Enhanced Android App-Repackaging Attack on In-Vehicle Network

<table class="fixed-width table-group" id="tab3"><tr><td><table class="table"><colgroup><col style="width:10.19em"/><col style="width:18.56em"/></colgroup><tr><td class="thead-hr" colspan="2"><hr/></td></tr><tr><td class="align_left" rowspan="3">Reconnaissance</td><td class="align_center">(i) Analysis of vehicle control packet (using a diagnostic device)</td></tr><tr><td class="align_center">(ii) Analysis of an Android app for vehicles</td></tr><tr><td class="align_center">(iii) Analysis of ELM327 protocol</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_left">Weaponization</td><td class="align_center">(i) Repacking the Android app for vehicles</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_left">Delivery</td><td class="align_center">(i) Distribution to third-party app market</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_left">Exploitation<br/>Installation</td><td class="align_center">(i) User downloads and installs the app on his/her smartphone</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_left">Command &amp; Control</td><td class="align_center">(i) Analysis of vehicle operation state through the in-vehicle network packets</td></tr><tr><td class="align_left" colspan="2"><hr/></td></tr><tr><td class="align_left">Actions on Objectives</td><td class="align_center">(i) Forced control of the automotive E/E system, causing a traffic accident</td></tr><tr class="table-tr"><td colspan="2"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>Analysis of proposed attack model using Cyber Kill Chain.</div>

Wireless Communications and Mobile Computing

tab3

Table 3

Table 3: Enhanced Android App-Repackaging Attack on In-Vehicle Network 