| Title | Cybersecurity of Firmware Updates |
|---|---|
| Record ID | 80654 |
| Personal Name Creator |
Bielawski, Russ; Gaynier, Ron; Ma, Di; Lauzon, Sam; Weimerskirch, Andre |
| Corporate Creator | University of Michigan. Transportation Research Institute; University of Michigan, Dearborn; Volkswagen Group of America (Herndon, VA) |
| Corporate Contributor |
United States. Department of Transportation. National Highway Traffic Safety Administration. Office of Vehicle Safety Research |
| Publisher | United States. Department of Transportation. National Highway Traffic Safety Administration |
| Publication Date | 20201001 |
| Language | English |
| Abstract | Over-the-Air (OTA) software and firmware updates are widely considered essential for networked devices. In the automotive industry, OTA firmware updates are anticipated to increase the efficiency and decrease the time in updating the critical firmware in vehicles’ electronic control units (ECUs). This project had these objectives: understand the scope and relevant attributes of firmware updates, understand their vulnerabilities and update solutions, understand mitigation methods for those vulnerabilities, and learn from adjacent industries. The report first presents a literature and technology review of the state-of-the-art of software updates in industries related to automotive, including the commercial aviation, medical, and consumer electronics industries. Next it identifies and assesses software update functionality risks in current and near-term future automobiles. Finally, it reviews mitigation methods to address those risks. In addition, this report describes the SAE AS5553A voluntary standard for the detection of and protection against counterfeit electronic parts in the aerospace industry and how it relates to the automotive industry. |
| Rosap ID | dot:55729 |
| Rosap URL | https://rosap.ntl.bts.gov/view/dot/55729 |
| TRT Terms | Software; Electronic control; Computer network protocols; Theft; Standards; Computer security; Cybernetics; Data protection; Intelligent vehicles; Security; Vehicle safety; Automated vehicle control |
| General Subjects | Over-the-Air; Updates; Firmware; ECU (Electronic Control Unit); Counterfeit; SAE AS5553A |
| Geographical Coverage |
United States |
| TRIS Online Accession No |
1774114 |
| Contract Number | DTNH22-15-R-00104 Vehicle Electronics Systems Safety IDIQ |
| Report Number | DOT HS 812 807 |
| Resource type | Tech Report |
| URL | https://ntlrepository.blob.core.windows.net/lib/80000/80600/80654/14455_CybersecurityFirmwareUpdates_101420_v4_tag.pdf |
| Format | |
| Database | NTL Digital Repository |