Over-the-Air Update Validation for Connected-Vehicle Infotainment Systems
DOI:
https://doi.org/10.63282/3050-9246.IJETCSIT-V4I3P126Keywords:
Over-the-Air (OTA), Connected Vehicles, Infotainment Systems, Software Integrity, Compatibility Testing, Failure Detection, Functional Testing, Update ReliabilityAbstract
Over-the-air (OTA) software updates are a vital way to keep and upgrade connected-vehicle infotainment systems without the need for physical service visits and have been developed to allow software updates, feature enhancements, security patches and bug fixes to be delivered remotely. Network connectivity issues, corrupted update packages, software incompatibility, interrupted upgrade processes, or failure to properly recover the system can impact the update and availability of the system. The paper suggests a systematic framework for OTA update validation for connected–vehicles infotainment systems that supports the evaluation of OTA update integrity, installation reliability, software compatibility, functional correctness, and recovery performance. The framework also includes update package authentication, pre-installed package compatibility testing, installation monitoring, post-installation functional testing and rollback verification in different network settings and failure scenarios. The evaluation methodology takes into account important metrics such as update success rate, installation time, failure detection rate, rollback success rate, recovery time, and functional test coverage. Comparative evaluation includes comparing the results with the traditional validation methods to look for improvements in failure detection, recovery effectiveness and overall update reliability. The proposed framework seeks to enable systematic and repeatable validation of automotive OTA updates, which will enhance the quality of their software, the operational resilience of the vehicle and the dependability of the connected-vehicle infotainment system.
References
[1] Halder, S., Ghosal, A., & Conti, M. (2020). Secure over-the-air software updates in connected vehicles: A survey. Computer Networks, 178, 107343.
[2] Mahmood, S., Nguyen, H. N., & Shaikh, S. A. (2022). Systematic threat assessment and security testing of automotive over-the-air (OTA) updates. Vehicular Communications, 35, 100468.
[3] Kirk, R., Nguyen, H. N., Bryans, J., Shaikh, S. A., & Wartnaby, C. (2023). A formal framework for security testing of automotive over-the-air update systems. Journal of Logical and Algebraic Methods in Programming, 130, 100812.
[4] Ghosal, A., Halder, S., & Conti, M. (2022). Secure over-the-air software update for connected vehicles. Computer Networks. https://doi.org/10.1016/j.comnet.2022.109394
[5] Bazzi, A., Shaout, A., & Ma, D. (2023). MT-SOTA: A merkle-tree-based approach for secure software updates over the air in automotive systems. Applied Sciences, 13(16), 9397.
[6] Lamssaggad, A., Benamar, N., Hafid, A. S., & Msahli, M. (2021). A survey on the current security landscape of intelligent transportation systems. IEEE Access, 9, 9180–9208. https://doi.org/10.1109/ACCESS.2021.3050038
[7] Luo, F., Zhang, X., Yang, Z., Jiang, Y., Wang, J., Wu, M., & Feng, W. (2022). Cybersecurity testing for automotive domain: A survey. Sensors, 22(23), 9211.
[8] Kuppusamy, T. K., DeLong, L. A., & Cappos, J. (2018). Uptane: Security and customizability of software updates for vehicles. IEEE vehicular technology magazine, 13(1), 66-73.
[9] Checkoway, S., McCoy, D., Kantor, B., Anderson, D., Shacham, H., Savage, S., ... & Kohno, T. (2011). Comprehensive experimental analyses of automotive attack surfaces. In 20th USENIX security symposium (USENIX Security 11).
[10] Koscher, K., Czeskis, A., Roesner, F., Patel, S., Kohno, T., Checkoway, S., ... & Savage, S. (2010, May). Experimental security analysis of a modern automobile. In 2010 IEEE symposium on security and privacy (pp. 447-462). IEEE.
[11] Miller, C., & Valasek, C. (2015). Remote explo itation of an unaltered passenger vehicle. Black Hat USA, 2015(S 91), 1-91.
[12] Regenscheid, A. (2017). Platform firmware resiliency guidelines (No. NIST Special Publication (SP) 800-193 (Draft)). National Institute of Standards and Technology.
[13] Cappos, J., Samuel, J., Baker, S., & Hartman, J. H. (2008, October). A look in the mirror: Attacks on package managers. In Proceedings of the 15th ACM conference on Computer and communications security (pp. 565-574).
[14] Samuel, J., Mathewson, N., Cappos, J., & Dingledine, R. (2010, October). Survivable key compromise in software update systems. In Proceedings of the 17th ACM conference on Computer and communications security (pp. 61-72).
[15] What is OTA in automotive? Over the air updates explained., Rambus, 2022. Online. https://www.rambus.com/blogs/ota-updates-explained/
[16] Fuchs, A., Krauß, C., & Repp, J. (2016, May). Advanced remote firmware upgrades using TPM 2.0. In IFIP international conference on ICT systems security and privacy protection (pp. 276-289). Cham: Springer International Publishing.
[17] Cooper, D. A., Polk, W. T., Regenscheid, A. R., & Souppaya, M. P. (2011). SP 800-147. BIOS Protection Guidelines.
[18] Shavit, M., Gryc, A., & Miucic, R. (2007, August). Firmware update over the air (FOTA) for automotive industry. In 14th Asia Pacific Automotive Engineering Conference.
[19] Nasr, A., Ghoneima, M., & Abdullah, B. A. (2022, March). Automotive software self reprogramming OTA. In 2022 13th International Conference on Electrical Engineering (ICEENG) (pp. 76-80). IEEE.
[20] Villegas, M. M., & Astudillo, H. (2020). OTA updates mechanisms: a taxonomy and techniques catalog. In XXI Simposio Argentino de Ingeniería de Software (ASSE 2020)-JAIIO 49 (Modalidad virtual).
