Securing Electric Vehicles Against CAN Bus Replay Attacks: A Message Authentication Approach

Controller Area Network (CAN) bus is a critical communication system of an automobile, which enables various electronic control units (ECU) to communicate to each other and share information. CAN faces security vulnerabilities due to its limited security features and broadcast nature. This article investigated replay attacks on CAN bus and proposed an integrated intrusion prevention systems (IPS) for active defense against CAN bus attacks. Specifically, a secure message authentication scheme was introduced to verify and authenticate and freshness and integrity of message received on CAN bus against replay attack, in which each message were a freshness value and MAC tag were attached with the workload. Experimental results demonstrate the effectiveness of proposed scheme.