RESEARCH AND TECHNIQUES FOR ENHANCING INTRA AND EXTRA VEHICLE COMMUNICATION

Vasile-Cătălin MIHACEA, Remus BRAD

Abstract


The automotive industry is rapidly transforming due to increasing connectivity and the transition to electric and autonomous vehicles. This shift entails exponential growth in on-board computing, software complexity, and data generation, rendering vehicles into complex, networked systems with heightened cybersecurity vulnerabilities. This paper analyzes key attack vectors and classifies cybersecurity incidents. Network consolidation and increased intra- and extra-vehicular communication are essential. The number of connected cars rose from 330 million in 2018 to 775 million in 2023 (a 134% increase), with projections suggesting 50 billion connected devices by 2030. Regulatory measures now mandate intelligent speed assistance, fatigue detection, emergency event recording, and advanced driver assistance systems. Vehicle-to-everything (V2X) technology offers transformative potential for traffic efficiency and road safety.

Full Text:

PDF

References


Juniper Research, Consumer Connected Cars: Telematics, In‑vehicle Apps & Connected Car Commerce 2018‑2023

Statista/Global Data IoT growth estimates, IoT in 2023 and beyond, https://techinformed.com/iot-in-2023-and-beyond

Upstream Security, Global Automotive Cybersecurity Report, 2025, https://upstream.auto/ty-2025-gacr-executive-summary/

Addendum 154 – UN Regulation No.155, 2021, https://unece.org/sites/default/files/2021-03/R155e.pdf

Addendum 154 – UN Regulation No.156, 2021, https://unece.org/sites/default/files/2021-03/R156e.pdf

ISO SAE 21434 / 2021, ISO SAW 21434, 2021, https:/ /www.iso.org/standard/70918.html

Upstream Security, Global Automotive Cybersecurity Report, 2022, https://upstream.auto/

Birnie, A. et al., Identifying the challenges and solutions for the emerging era of automotive zonal architectures, White Paper Zonal Architectures, NXP, 2021, http://www.nxp.com/vehiclenetworking

NXP, The Evolution of Automotive Processing, Investor Teach-In, 2021, https://investors.nxp.com/

Upstream Security, Automotive Cyber Trend Report H1’2023, https://upstream.auto/

Huq, N. et al., Cybersecurity for Connected Cars, Trend Micro Research, 2021, https://documents.trendmicro.com

Paganini, P., Don’t trust links with known domains: BMW affected by redirect vulnerability, 2024,https://securityaffairs.com/156843/reports/bmw-affected-by-redirect-vulnerability.html

Antoniuk, D., Taiwanese Semiconductor company hit by ransomware attack, 2024, https://therecord.media/foxsemicon-ransomware-attack-taiwan

Singh, J., Hyundai Motor India fixes bugs that expose customers personal data, 2024, https://techcrunch.com/2024/01/11/hyundai-motor-india-data-exposed/

Page, C., BMW security lapse exposed sensitive company information, 2024, https://techcrunch.com/2024/02/14/bmw-security-lapse-exposed-sensitive-company-information-researcher-finds/

Abrams, L., Hyundai Motor Europe hit by Black Basta ransomware attack, 2024, https://www.bleepingcomputer.com/news/security

Broga, K., Data of 20,000 Ignitis ON clients leaked in cyber incident, 2024, https://www.delfi.lt/en/business/data-of-20-000-ignitis-on-clients-leaked-in-cyber-incident-95857777

Lyons, J., Truck-to-Truck worm could infect – and disrupt – entire US commercial fleet, 2024, https://www.theregister.com/2024/03/22/boffins_tucktotruck_worm/

Waqas, Leading EV Charging Firm Spills Trove of Customer Info in a Server Leak, 2024, https://hackread.com/ev-charging-firm-spills-trove-of-customer-info/

Maddison, L., Taxi software firm breach expose details over 300,000 passengers, 2024, https://www.techradar.com/pro/security/

Chinesische Hacker sollen Volkswagen ausspioniert haben, 2024, https://www.manager-magazin.de/unternehmen/autoindustrie

Khaitan, A., Cybersecurity alert: Frotcom International Faces Alleged Data Breach, 2024, https://thecyberexpress.com/alleged-frotcom-data-breach/

NIST, CVE-2024-35537, 2024, https://nvd.nist.gov/vuln/detail/CVE-2024-35537

Ddos, CVE-2024-35213Critical Vulnerability Discovered in BlackBerry QNX SDP, 2024, https://securityonline.info/cve-2024-35213-critical-vulnerability-discovered-in-blackberry-qnx-sdp/

Dates, J., CHARX Vulnerability Discovered, 2024, https://blog.ret2.io/2024/07/17/pwn2own-auto-2024-charx-bugs/

Baran, G., Critical Flaws In Traffic Light Controller Let Attackers Change Signal Lights, 2024, https://cybersecuritynews.com/traffic-light-controller-authentication-bypass-vulnerability/

Petkauskas, V., Black Hat USA 2024:vehicle head unit can spy on you, 2024, https://cybernews.com/security/android-head-units-drivers-data-safety/

Eun-jin, K., Ransomware makes the third attack on Hanon Systems, Resulting in 2.3TB of Data Leakage, 2024, https://www.businesskorea.co.kr/news/articleView.html?idxno=223166

Laio., Chip hacking poses threat to public transport security, 2024, https://innovationorigins.com/en/chip-hacking-poses-threat-to-public-transport-security/

Bonnotte, N., Mohammed, S., Stübler, T., Amodei, A., arXiv preprint 2409.01324, 2024, https://arxiv.org/html/2409.01324v1

Kevin2600, Braktooth Hunting in the Car Hacker’s Wonderland, 2024, https://kevin2600-cmd.github.io/2024/09/13/Braktooth-Hunting-in-the-Car-Hacker's-Wonderland.html

Rivera, N., Curry, S., Rhinehart, J., Carroll, I., Lugo, K., Hacking Kia, 2024, https://samcurry.net/hacking-kia

Cybernews., Dutch government will replace hackable traffic lights, 2024, https://cybernews.com/news/dutch-government-will-replace-hackable-traffic-lights/

Lekander, A., Volkswagen says it’s “monitoring the situation” following 8Base ransomware claims, 2024, https://cyberinsider.com/volkswagen-says-its-monitoring-the-situation-following-8base-ransomware-claims/

Berard, D., Imbert, T., Dehors, V., 0-click RCE on Tesla Model 3 through TPMS sensors light, 2024, https://www.synacktiv.com/sites/default/files/2024-10/hexacon_0_click_rce_on_tesla_model_3_through_tpms_sensors_light.pdf

Fleet News., Telematics giant Microlise suffers cyber attack, 2024 https://www.fleetnews.co.uk/news/telematics-giant-microlise-suffers-cyber-attack

Lekander, A., Zero-day flaws in Mazda’s infotainment expose cars to takeover attacks, 2024, https://cyberinsider.com/zero-day-flaws-in-mazdas-infotainment-expose-cars-to-takeover-attacks/

Cyber Daily, Tesla data breach falsely claimed by IntelBroker; third-party EV charging firm actually breached, 2024, https://www.cyberdaily.au/security

TechCrunch, Researchers find security flaws in Skoda cars that may let hackers remotely track them, 2024, https://techcrunch.com/2024/12/12/researchers-find-security-flaws-in-skoda-cars-that-may-let-hackers-remotely-track-them/

zgsnj123, BYD head unit vulnerabilities (repository), 2024, https://github.com/zgsnj123/BYD_headunit_vuls/tree/main

Android Open Source Project, Vehicle System Isolation,https://source.android.com/docs/automotive/security/vehicle_system_isolation

Sungjae, H. et. al., All about activity injection: Threats, semantics, detection, and defense, Journal of Software: Practice & Experience, 50(7), 2020, pp. 1061-1086, https://doi.org/10.1002/spe.2792

Smys, S. et. al, Proc. 2nd Int. Conf. on Computer Networks & Comm. Tech (ICCNCT 2019), Lecture Notes on Data Engineering and Communications Technologies, Vol. 44, Springer, 2020, https://doi.org/10.1007/978-3-030-37051-0

Aboubacar, D., OSI Layers in Automotive Networks, IEEE 802.1 Meeting, Orlando, 2013, https://ieee802.org/

Andrew, Z., The Future of Automotive Connectivity, NXP & ABI research, White Paper, 2021, https://abiresearch.com/

Heineke, K. et. Al., The Future of Mobility, McKinsey Quarterly, 2023

Lu, Z. et al., LEAP: Lightweight Encryption and Protocol for In-Vehicle Communications, 2019, https://doi.org/10.48550/arXiv.1909.10380

Kwon, D. et. al., IoT Based Prognostics and Systems Health Management for Industrial Applications, IEEE Access, 4, 2016, pp. 3659-3670,https://doi.org/10.1109/ACCESS.2016.2587754

Kompass, K. et. al., Adaptive Restraint Systems: Toward Integral Safety, Encycl. of Automotive Engineering, Wiley, 2014, https://doi.org/10.1002/9781118354179.auto259

Koscher, K. et. al., Experimental Security Analysis of a Modern Automobile, IEEE Symp. Security & Privacy, 2010, pp. 447-462, https://www.autosec.org/pubs/cars-oakland2010.pdf

Valasek, C., Miller, C., Remote Exploitation of an Unaltered Passenger Vehicle, IOActive, 2015, https://www.ioactive.com/

Vrščaj, D. et al., Is Tomorrow’s Car Appealing?, AI & SOCIETY, 35, 2019, p. 7729, https://doi.org/10.1007/s00146-020-00941-z

Deichmann, J. et. al, The Race for Cybersecurity: Protecting the Connected Car, McKinsey & Co., 2019


Refbacks

  • There are currently no refbacks.


JOURNAL INDEXED IN :