Exploiting AUTOSAR Safety Mechanisms to Launch Security Attacks

Abstract

Automotive Electronic Control Units (ECUs) rely on both hardware and software mechanisms to ensure safety is maintained in the face of hazards that result from both random and systematic failures. In the presence of a malicious attacker, these safety mechanisms can serve as attack vectors to launch Denial of Service (DoS) attacks. This can be achieved by disabling critical system functions through the malicious creation of safety relevant fault conditions. In this paper, we explore some of the exploitable safety mechanisms within the Automotive Open System Architecture (AUTOSAR), and we demonstrate two successful attacks on an authenticated CAN FD bus system by introducing safety critical failures.