Security Risks and Designs in the Connected Vehicle Ecosystem: In-Vehicle and Edge Platforms

The evolution of Connected Vehicles (CVs) has introduced significant advancements in both in-vehicle and vehicle-edge platforms, creating a highly connected ecosystem. These advancements, however, have heightened exposure to cybersecurity risks. This work reviews emerging security challenges in the...

Full description

Saved in:
Bibliographic Details
Main Authors: Marco De Vincenzi, John Moore, Bradley Smith, Sanjay E. Sarma, Ilaria Matteucci
Format: Article
Language:English
Published: IEEE 2025-01-01
Series:IEEE Open Journal of Vehicular Technology
Subjects:
Online Access:https://ieeexplore.ieee.org/document/10818588/
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832540559284109312
author Marco De Vincenzi
John Moore
Bradley Smith
Sanjay E. Sarma
Ilaria Matteucci
author_facet Marco De Vincenzi
John Moore
Bradley Smith
Sanjay E. Sarma
Ilaria Matteucci
author_sort Marco De Vincenzi
collection DOAJ
description The evolution of Connected Vehicles (CVs) has introduced significant advancements in both in-vehicle and vehicle-edge platforms, creating a highly connected ecosystem. These advancements, however, have heightened exposure to cybersecurity risks. This work reviews emerging security challenges in the CV ecosystem from a new perspective, focusing on the integration of in-vehicle platforms such as the infotainment system and vehicle-edge platforms. By analyzing case studies such as Android Automotive, Message Queuing Telemetry Transport (MQTT), and the Robot Operating System (ROS), we identify the primary security threats, including malware attacks, data manipulation, and Denial of Service (DoS) attacks. The discussion extends to privacy concerns and the lack of trust-building mechanisms in CVs, highlighting how these gaps can be exploited. To mitigate these risks, we retrieve solutions drawn from the broader field of Internet of Things (IoT) security research, including Multi-Factor Authentication (MFA) and trust-based systems. The proposed framework aims to increase the trustworthiness of devices within the CV ecosystem. Finally, we identify future research directions in adaptive mechanisms and cross-domain security.
format Article
id doaj-art-c8aa4bca49f047f4bc7e2923cd927a7d
institution Kabale University
issn 2644-1330
language English
publishDate 2025-01-01
publisher IEEE
record_format Article
series IEEE Open Journal of Vehicular Technology
spelling doaj-art-c8aa4bca49f047f4bc7e2923cd927a7d2025-02-05T00:01:19ZengIEEEIEEE Open Journal of Vehicular Technology2644-13302025-01-01644245410.1109/OJVT.2024.352408810818588Security Risks and Designs in the Connected Vehicle Ecosystem: In-Vehicle and Edge PlatformsMarco De Vincenzi0https://orcid.org/0000-0002-2706-2936John Moore1https://orcid.org/0000-0001-6740-6935Bradley Smith2Sanjay E. Sarma3https://orcid.org/0000-0003-2812-039XIlaria Matteucci4https://orcid.org/0000-0002-5936-8470Institute of Informatics and Telematics, Pisa, ItalyFord Motor Company, Dearborn, MI, USAFord Motor Company, Dearborn, MI, USADepartment of Mechanical Engineering, Massachusetts Institute of Technology, Cambridge, MA, USAInstitute of Informatics and Telematics, Pisa, ItalyThe evolution of Connected Vehicles (CVs) has introduced significant advancements in both in-vehicle and vehicle-edge platforms, creating a highly connected ecosystem. These advancements, however, have heightened exposure to cybersecurity risks. This work reviews emerging security challenges in the CV ecosystem from a new perspective, focusing on the integration of in-vehicle platforms such as the infotainment system and vehicle-edge platforms. By analyzing case studies such as Android Automotive, Message Queuing Telemetry Transport (MQTT), and the Robot Operating System (ROS), we identify the primary security threats, including malware attacks, data manipulation, and Denial of Service (DoS) attacks. The discussion extends to privacy concerns and the lack of trust-building mechanisms in CVs, highlighting how these gaps can be exploited. To mitigate these risks, we retrieve solutions drawn from the broader field of Internet of Things (IoT) security research, including Multi-Factor Authentication (MFA) and trust-based systems. The proposed framework aims to increase the trustworthiness of devices within the CV ecosystem. Finally, we identify future research directions in adaptive mechanisms and cross-domain security.https://ieeexplore.ieee.org/document/10818588/Connected vehiclessecurityprivacyandroid automotivemessage queuing telemetry transportrobot operating system
spellingShingle Marco De Vincenzi
John Moore
Bradley Smith
Sanjay E. Sarma
Ilaria Matteucci
Security Risks and Designs in the Connected Vehicle Ecosystem: In-Vehicle and Edge Platforms
IEEE Open Journal of Vehicular Technology
Connected vehicles
security
privacy
android automotive
message queuing telemetry transport
robot operating system
title Security Risks and Designs in the Connected Vehicle Ecosystem: In-Vehicle and Edge Platforms
title_full Security Risks and Designs in the Connected Vehicle Ecosystem: In-Vehicle and Edge Platforms
title_fullStr Security Risks and Designs in the Connected Vehicle Ecosystem: In-Vehicle and Edge Platforms
title_full_unstemmed Security Risks and Designs in the Connected Vehicle Ecosystem: In-Vehicle and Edge Platforms
title_short Security Risks and Designs in the Connected Vehicle Ecosystem: In-Vehicle and Edge Platforms
title_sort security risks and designs in the connected vehicle ecosystem in vehicle and edge platforms
topic Connected vehicles
security
privacy
android automotive
message queuing telemetry transport
robot operating system
url https://ieeexplore.ieee.org/document/10818588/
work_keys_str_mv AT marcodevincenzi securityrisksanddesignsintheconnectedvehicleecosysteminvehicleandedgeplatforms
AT johnmoore securityrisksanddesignsintheconnectedvehicleecosysteminvehicleandedgeplatforms
AT bradleysmith securityrisksanddesignsintheconnectedvehicleecosysteminvehicleandedgeplatforms
AT sanjayesarma securityrisksanddesignsintheconnectedvehicleecosysteminvehicleandedgeplatforms
AT ilariamatteucci securityrisksanddesignsintheconnectedvehicleecosysteminvehicleandedgeplatforms