arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2201.00589cs.NI
收藏

车辆中的安全时间敏感软件定义网络

Secure Time-Sensitive Software-Defined Networking in Vehicles

Timo Häckel, Philipp Meyer, Franz Korf, Thomas C. Schmidt

摘要:

未来车载网络(IVN)的当前设计为交换式以太网骨干做准备,交换式以太网骨干可以托管高级LAN技术,例如IEEE时间敏感网络(TSN)和软件定义网络(SDN)。在本文中,我们提出了一个集成的时间敏感的软件定义网络(TSSDN)的架构,同时使控制的同步和异步的实时和尽力而为的通信所有IVN流量类。尽管有中央SDN控制器,我们可以验证控制可以在没有TSN流量延迟惩罚的情况下运行,只要协议正确映射。我们展示了TSSDN如何自适应和可靠地增强车载通信的网络安全性。一个系统的调查可能的控制流与交换以太网的集成显示,这些策略允许塑造一个软件定义的IVN的攻击面。我们将讨论控制流标识符在不同层上的嵌入,涵盖了从完全公开的映射到深度封装的范围。我们实验评估这些策略在生产车辆,我们映射到一个现代的以太网拓扑结构。我们的研究结果表明,较低网络层上的汽车控制流的可见性可以在整个网络基础设施中实现隔离和访问控制。这样的TSSDN骨干网可以在IVN内建立和调查信任区域,并减少联网汽车在各种攻击场景中的攻击面。

英文摘要:

Current designs of future In-Vehicle Networks (IVN) prepare for switched Ethernet backbones, which can host advanced LAN technologies such as IEEE Time-Sensitive Networking (TSN) and Software-Defined Networking (SDN). In this paper, we present an integrated Time-Sensitive Software-Defined Networking (TSSDN) architecture that simultaneously enables control of synchronous and asynchronous real-time and best-effort communication for all IVN traffic classes. Despite the central SDN controller, we can validate that control can operate without a delay penalty for TSN traffic, provided protocols are properly mapped. We demonstrate how TSSDN adaptably and reliably enhances network security for in-vehicle communication. A systematic investigation of the possible control flow integrations with switched Ether-networks reveals that these strategies allow for shaping the attack surface of a software-defined IVN. We discuss embeddings of control flow identifiers on different layers, covering the range from a fully exposed mapping to deep encapsulation. We experimentally evaluate these strategies in a production vehicle, which we map to a modern Ethernet topology. Our findings indicate that visibility of automotive control flows on lower network layers enables isolation and access control throughout the network infrastructure. Such a TSSDN backbone can establish and survey trust zones within the IVN and reduce the attack surface of connected cars in various attack scenarios.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑