Project
Headlamp is basically a lamp attached in the front of the vehicle to light the road. More familiar term for headlamp will be headlights,
Headlamp of a vehicle is controlled by the Body Control Module. Includes two units one on the right and one on the left. It consists of high and low beam intensity assist. High beam assist functionality automatically manipulates the headlight range which depends on certain conditions. CAN communication medium is used between body control module and headlight.
Body control module integrates many functions which includes various lights, door unlocking and locking. Provides a gateway functionality for communication with a CAN or LIN. A unit like BCM need components with CAN/LIN network support, a diverse selection of packet sizes and memory capacities to align with multiple system scales.
- IDENTIFICATION OF ASSETS
ASSEST 1: Power distribution box
ASSEST 2: CAN bus
- THREAT IDENTIFICATION
1.spoofing on CAN bus
- It affects confidentiality of the message
- Headlight turns off immediately
2.Tampering of CAN message
- It affects integrity of message
- Eavesdropping on CAN bus
- it gives information to the attacker
- ATTACK TREE MODULE
- IMPACT RATING
There are 4 types of damage scenarios
1.safety risk
2.financial risk
3.operational risks
4.privacy risks
4.1. Impact rating of CAN bus spoofing
1.Safety
Moderate -S1: Light and moderate injuries
2.Financial
Moderate -The financial damage leads to severe consequences which affects stakeholder and will be able to overcome with limited resources.
3.operational
Moderate - The operational damage leads to partial-degradation of a vehicle function or performance
4.privacy
Negligible -The privacy damage leads to no effect or can create few inconveniences to the road user. In this case, the information regarding the road user is not sensitive and difficult to link to a PII principal
4.2. Tampering of CAN message
1.Safety
Moderate -S1: Light and moderate injuries
2.Financial
Moderate -The financial damage leads to inconvenient consequences which the affected stakeholder will be able to overcome with limited resources.
3.operational
Moderate -The operational damage leads to partial degradation of a vehicle function or performance
4.privacy
Negligible -The privacy damage leads to no effect or can create few inconveniences to the road user. In this case, the information regarding the road user is not sensitive and difficult to link to a PII principal
4.3 Eavesdropping on CAN bus
1.Safety
Light –S1 Light and moderate injuries
2.Financial
High - Cyberattacks can use their access to sensitive information, such as corporate data, business secrets, or user passwords, for financial gain. This includes selling the data to third parties or competitors or holding organizations or individuals to ransom by blocking access to data as part of a Ransomware attack. Furthermore, any incident of data loss runs the risk of the organization suffering reputation damage, which could lead to losing customers, and as a result, financial loss.
3.operational
Light- The operational damage is less and did not affect the performance of the headlight
4.privacy
Negligible -The privacy damage leads to no effect or can create few inconveniences to the road user. In this case, the information regarding the road user is not sensitive and difficult to link to a PII principal
- ATTACK PATH ANALYSIS
- CAN bus spoofing
Power distribution box------------->BCM----------->Headlight
The attacker can enter the power distribution box and into BCM.
- CAN message tampering
OBD---------------->BCM-------------------->Headlight
The attacker can enter OBD and into BCM.
- CAN bus eavesdropping
OBD------------>BCM-------------->Headlight
The attacker can look into the OBD and BCM and gather the information
- ATTACK FEASIBILITY
1.spoofing on can bus
High -It is easy or almost certain to accomplish the attack path
2.Tampering of can message
High -It is easy or almost certain to accomplish the attack path
3.Eavesdropping on CAN bus
High -It is easy or almost certain to accomplish the attack path
- DETERMINATION OF RISK
Risk value=Impact rating*feasibility level
Risk value for spoofing is 3
Risk value for tampering is 3
Risk value for eavesdropping is 2
- RISK TREATMENT DECISION
1.Spoofing of CAN Bus
Risk treatment–Acceptance
2.Tampering of CAN message
Risk treatment –Acceptance
3.Eavesdropping on CAN bus
Risk treatment -Acceptance