{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T04:13:07Z","timestamp":1750306387612,"version":"3.41.0"},"reference-count":42,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2015,12,2]],"date-time":"2015-12-02T00:00:00Z","timestamp":1449014400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"TerraSwarm Research Center"},{"name":"STARnet phase of the Focus Center Research Program"},{"name":"Industrial Cyber-Physical Systems Center"},{"DOI":"10.13039\/100000006","name":"Office of Naval Research","doi-asserted-by":"crossref","award":["N00014-14-1-0815 and N00014-14-1-0816"],"award-info":[{"award-number":["N00014-14-1-0815 and N00014-14-1-0816"]}],"id":[{"id":"10.13039\/100000006","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Semiconductor Research Corporation program sponsored by MARCO and DARPA"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Des. Autom. Electron. Syst."],"published-print":{"date-parts":[[2015,12,2]]},"abstract":"<jats:p>In this article, we address both security and safety requirements and solve security-aware design problems for the controller area network (CAN) protocol and time division multiple access (TDMA)-based protocols. To provide insights and guidelines for other similar security problems with limited resources and strict timing constraints, we propose a general security-aware design methodology to address security with other design constraints in a holistic framework and optimize design objectives. The security-aware design methodology is further applied to solve a security-aware design problem for vehicle-to-vehicle (V2V) communications with dedicated short-range communication (DSRC) technology. Experimental results demonstrate the effectiveness of our approaches in system design without violating design constraints and indicate that it is necessary to consider security together with other metrics during design stages.<\/jats:p>","DOI":"10.1145\/2803174","type":"journal-article","created":{"date-parts":[[2015,12,4]],"date-time":"2015-12-04T13:43:07Z","timestamp":1449236587000},"page":"1-26","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":38,"title":["Security-Aware Design Methodology and Optimization for Automotive Systems"],"prefix":"10.1145","volume":"21","author":[{"given":"Chung-Wei","family":"Lin","sequence":"first","affiliation":[{"name":"University of California, Berkeley, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bowen","family":"Zheng","sequence":"additional","affiliation":[{"name":"University of California, Riverside"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qi","family":"Zhu","sequence":"additional","affiliation":[{"name":"University of California, Riverside"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alberto","family":"Sangiovanni-Vincentelli","sequence":"additional","affiliation":[{"name":"University of California, Berkeley"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2015,12,2]]},"reference":[{"key":"e_1_2_1_1_1","unstructured":"F. Ahmed-Zaid F. Bai S. Bai C. Basnayake B. Bellur S. Brovold G. Brown L. Caminiti D. Cunningham H. Elzein K. Hong J. Ivan D. Jiang J. Kenney H. Krishnan J. Lovell M. Maile D. Masselink E. Mcglohon P. Mudalige Z. Popovic V. Rai J. Stinnett L. Tellis K. Tirey and S. Vansickle. 2011. Vehicle safety communications\u2014Applications (VSC-A). Report No. DOT HS 811 492A (Sept. 2011). US. Department of Transportation National Highway Traffic Safety Administration.  F. Ahmed-Zaid F. Bai S. Bai C. Basnayake B. Bellur S. Brovold G. Brown L. Caminiti D. Cunningham H. Elzein K. Hong J. Ivan D. Jiang J. Kenney H. Krishnan J. Lovell M. Maile D. Masselink E. Mcglohon P. Mudalige Z. Popovic V. Rai J. Stinnett L. Tellis K. Tirey and S. Vansickle. 2011. Vehicle safety communications\u2014Applications (VSC-A). Report No. DOT HS 811 492A (Sept. 2011). US. Department of Transportation National Highway Traffic Safety Administration."},{"key":"e_1_2_1_2_1","unstructured":"Bosch. 1991. CAN specification (Version 2.0). Robert Bosch GmbH.  Bosch. 1991. CAN specification (Version 2.0). Robert Bosch GmbH."},{"key":"e_1_2_1_3_1","unstructured":"Bosch. 2011. CAN with flexible data-rate. White Paper (Version 1.1). Robert Bosch GmbH.  Bosch. 2011. CAN with flexible data-rate. White Paper (Version 1.1). Robert Bosch GmbH."},{"volume-title":"Proceedings of the USENIX Conference on Security.","author":"Checkoway S.","key":"e_1_2_1_4_1","unstructured":"S. Checkoway , D. Mccoy , B. Kantor , D. Anderson , H. Shacham , S. Savage , K. Koscher , A. Czeskis , F. Roesner , and T. Kohno . 2011. Comprehensive experimental analyses of automotive attack surfaces . In Proceedings of the USENIX Conference on Security. S. Checkoway, D. Mccoy, B. Kantor, D. Anderson, H. Shacham, S. Savage, K. Koscher, A. Czeskis, F. Roesner, and T. Kohno. 2011. Comprehensive experimental analyses of automotive attack surfaces. In Proceedings of the USENIX Conference on Security."},{"volume-title":"Proceedings of the Integrated Communications, Navigation and Surveillance Conference (ICNS'12)","author":"De Cerchio R.","key":"e_1_2_1_5_1","unstructured":"R. De Cerchio and C. Riley . 2012. Aircraft systems cyber security . In Proceedings of the Integrated Communications, Navigation and Surveillance Conference (ICNS'12) , 1--12. R. De Cerchio and C. Riley. 2012. Aircraft systems cyber security. In Proceedings of the Integrated Communications, Navigation and Surveillance Conference (ICNS'12), 1--12."},{"volume-title":"FlexRay communications system protocol specification (Version 3.0.1)","year":"2010","key":"e_1_2_1_6_1","unstructured":"FlexRay. 2010. FlexRay communications system protocol specification (Version 3.0.1) . FlexRay Consortium . ( Oct. 2010 ). FlexRay. 2010. FlexRay communications system protocol specification (Version 3.0.1). FlexRay Consortium. (Oct. 2010)."},{"volume-title":"Proceedings of the IEEE International Conference on Smart Grid Communications (SmartGridComm'12)","author":"Gong S.","key":"e_1_2_1_7_1","unstructured":"S. Gong , Z. Zhang , M. Trinkle , A. D. Dimitrovski , and H. Li . 2012. GPS spoofing based time stamp attack on real time wide area monitoring in smart grid . In Proceedings of the IEEE International Conference on Smart Grid Communications (SmartGridComm'12) . 300--305. S. Gong, Z. Zhang, M. Trinkle, A. D. Dimitrovski, and H. Li. 2012. GPS spoofing based time stamp attack on real time wide area monitoring in smart grid. In Proceedings of the IEEE International Conference on Smart Grid Communications (SmartGridComm'12). 300--305."},{"volume-title":"Proceedings of the International Conference on Cryptology and Network Security. 185--200","author":"Groza B.","key":"e_1_2_1_8_1","unstructured":"B. Groza , P.-S. Murvay , A. Van Herrewege , and I. Verbauwhede . 2012. LiBrA-CAN: A lightweight broadcast authentication protocol for controller area networks . In Proceedings of the International Conference on Cryptology and Network Security. 185--200 . B. Groza, P.-S. Murvay, A. Van Herrewege, and I. Verbauwhede. 2012. LiBrA-CAN: A lightweight broadcast authentication protocol for controller area networks. In Proceedings of the International Conference on Cryptology and Network Security. 185--200."},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2008.31"},{"key":"e_1_2_1_10_1","unstructured":"J. Harding G. Powell R. Yoon J. Fikentscher C. Doyle D. Sade M. Lukuc J. Simons and J. Wang. 2014. Vehicle-to-vehicle communications: Readiness of V2V technology for application. Report No. DOT HS 812 014 (August 2014). US Department of Transportation National Highway Traffic Safety Administration.  J. Harding G. Powell R. Yoon J. Fikentscher C. Doyle D. Sade M. Lukuc J. Simons and J. Wang. 2014. Vehicle-to-vehicle communications: Readiness of V2V technology for application. Report No. DOT HS 812 014 (August 2014). US Department of Transportation National Highway Traffic Safety Administration."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87698-4_21"},{"key":"e_1_2_1_12_1","first-page":"2","article-title":"IEEE standard for wireless access in vehicular environments security services for applications and management messages","volume":"1609","author":"IEEE.","year":"2013","unstructured":"IEEE. 2013 . IEEE standard for wireless access in vehicular environments security services for applications and management messages . IEEE Std 1609 . 2 - 2013 (Revision of IEEE Std 1609.2-2006) (April 2013). IEEE. 2013. IEEE standard for wireless access in vehicular environments security services for applications and management messages. IEEE Std 1609.2-2013 (Revision of IEEE Std 1609.2-2006) (April 2013).","journal-title":"IEEE Std"},{"key":"e_1_2_1_13_1","first-page":"7","article-title":"Dedicated short-range communications (DSRC) standards in the United States","volume":"99","author":"Kenney J. B.","year":"2007","unstructured":"J. B. Kenney . 2007 . Dedicated short-range communications (DSRC) standards in the United States . Proc. IEEE 99 , 7 (July 2007), 1162--1182. J. B. Kenney. 2007. Dedicated short-range communications (DSRC) standards in the United States. Proc. IEEE 99, 7 (July 2007), 1162--1182.","journal-title":"Proc. IEEE"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.49"},{"volume-title":"Proceedings of the IEEE Intelligent Vehicles Symposium (IV'11)","author":"Kleberger P.","key":"e_1_2_1_15_1","unstructured":"P. Kleberger , T. Olovsson , and E. Jonsson . 2011. Security aspects of the in-vehicle network in the connected car . In Proceedings of the IEEE Intelligent Vehicles Symposium (IV'11) . 528--533. P. Kleberger, T. Olovsson, and E. Jonsson. 2011. Security aspects of the in-vehicle network in the connected car. In Proceedings of the IEEE Intelligent Vehicles Symposium (IV'11). 528--533."},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/2228360.2228402"},{"key":"e_1_2_1_18_1","doi-asserted-by":"crossref","unstructured":"H. Krishnan and A. Weimerskirch. 2011. Verify-on-demand\u2014A practical and scalable approach for broadcast authentication in vehicle-to-vehicle communication. SAE Int. J. Passenger Cars\u2014Mechani. Syst. 4 1 (June 2011) 536--546.  H. Krishnan and A. Weimerskirch. 2011. Verify-on-demand\u2014A practical and scalable approach for broadcast authentication in vehicle-to-vehicle communication. SAE Int. J. Passenger Cars\u2014Mechani. Syst. 4 1 (June 2011) 536--546.","DOI":"10.4271\/2011-01-0584"},{"volume-title":"Proceedings of the IEEE International Conference on e-Health Networking Applications and Services (Healthcom'11)","author":"Li C.","key":"e_1_2_1_19_1","unstructured":"C. Li , A. Raghunathan , and N. K. Jha . 2011. Hijacking an insulin pump: Security attacks and defenses for a diabetes therapy system . In Proceedings of the IEEE International Conference on e-Health Networking Applications and Services (Healthcom'11) . 150--156. C. Li, A. Raghunathan, and N. K. Jha. 2011. Hijacking an insulin pump: Security attacks and defenses for a diabetes therapy system. In Proceedings of the IEEE International Conference on e-Health Networking Applications and Services (Healthcom'11). 150--156."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecurity.2012.7"},{"volume-title":"Proceedings of the IEEE\/ACM International Conference on Computer-Aided Design (ICCAD'13)","author":"Lin C.-W.","key":"e_1_2_1_21_1","unstructured":"C.-W. Lin , Q. Zhu , C. Phung , and A. L. Sangiovanni-Vincentelli . 2013. Security-aware mapping for CAN-based real-time distributed automotive systems . In Proceedings of the IEEE\/ACM International Conference on Computer-Aided Design (ICCAD'13) . 115--121. C.-W. Lin, Q. Zhu, C. Phung, and A. L. Sangiovanni-Vincentelli. 2013. Security-aware mapping for CAN-based real-time distributed automotive systems. In Proceedings of the IEEE\/ACM International Conference on Computer-Aided Design (ICCAD'13). 115--121."},{"volume-title":"Proceedings of the IEEE\/ACM International Conference on Computer-Aided Design (ICCAD'14)","author":"Lin C.-W.","key":"e_1_2_1_22_1","unstructured":"C.-W. Lin , Q. Zhu , and A. L. Sangiovanni-Vincentelli . 2014. Security-aware mapping for TDMA-based real-time distributed systems . In Proceedings of the IEEE\/ACM International Conference on Computer-Aided Design (ICCAD'14) . 24--31. C.-W. Lin, Q. Zhu, and A. L. Sangiovanni-Vincentelli. 2014. Security-aware mapping for TDMA-based real-time distributed systems. In Proceedings of the IEEE\/ACM International Conference on Computer-Aided Design (ICCAD'14). 24--31."},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.76"},{"volume-title":"Proceedings of the IEEE Vehicular Technology Conference (VTC'08)","author":"Nilsson D. K.","key":"e_1_2_1_24_1","unstructured":"D. K. Nilsson , U. E. Larson , and E. Jonsson . 2008. Efficient in-vehicle delayed data authentication based on compound message authentication codes . In Proceedings of the IEEE Vehicular Technology Conference (VTC'08) . 1--5. D. K. Nilsson, U. E. Larson, and E. Jonsson. 2008. Efficient in-vehicle delayed data authentication based on compound message authentication codes. In Proceedings of the IEEE Vehicular Technology Conference (VTC'08). 1--5."},{"volume-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS'01)","author":"Perrig A.","key":"e_1_2_1_25_1","unstructured":"A. Perrig , R. Canetti , D. Song , and J. D. Tygar . 2001. Efficient and secure source authentication for multicast . In Proceedings of the Network and Distributed System Security Symposium (NDSS'01) . 35--46. A. Perrig, R. Canetti, D. Song, and J. D. Tygar. 2001. Efficient and secure source authentication for multicast. In Proceedings of the Network and Distributed System Security Symposium (NDSS'01). 35--46."},{"volume-title":"Proceedings of the IEEE Symposium on Security and Privacy (SP'00)","author":"Perrig A.","key":"e_1_2_1_26_1","unstructured":"A. Perrig , R. Canetti , J. D. Tygar , and D. Song . 2000. Efficient authentication and signing of multicast streams over lossy channels . In Proceedings of the IEEE Symposium on Security and Privacy (SP'00) . 56--73. A. Perrig, R. Canetti, J. D. Tygar, and D. Song. 2000. Efficient authentication and signing of multicast streams over lossy channels. In Proceedings of the IEEE Symposium on Security and Privacy (SP'00). 56--73."},{"volume-title":"Proceedings of the USENIX Conference on Security.","author":"Rouf I.","key":"e_1_2_1_27_1","unstructured":"I. Rouf , R. Miller , H. Mustafa , T. Taylor , S. Oh , W. Xu , M. Gruteser , W. Trappe , and I. Seskar . 2010. Security and privacy vulnerabilities of in-car wireless networks: A tire pressure monitoring system case study . In Proceedings of the USENIX Conference on Security. I. Rouf, R. Miller, H. Mustafa, T. Taylor, S. Oh, W. Xu, M. Gruteser, W. Trappe, and I. Seskar. 2010. Security and privacy vulnerabilities of in-car wireless networks: A tire pressure monitoring system case study. In Proceedings of the USENIX Conference on Security."},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2013.27"},{"key":"e_1_2_1_29_1","volume-title":"Dedicated short range communications (DSRC) message set dictionary. SAE Standard J2735 (April","author":"AE.","year":"2015","unstructured":"S AE. 2015. Dedicated short range communications (DSRC) message set dictionary. SAE Standard J2735 (April 2015 ). SAE. 2015. Dedicated short range communications (DSRC) message set dictionary. SAE Standard J2735 (April 2015)."},{"key":"e_1_2_1_30_1","volume-title":"Time-triggered ethernet. SAE Standard AS6802 (Nov","author":"AE.","year":"2011","unstructured":"S AE. 2011a. Time-triggered ethernet. SAE Standard AS6802 (Nov . 2011 ). SAE. 2011a. Time-triggered ethernet. SAE Standard AS6802 (Nov. 2011)."},{"key":"e_1_2_1_31_1","volume-title":"TTP communication protocol. SAE Standard AS6003 (Feb","author":"AE.","year":"2011","unstructured":"S AE. 2011b. TTP communication protocol. SAE Standard AS6003 (Feb . 2011 ). SAE. 2011b. TTP communication protocol. SAE Standard AS6003 (Feb. 2011)."},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2011.2162209"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2006.890107"},{"volume-title":"Proceedings of the IEEE International Conference on Industrial Informatics (INDIN'14)","author":"Seifert S.","key":"e_1_2_1_34_1","unstructured":"S. Seifert and R. Obermaisser . 2014. Secure automotive gateway\u2014Secure communication for future cars . In Proceedings of the IEEE International Conference on Industrial Informatics (INDIN'14) . 213--220. S. Seifert and R. Obermaisser. 2014. Secure automotive gateway\u2014Secure communication for future cars. In Proceedings of the IEEE International Conference on Industrial Informatics (INDIN'14). 213--220."},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1278480.1278484"},{"volume-title":"Proceedings of the Workshop on Embedded Security in Cars.","author":"Van Herrewege A.","key":"e_1_2_1_36_1","unstructured":"A. Van Herrewege , D. Singelee , and I. Verbauwhede . 2011. CANAuth\u2014A simple, backward compatible broadcast authentication protocol for CAN bus . In Proceedings of the Workshop on Embedded Security in Cars. A. Van Herrewege, D. Singelee, and I. Verbauwhede. 2011. CANAuth\u2014A simple, backward compatible broadcast authentication protocol for CAN bus. In Proceedings of the Workshop on Embedded Security in Cars."},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/2593069.2593095"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/ISORC.2011.14"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-31912-9_20"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/MDT.2010.25"},{"volume-title":"Proceedings of the Military Communications Conference (MILCOM'12)","author":"Zeng Q.","key":"e_1_2_1_41_1","unstructured":"Q. Zeng , H. Li , and L. Qian . 2012. GPS spoofing attack on time synchronization in wireless networks and detection scheme design . In Proceedings of the Military Communications Conference (MILCOM'12) . 1--5. Q. Zeng, H. Li, and L. Qian. 2012. GPS spoofing attack on time synchronization in wireless networks and detection scheme design. In Proceedings of the Military Communications Conference (MILCOM'12). 1--5."},{"key":"e_1_2_1_42_1","first-page":"4","article-title":"Optimizing the software architecture for extensibility in hard real-time distributed systems","volume":"6","author":"Zhu Q.","year":"2010","unstructured":"Q. Zhu , Y. Yang , M. Di Natale , E. Scholte , and A. L. Sangiovanni-Vincentelli . 2010 . Optimizing the software architecture for extensibility in hard real-time distributed systems . IEEE Trans. Indust. Informa. 6 , 4 (Nov. 2010), 621--636. Q. Zhu, Y. Yang, M. Di Natale, E. Scholte, and A. L. Sangiovanni-Vincentelli. 2010. Optimizing the software architecture for extensibility in hard real-time distributed systems. IEEE Trans. Indust. Informa. 6, 4 (Nov. 2010), 621--636.","journal-title":"IEEE Trans. Indust. Informa."}],"container-title":["ACM Transactions on Design Automation of Electronic Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2803174","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2803174","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T05:07:09Z","timestamp":1750223229000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2803174"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2015,12,2]]},"references-count":42,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2015,12,2]]}},"alternative-id":["10.1145\/2803174"],"URL":"https:\/\/doi.org\/10.1145\/2803174","relation":{},"ISSN":["1084-4309","1557-7309"],"issn-type":[{"type":"print","value":"1084-4309"},{"type":"electronic","value":"1557-7309"}],"subject":[],"published":{"date-parts":[[2015,12,2]]},"assertion":[{"value":"2015-01-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2015-07-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2015-12-02","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}