The IT-infrastructure of a vehicle is subject to varying security requirements. Important aspects are capturing, storing, and selecting of sensor data to, for example, recapitulate in case of an accident. Another important aspect are techniques to recognize and prevent attacks, e.g., unauthorized starting or controlling the car. In case of an accident or the recognition of an attack IT-forensic analysis is of great importance. Evaluation of digital traces is important to reconstruct the circumstances of the accident, identify attacks on the vehicle-infrastructure to prevent further attacks, and identify infected systems and completely clear malware.

In contrast to IT-forensic analysis of classical IT devices like computers, where all files are frozen upon discovery to secure all traces, the ex-post analysis of vehicles is in most cases not well applicable as for the large amount of data that occur and the circumstance that the information might not be recorded or not stored. This can lead to the situation that technical aid in finding the trigger of the accident is not possible.

The goal of AuFoP is
to design, develop, and implement a prototype of a modern, scalable method for a data safety conform and revisioned monitoring procedure for all sensor data in the vehicle.

Project website at ATHENE