than a comparable implementation using Bayesian networks, and the Single-Path Attack Graph algorithm constructs the most reasonable attack path per asset with a computational, asymptotic complexity of only O(n * log(n)), instead of O(n²). AutoSAlfER runs on a self-written graph database, heuristics, pruning, and homogenized Gaussian distributions and boosts people's productivity for a more sustainable and secure automotive on-board network. Ultimately, we enjoy more safety and security in and around autonomous, connected, electrified, and shared vehicles.

Dr. Martin Salfer is an IT security researcher at TUM and a tech lead at an automaker. He earned his Ph.D. in IT Security from TUM, completed his M.Sc. with honours in Software Engineering at UniA/LMU/TUM, and obtained his B.Sc. in Computer Science from HM, with a study abroad at KPU in Vancouver, Canada, and ESIEA in Paris, France, and a research visit at NII in Tokyo, Japan. He is the lead author of 28 publications, including five IT security patents.

Produkt-Details

• Erscheint lt. Verlag: 15.3.2024
• Zusatzinfo: XXV, 243 p. 58 illus., 48 illus. in color. Textbook for German language market.
• Sprache: englisch
• Themenwelt: Technik ► Elektrotechnik / Energietechnik
• Themenwelt: Technik ► Fahrzeugbau / Schiffbau
• Schlagworte: Attack Graph Construction • Embedded Systems • Network hardening • Operational technology • security metrics • vulnerability assessment
• ISBN-10: 3-658-43506-2 / 3658435062
• ISBN-13: 978-3-658-43506-6 / 9783658435066