A STPA-based Approach for Systematic Security Analysis of In-vehicle Diagnostic and Software Update Systems

With the continuing innovations in the safety and intelligence of automobiles, the connectivity of vehicles increases which comes with also increasing security challenges. The in-vehicle diagnostics and software update system, which is an essential part of modern vehicles that supports remote diagnostics and Over-The-Air (OTA) firmware or configuration updates, is a common attack goal in automobiles. Adversaries can inject malicious software...