Evaluation of Security Access Service in Automotive Diagnostic Communication

Numerous examples of automotive vulnerabilities have been provided, and the diagnostic functions in the on-board electronic control unit (ECU) have been used as an avenue of attack and analysis. Many ECUs are equipped with security access services that protect crucial diagnostic functions. If these security access services contain vulnerabilities, however, the ECU may be falsified or improperly controlled through the controller area network. In this study, we analyze the means of attacking security access services and provide the results of evaluating actual ECUs.