Model Checking Resiliency and Sustainability of In-Vehicle Network for Real-Time Authenticity

The Controller Area Network (CAN) is the most common network system in automotive systems. However, standardized design of a CAN protocol does not consider security issues, so it vulnerable to various attacks from internal and external electronic devices. Recently, in-vehicle often connected systems, including Internet, can result an unwarranted third-party application becoming attack point. Message Authentication (MAuth-CAN) new centralized authentication for system, where two dual-CAN controllers are utilized process message authentication. MAuth-CAN designed provide mechanism as well resilience flooding sustainably protect against bus-off attack. This paper presents formal techniques guarantee critical timing properties MAuth-CAN, based on model checking, which be also used safety certificates vehicle components, such ISO 26262. Using we prove sufficient conditions that resilient sustainable models timed automata applicable analysis other applications running bus. In addition, discuss results checking those consistent with experiment implementation.