eUF: A framework for detecting over-the-air malicious updates in autonomous vehicles

• Published in: Journal of King Saud University. Computer and information sciences Vol. 34; no. 8; pp. 5456 - 5467
• Main Authors: Qureshi, Anam, Marvi, Murk, Shamsi, Jawwad Ahmed, Aijaz, Adnan
• Format: Journal Article
• Language: English
• Published: Elsevier B.V 01.09.2022; Elsevier
• Subjects: Autonomous vehicle; Malicious software; Over-the-air; Software update; Uptane framework; Uptane framework; Over-the-air; Autonomous vehicle; Malicious software; Software update
• ISSN: 1319-1578; 2213-1248
• DOI: 10.1016/j.jksuci.2021.05.005

Software updates are highly significant in autonomous vehicles. These updates are utilized to provide enhanced features and updated security mechanisms. In order to ensure scalability and smooth roll-out Over-the-air (OTA) mechanism is a preferred option to propagate a software update. However, this approach is vulnerable to security attacks because of existence of wireless communication channel between the vehicle and the manufacturer. In that, an attacker can replace the legitimate software with a malicious software with an intent to get control over the vehicle. In this work, we are motivated to address this problem. We develop an enhanced uptane framework for detection of malicious OTA software updates in autonomous vehicles. For enhancing security, we incorporate convolutional neural network (CNN) in the uptane framework. The proposed framework is able to distinguish between malicious and benign software executables with high accuracy. For training and testing, we create two datasets by collecting executables of Windows and Linux operating system. We encourage the use of transfer learning by exploiting the developed CNN models in order to detect malicious executable designed for autonomous vehicles. We also benchmark the CNN models against state-of-the art models. Our work is highly beneficial for the community in providing a secure mechanism for software updates.