Paper at the ARES Conference 2023

Formal Security Analysis of Vehicle Diagnostic Protocols

Vehicle diagnostics are security-critical as they represent a potential entry point for attackers. There have already been numerous successful attacks on the Security Access Service specified in the Unified Diagnostic Services (UDS) standard. For this reason, the standard was significantly improved in terms of security in 2020 by introducing a new authentication service. However, formal analysis by ACSD researchers has shown that vulnerabilities still exist. The paper "Formal Security Analysis of Vehicle Diagnostic Protocols" presents the vulnerabilities identified in the analyses and describes how they can be mitigated. It also includes a formal analysis of the proposed security measures and recommendations for the secure implementation of UDS and how the standard can be further improved. The paper is available here .