The search result changed since you submitted your search request. Documents might be displayed in a different sort order.
  • search hit 1 of 643
Back to Result List

An Automotive Penetration Testing Framework for IT-Security Education

  • Automotive Original Equipment Manufacturer (OEM) and suppliers started shifting their focus towards the security of their connected electronic programmable products recently since cars used to be mainly mechanical products. However, this has changed due to the rising digitalization of vehicles. Security and functional safety have grown together and need to be addressed as a single issue, referred to as automotive security, in the following article. One way to accomplish security is automotive security education. The scientific contribution of this paper is to establish an Automotive Penetration Testing Education Platform (APTEP). It consists of three layers representing different attack points of a vehicle. The layers are the outer, inner, and core layers. Each of those contains multiple interfaces, such as Wireless Local Area Network (WLAN) or electric vehicle charging interfaces in the outer layer, message bus systems in the inner layer, and debug or diagnostic interfaces in the core layer. One implementation of APTEP is in a hardware case and as a virtual platform, referred to as the Automotive Network Security Case (ANSKo). The hardware case contains emulated control units and different communication protocols. The virtual platform uses Docker containers to provide a similar experience over the internet. Both offer two kinds of challenges. The first introduces users to a specific interface, while the second combines multiple interfaces, to a complex and realistic challenge. This concept is based on modern didactic theory, such as constructivism and problem-based learning. Computer Science students from the Ostbayerische Technische Hochschule (OTH)Regensburg experienced the challenges as part of a special topic course and provided positive feedback.

Export metadata

Additional Services

Share in Twitter Search Google Scholar Statistics
Metadaten
Author:Stefan Schönhärl, Philipp Fuxen, Julian Graf, Jonas Schmidt, Rudolf Hackenberg, Jürgen MottokORCiDGND
URL / DOI:https://www.thinkmind.org/index.php?view=article&articleid=cloud_computing_2022_1_10_28001
ISBN:978-1-61208-948-5
Parent Title (English):Cloud Computing 2022: The Thirteenth International Conference on Cloud Computing, GRIDs, and Virtualization, Special Track FAST-CSP, Barcelona, Spain, 24.-28.04.2022
Publisher:IARIA
Place of publication:[Wilmington, DE, USA]
Document Type:conference proceeding (article)
Language:English
Year of first Publication:2022
Release Date:2022/06/22
Tag:Automotive; Education; Education framework; IT-Security; Penetration testing
First Page:1
Last Page:6
Institutes:Fakultät Informatik und Mathematik
Fakultät Informatik und Mathematik / Labor Informationssicherheit und Complience (ISC)
Begutachtungsstatus:peer-reviewed
research focus:Digitalisierung
Licence (German):Keine Lizenz - Es gilt das deutsche Urheberrecht: § 53 UrhG