Technological developments towards vehicle automation have been taking place for years. Satellite navigation, cruise control and anti-lock braking systems (ABS) are well-known examples of automation technology used in everyday cars. The trend of automation technology being used in vehicles is expected to move closer to full autonomy through technological advancements in robotics and artificial intelligence. As a result, our daily lives will become more and more dependent on digitally-controlled devices and vehicle systems (partially or highly automated). On the other hand, computing and digital systems also have a tendency to become more fragile and susceptible to faults and failures because of cyber-attacks and software and hardware defects, as well as accidental defects introduced by developers. Therefore, autonomous vehicle systems must be developed to bear such dangers in mind and must be equipped with defensive capabilities and measures such that they can be able to respond automatically and dynamically to both accidental and deliberate defects and attacks. In this study, autonomous and unmanned vehicle systems are examined for their cyber-security vulnerabilities. Threats and attacks exploiting these vulnerabilities are identified and classified. Development guidelines and a mitigation strategy to be used in the development of autonomous and unmanned vehicle systems are proposed and discussed in the final section.
CarterM. Network integrated robotics at SPAWAR systems center pacific. In: 2nd annual C4ISR, cyber security, robotic platforms and sensors conference. San Diego, CA: May2009.
22.
FerreiraH. Swordfish: an autonomous surface vehicle for network centric operations. In: Proceedings of the oceans Europe’07 conference, IEEE OES, Aberdeen, Scotland, June2007.
YanushevskyRafael .Guidance of Unmanned Aerial Vehicles. Pp. 3–10. Boca Raton, FL: CRC Press, 2011.
27.
GuoweiCDiasJSeneviratneL. A survey of small-scale unmanned aerial vehicles: recent advances and future development trends. Unmanned Systems2014; 2(2): 1–25.
Conference report on HR 658, FAA reauthorızation and reform act of 2012, conference report (H Rept 112–381), Congressional record volume 158, number 16 (Wednesday, 1February2012), pp. H230–H304, http://fas.org/sgp/news/2012/02/faa-uas.html (2012, accessed 14 September 2014).
30.
International telecommunications union. ITU-T3 recommendation X.800, Security architecture for OSI, Geneva, Switzerland, 1991.
31.
LarsonUENilssonDK. Securing vehicles against cyber attacks. In: CSIIRW’08: proceedings of the 4th annual workshop on cyber security and information intelligence research. New York, NY, 2008.
32.
ThornPRMacCarleyCA. A spy under the hood: controlling risk and automotive EDR. Risk Manage2008; 55: 22–25.
33.
WolfMWeimerskirchMAPaarC. Security in automotive bus systems. In: Proceedings of the workshop on embedded security in cars. Bochum, Germany: 2004.
ZhaoY. Telematics: safe and fun driving. Intelligent Systems, IEEE2002; 17(1): 10–14.
36.
KoscherK. Experimental security analysis of a modern automobile. In: IEEE symposium on security and privacy (eds EvansDVignaG). Berkeley, CA: May 2010.
37.
MillerCValasekC. Adventures in automotive networks and control units.
38.
CheckowayS. Comprehensive experimental analyses of automotive attack surfaces. In: Proceedings of USENIX security. San Francisco, CA: 2011.
39.
ISO 11898–1:2003. Road vehicles—Controller area network.
North American electric reliability council, control systems security working group, Top 10 vulnerabilities of control systems and their associated mitigations 2006, US Department of Energy, National SCADA test bed program, 16March2006, http://energy.gov/sites/prod/files/oeprod/DocumentsandMedia/NERC_2007_Top_10.pdf (2006, accessed 12 September 2014).
43.
KisnerR. Design practices for communications and workstations in highly integrated control rooms, NUREG/CR-6991, September2009.
44.
SandersB. Making sound cyber security decisions through a quantitative metrics approach. In: 1st international workshop on resilience assessment of critical infrastructuresUrbana-Champaign IL: 25April2011.
45.
KisnerR. Cybersecurity through real-time distributed control systems, ORNL/TM-2010/30, February2010.
46.
Common criteria for information technology security evaluation—part 1: introduction and general model; part 2: security function requirements; part 3: security assurance requirements, ISO/IEC 15408, Version 2.0, 1999.
47.
Wikipedia, DO-178B, Software considerations in airborne systems and equipment certification, http://en.wikipedia.org/wiki/DO-178B (992, accessed 23 September 2014).
48.
BoyerWMcQueenM. Ideal based cyber security technical metrics for control systems. In: CRITIS’07 2nd international workshop on critical information infrastructures security, Benalmadena-Costa (Malaga), Spain3–5October2007.
49.
BirmanKP. Guide to reliable distributed systems, building high-assurance applications and cloud-hosted services. London: Springer–Verlag, 2012, pp. 476–522.
50.
IEEE 830–1998. IEEE recommended practice for software requirements specifications.
51.
StallingsW. Cryptography and network security principles and practice. 5th ed. New York: Pearson, 2011, pp. 10–27.
52.
PotokTEElmoreMTReedJW. VIPAR: advanced information agents discovering knowledge in an open and changing environment. In: 7th world mulitconference on systemics, cybernetics and informatics specification session on agent-based computing, Orlando, FL, 27–30 July 2003, pp. 28–33.
53.
PotokTEPhillipsLPollockR. Suitability of agent-based systems for command and control in fault-tolerant, safety-critical responsive decision networks. In: ISCA 16th international conference on parallel and distributed computer systems (PDCS), Reno, NV, 13–25 August 2003, pp. 283–290.
54.
Conte de LeonDAlves–FossJKringsA. Modeling complex control systems to identify remotely accessible devices vulnerable to cyber attack. In: ACM workshop on scientific aspects of cyber terrorism, (SACT), Washington, DC, November2002.
AminSCardenasASastryS. Safe and secure networked control systems under denial-of-service attacks. Hybrid systems: computation and control, Lecture notes in computer science, April2009.
57.
StallingsWilliam. Cryptography and Network Security Principles and Practice, Fifth Edition. Pp. 22–34. New York: Pearson, 2011
58.
BirmanKevin P. Guide to Reliable Distributed Systems, Building High-Assurance Applications and Cloud-Hosted Services. Pp. 551–568. London: Springer-Verlag, 2012.
59.
WeimerskirchA. Automotive and industrial data security. In: Cybersecurity for; cyber-physical systems workshop, Gaithersburg, MD, USA, 23–24April2012.
