Cybersecurity of Firmware Updates

Details

• Creators:
  Bielawski, Russ ; Gaynier, Ron ; Ma, Di ; Lauzon, Sam ; Weimerskirch, Andre
• Corporate Creators:
  University of Michigan. Transportation Research Institute ; University of Michigan, Dearborn ; Volkswagen Group of America (Herndon, VA)
• Corporate Contributors:
  United States. Department of Transportation. National Highway Traffic Safety Administration. Office of Vehicle Safety Research
• Subject/TRT Terms:
  • Software
  • Electronic control
  • Computer network protocols
  • Theft
  • Standards
  • Computer security
  • Cybernetics
  • Data protection
  • Intelligent vehicles
  • Security
  More +
• Publication/ Report Number:
  DOT HS 812 807
• DOI:
  https://doi.org/10.21949/1530213
• Resource Type:
  Tech Report
• Geographical Coverage:
  United States
• Edition:
  Final Report
• Corporate Publisher:
  United States. Department of Transportation. National Highway Traffic Safety Administration
• Abstract:
  Over-the-Air (OTA) software and firmware updates are widely considered essential for networked devices. In the automotive industry, OTA firmware updates are anticipated to increase the efficiency and decrease the time in updating the critical firmware in vehicles’ electronic control units (ECUs). This project had these objectives: understand the scope and relevant attributes of firmware updates, understand their vulnerabilities and update solutions, understand mitigation methods for those vulnerabilities, and learn from adjacent industries. The report first presents a literature and technology review of the state-of-the-art of software updates in industries related to automotive, including the commercial aviation, medical, and consumer electronics industries. Next it identifies and assesses software update functionality risks in current and near-term future automobiles. Finally, it reviews mitigation methods to address those risks. In addition, this report describes the SAE AS5553A voluntary standard for the detection of and protection against counterfeit electronic parts in the aerospace industry and how it relates to the automotive industry.
• Format:
  PDF
• Funding:
  DTNH22-15-R-00104 Vehicle Electronics Systems Safety IDIQ
• Download URL:
  https://rosap.ntl.bts.gov/view/dot/55729/dot_55729_DS1.pdf
• File Type:
  [PDF - 1.25 MB]
• Collection(s):
  NHTSA - Vehicle Safety Research
• Main Document Checksum:
  urn:sha-512:96f740466696b52f3b44e11d940b23a3d8d207cdafbb8782fad6eb3a73b87d224928cc4d910439bfcb6419ea7a41db7e09f3498af22bc62c2cdde974c595373d