Security Threat Analysis for Remote Monitoring and Control Functions of Connected Car Services


Jin Kim, Jinho Yoo, Journal of Information Processing Systems Vol. 20, No. 2, pp. 173-184, Apr. 2024  

https://doi.org/10.3745/JIPS.03.0195
Keywords: Connected car, Security, Threat modeling, vulnerability Analysis
Fulltext:

Abstract

The connected car services are one of the most widely used services in the Internet of Things environment, and they provide numerous services to existing vehicles by connecting them through networks inside and outside the vehicle. However, although vehicle manufacturers are developing services considering the means to secure the connected car services, concerns about the security of the connected car services are growing due to the increasing number of attack cases. In this study, we reviewed the research related to the connected car services that have been announced so far, and we identified the threats that may exist in the connected car services through security threat modeling to improve the fundamental security level of the connected car services. As a result of performing the test to the applications for connected car services developed by four manufacturers, we found that all four companies' applications excessively requested unnecessary permissions for application operation, and the apps did not obfuscate the source code. Additionally, we found that there were still vulnerabilities in application items such as exposing error messages and debugging information.


Statistics
Show / Hide Statistics

Statistics (Past 3 Years)
Multiple requests among the same browser session are counted as one view.
If you mouse over a chart, the values of data points will be shown.




Cite this article
[APA Style]
Kim, J. & Yoo, J. (2024). Security Threat Analysis for Remote Monitoring and Control Functions of Connected Car Services. Journal of Information Processing Systems, 20(2), 173-184. DOI: 10.3745/JIPS.03.0195.

[IEEE Style]
J. Kim and J. Yoo, "Security Threat Analysis for Remote Monitoring and Control Functions of Connected Car Services," Journal of Information Processing Systems, vol. 20, no. 2, pp. 173-184, 2024. DOI: 10.3745/JIPS.03.0195.

[ACM Style]
Jin Kim and Jinho Yoo. 2024. Security Threat Analysis for Remote Monitoring and Control Functions of Connected Car Services. Journal of Information Processing Systems, 20, 2, (2024), 173-184. DOI: 10.3745/JIPS.03.0195.