Reproduce “Towards Understanding and Characterizing Vulnerabilities in Intelligent Connected Vehicles through Real-World Exploits” on OpenResearch
Turn your favorite coding agents into research agents that review literature, develop hypotheses, and run experiments.
Universal app for Apple silicon and Intel. Requires macOS 11 or later.
About this paper
Yuelin Wang, Yuqiao Ning, Yanbang Sun, Xiaofei Xie, Zhihua Xie, Yang Chen, Zhen Guo, Shihao Xue and 2 more
This research empirically characterizes vulnerabilities in Intelligent Connected Vehicles (ICVs) by analyzing 649 real-world exploits across 48 vehicle models. It reveals that cloud platforms and In-Vehicle Infotainment (IVI) systems are primary vulnerability hotspots and expands existing security taxonomies with new locations and 13 new types, providing data-driven insights into the ICV threat landscape.
Key insights
- Cloud platforms (37.8%) and In-Vehicle Infotainment (IVI) systems (32.0%) constitute the largest attack surfaces in ICVs, primarily due to their extensive connectivity, data handling, and complex software architectures.
- Systemic flaws in access control (Authorization vulnerabilities, 36.4%) and data protection (Information Leakage, 17.3%) are highly prevalent across ICV components, particularly in cloud platforms and IVI systems.
- The number of vulnerabilities correlates positively with a vehicle's intelligence and functional complexity, with SUVs, L2-level autonomous vehicles, and electric vehicles exhibiting higher vulnerability counts.
Summary by alphaXiv.
Tip: change arxiv.org to autoarxiv.org in any arXiv abstract link to open the paper here.