Driving Security Into Connected Cars:
Threat Model and Recommendations
Common Information
| Type | Value |
|---|---|
| UUID | 9fef8b4d-7ea3-4f27-87aa-641223d0095c |
| Fingerprint | d8edf97ecf00c2862bfb641375571b6712216f6d6557d4d24b618d35e09cc355 |
| Analysis status | DONE |
| Considered CTI value | 1 |
| Text language | |
| Published | Aug. 7, 2020, 7:02 p.m. |
| Added to db | April 14, 2024, 11:04 a.m. |
| Last updated | Aug. 30, 2024, 10:54 p.m. |
| Headline | Driving Security Into Connected Cars: Threat Model and Recommendations |
| Title | Driving Security Into Connected Cars: Threat Model and Recommendations |
| Detected Hints/Tags/Attributes | 192/4/140 |
Source URLs
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 6 | cve-2013-6282 |
|
| Details | Domain | 245 | shutterstock.com |
|
| Details | Domain | 37 | www.cnbc.com |
|
| Details | Domain | 1 | mobility.here.com |
|
| Details | Domain | 3 | www.einfochips.com |
|
| Details | Domain | 84 | www.forbes.com |
|
| Details | Domain | 26 | www.technologyreview.com |
|
| Details | Domain | 124 | www.nytimes.com |
|
| Details | Domain | 2 | www.kvaser.com |
|
| Details | Domain | 3 | spacenews.com |
|
| Details | Domain | 39 | www.theverge.com |
|
| Details | Domain | 5 | www.tesla.com |
|
| Details | Domain | 2 | www.hindawi.com |
|
| Details | Domain | 175 | www.zdnet.com |
|
| Details | Domain | 5 | illmatics.com |
|
| Details | Domain | 8 | keenlab.tencent.com |
|
| Details | Domain | 15 | blog.lookout.com |
|
| Details | Domain | 2 | engineering.com |
|
| Details | Domain | 2 | www.engineering.com |
|
| Details | Domain | 2 | www.circuitbasics.com |
|
| Details | Domain | 2 | circuitbasics.com |
|
| Details | Domain | 60 | documents.trendmicro.com |
|
| Details | Domain | 768 | www.youtube.com |
|
| Details | Domain | 2 | www.jeep.com |
|
| Details | Domain | 29 | www.techrepublic.com |
|
| Details | Domain | 2 | www.fcawitech.com |
|
| Details | Domain | 7 | asia.nikkei.com |
|
| Details | Domain | 4 | webkit.org |
|
| Details | Domain | 243 | cve.mitre.org |
|
| Details | Domain | 4 | wiki.ubuntu.com |
|
| Details | Domain | 4 | www.ssh.com |
|
| Details | Domain | 4 | techterms.com |
|
| Details | Domain | 2 | www.bosch.com |
|
| Details | Domain | 2 | zone.ni.com |
|
| Details | Domain | 35 | blackhat.com |
|
| Details | Domain | 4 | www.nxp.com |
|
| Details | Domain | 2 | obdii.com |
|
| Details | Domain | 2 | www.bmwusa.com |
|
| Details | Domain | 2 | newtis.info |
|
| Details | Domain | 2 | www.newtis.info |
|
| Details | Domain | 19 | pcmag.com |
|
| Details | Domain | 55 | cwe.mitre.org |
|
| Details | Domain | 3 | www.qnx.com |
|
| Details | Domain | 4 | www.press.bmwgroup.com |
|
| Details | Domain | 1 | books.google.com.us |
|
| Details | Domain | 604 | www.trendmicro.com |
|
| Details | Domain | 16 | scadahacker.com |
|
| Details | Domain | 58 | www.shodan.io |
|
| Details | Domain | 110 | owasp.org |
|
| Details | Domain | 145 | threatpost.com |
|
| Details | Domain | 35 | resources.infosecinstitute.com |
|
| Details | Domain | 132 | trendmicro.com |
|
| Details | File | 2 | self-driving-car.html |
|
| Details | File | 2 | 05electronics.html |
|
| Details | File | 2 | remote%20car%20hacking.pdf |
|
| Details | File | 1 | automaker-plans-satellite-network-to-support-autonomous-vehicles.aspx |
|
| Details | File | 3 | wp-cyberattacks-against-intelligent-transportation-systems.pdf |
|
| Details | File | 2 | uconnect.html |
|
| Details | File | 2 | wp.pdf |
|
| Details | File | 2 | encryption7.htm |
|
| Details | File | 1 | us-18-liu-over-the-air-how-we-remotely-compromised-the-gateway-bcm-and-autopilot-ecus-of-tesla-cars-wp.pdf |
|
| Details | File | 2 | msdfatfsug.pdf |
|
| Details | File | 1 | autopilot.pdf |
|
| Details | File | 1 | bmw_cars_by_keenlab.pdf |
|
| Details | File | 2 | exploit-and-secure-connected-bmw-cars.pdf |
|
| Details | File | 4 | background.html |
|
| Details | File | 2 | connecteddrive.html |
|
| Details | File | 2 | newtis.inf |
|
| Details | File | 2 | 367.html |
|
| Details | File | 2 | qnx.doc |
|
| Details | File | 2 | prog%2ftopic%2fqnet_wqcdfy.html |
|
| Details | File | 4 | howto-threatmodeling.html |
|
| Details | File | 36 | resources.inf |
|
| Details | File | 5 | wp-defending-against-pos-ram-scrapers.pdf |
|
| Details | File | 5 | hybrid-cloud.html |
|
| Details | File | 4 | xdr.html |
|
| Details | Url | 2 | https://www.cnbc.com/2019/07/29/experts-say-its-at-least-a-decade-before-you-can-buy-a- |
|
| Details | Url | 1 | https://mobility.here.com/learn/smart-city-mobility/what-mobility-service-means-consumers- |
|
| Details | Url | 2 | https://www.cmswire.com/digital-experience/connected-car-experiences-in-2019-exploring-the-possibilities/. |
|
| Details | Url | 2 | https://www.einfochips.com/blog/everything-you-need-to-know-about-in-vehicle-infotainment-system/. |
|
| Details | Url | 7 | https://www.forbes.com/sites |
|
| Details | Url | 2 | https://www.technologyreview.com/2012/12/03/181350/many-cars-have-a-hundred-million-lines-of-code/. |
|
| Details | Url | 2 | https://www.nytimes.com/2010/02/05/technology/05electronics.html |
|
| Details | Url | 2 | https://www.kvaser.com/about-can/can- |
|
| Details | Url | 2 | https://www.evaluationengineering.com/instrumentation/article/13009506/entertainment-rides-the-most-bus. |
|
| Details | Url | 2 | https://www.usatoday.com/story/tech/columnist/2016/06/28/your-average-car-lot-more-code-driven-than-you- |
|
| Details | Url | 1 | https://www.theverge.com/2020/3/24/21190273/spacex-starlink-satellite-internet- |
|
| Details | Url | 2 | https://www.tesla.com/support/connectivity. |
|
| Details | Url | 2 | https://www.hindawi.com/journals/ijvt/2013/971684/. |
|
| Details | Url | 2 | https://www.zdnet.com/article/what-is-v2x-communication-creating-connectivity-for-the- |
|
| Details | Url | 2 | http://illmatics.com/remote%20car%20hacking.pdf |
|
| Details | Url | 2 | https://keenlab.tencent.com/en/2020/03/30/tencent-keen- |
|
| Details | Url | 2 | https://blog.lookout.com/hacking-a-tesla. |
|
| Details | Url | 1 | https://www.engineering.com/advancedmanufacturing/articleid/20027/chinese- |
|
| Details | Url | 1 | https://www.circuitbasics.com/basics-of-the-spi-communication-protocol/. |
|
| Details | Url | 4 | https://documents.trendmicro.com/assets/white_ |
|
| Details | Url | 3 | https://www.theverge.com/2015/7/24/9032179/chrysler-announces-voluntary-recall-hack. |
|
| Details | Url | 2 | https://www.youtube.com/watch?v=machkasmxec |
|
| Details | Url | 2 | https://www.jeep.com/uconnect.html |
|
| Details | Url | 2 | https://www.fcawitech.com/. |
|
| Details | Url | 2 | https://www.kvaser.com/lesson/can-messages/. |
|
| Details | Url | 2 | https://asia.nikkei.com/business/automobiles/tesla-teardown-finds-electronics-6-years- |
|
| Details | Url | 1 | https://www.blackhat.com/docs/us-17/thursday/us-17-nie-free-fall-hacking-tesla-from-wireless-to-can-bus- |
|
| Details | Url | 2 | https://webkit.org/. |
|
| Details | Url | 106 | https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve |
|
| Details | Url | 1 | https://wiki.ubuntu.com/apparmor. |
|
| Details | Url | 2 | https://www.ssh.com/ssh/. |
|
| Details | Url | 2 | https://computer.howstuffworks |
|
| Details | Url | 2 | https://techterms.com/definition/udp. |
|
| Details | Url | 2 | https://www.bosch.com/stories/the-electronic-stability-program-esp/. |
|
| Details | Url | 1 | http://zone.ni.com/reference/en-xx |
|
| Details | Url | 1 | https://i.blackhat.com/us-18/thu-august-9 |
|
| Details | Url | 2 | https://www.nxp.com/docs |
|
| Details | Url | 2 | https://www.cnet |
|
| Details | Url | 2 | https://www.tesla.com/autopilot?redirect=no |
|
| Details | Url | 1 | https://keenlab.tencent.com/en/whitepapers/experimental_security_research_of_tesla_ |
|
| Details | Url | 1 | https://keenlab.tencent.com/en/whitepapers/experimental_security_assessment_of_ |
|
| Details | Url | 2 | https://i.blackhat.com/usa-19/thursday/us-19-cai-0-days-and-mitigations-roadways-to- |
|
| Details | Url | 2 | https://www.bmwusa.com/explore |
|
| Details | Url | 2 | https://www.newtis.info |
|
| Details | Url | 2 | https://cwe.mitre.org/data/definitions/367.html |
|
| Details | Url | 2 | http://www.qnx.com/developers/docs/qnxcar2/index. |
|
| Details | Url | 1 | https://www.press.bmwgroup.com/usa/article/detail/t0017923en_us/bmw-presents-open-source-telematics- |
|
| Details | Url | 1 | https://books.google.com.us/books?id=wfp9agaaqbaj&pg=pt212&lpg=pt212&dq=rex |
|
| Details | Url | 16 | https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats |
|
| Details | Url | 4 | https://scadahacker.com/howto/howto-threatmodeling.html |
|
| Details | Url | 7 | https://www.shodan.io/. |
|
| Details | Url | 16 | https://www.trendmicro.com/vinfo/us |
|
| Details | Url | 26 | https://www.trendmicro.com |
|
| Details | Url | 2 | https://owasp.org/www-community |
|
| Details | Url | 2 | https://threatpost.com/dns-spoofing-attacks/141880/. |
|
| Details | Url | 2 | https://resources.infosecinstitute.com/qualitative-risk-analysis-dread-model/. |
|
| Details | Url | 4 | https://www.trendmicro.com/vinfo/us/security/news/internet-of-things/securing-the- |
|
| Details | Url | 4 | https://www.trendmicro.com/vinfo/us/security/news/security-technology/security-101-virtual-patching. |
|
| Details | Url | 1 | https://www.trendmicro.com/vinfo/us/security/news/online-privacy/how-to-set-up- |
|
| Details | Url | 1 | https://www.trendmicro.com/us/iot-security/product/trend- |
|
| Details | Url | 1 | https://www.trendmicro.com/en_us/business/products/hybrid-cloud.html#t2 |
|
| Details | Url | 1 | https://www.trendmicro.com/us/iot-security/product/trend-micro-iot- |
|
| Details | Url | 2 | https://www.trendmicro.com/en_us/business/products/detection-response/xdr.html |
|
| Details | Url | 1 | https://cities-today.com/self-driving-car-production-reach-14-5-million-2025-says-new-study/#: |