Evaluation of CAN Bus Security Challenges

Bozdal M., Samie M., Aslam S., Jennions I.

SENSORS, vol.20, no.8, 2020 (SCI-Expanded) identifier identifier identifier

  • Publication Type: Article / Review
  • Volume: 20 Issue: 8
  • Publication Date: 2020
  • Doi Number: 10.3390/s20082364
  • Journal Name: SENSORS
  • Journal Indexes: Science Citation Index Expanded (SCI-EXPANDED), Scopus, Academic Search Premier, Aerospace Database, Aqualine, Aquatic Science & Fisheries Abstracts (ASFA), Biotechnology Research Abstracts, CAB Abstracts, Communication Abstracts, Compendex, EMBASE, INSPEC, MEDLINE, Metadex, Veterinary Science Database, Directory of Open Access Journals, Civil Engineering Abstracts
  • Keywords: CAN network, CAN security, ECU, in-vehicle communication, INTRUSION DETECTION, COUNTERMEASURES
  • Abdullah Gül University Affiliated: No


The automobile industry no longer relies on pure mechanical systems; instead, it benefits from many smart features based on advanced embedded electronics. Although the rise in electronics and connectivity has improved comfort, functionality, and safe driving, it has also created new attack surfaces to penetrate the in-vehicle communication network, which was initially designed as a close loop system. For such applications, the Controller Area Network (CAN) is the most-widely used communication protocol, which still suffers from various security issues because of the lack of encryption and authentication. As a result, any malicious/hijacked node can cause catastrophic accidents and financial loss. This paper analyses the CAN bus comprehensively to provide an outlook on security concerns. It also presents the security vulnerabilities of the CAN and a state-of-the-art attack surface with cases of implemented attack scenarios and goes through different solutions that assist in attack prevention, mainly based on an intrusion detection system (IDS).