{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,29]],"date-time":"2026-09-29T19:34:11Z","timestamp":1790710451140,"version":"4.1.0"},"reference-count":35,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2017,4,6]],"date-time":"2017-04-06T00:00:00Z","timestamp":1491436800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Hercules Foundation","award":["AKUL\/11\/19"],"award-info":[{"award-number":["AKUL\/11\/19"]}]},{"name":"European Commission through the ICT","award":["FP7-ICT-2011-284833 PUFFIN"],"award-info":[{"award-number":["FP7-ICT-2011-284833 PUFFIN"]}]},{"name":"Research Council KU Leuven: GOA TENSE","award":["GOA\/11\/007"],"award-info":[{"award-number":["GOA\/11\/007"]}]},{"name":"POSDRU","award":["107\/1.5\/S\/77265"],"award-info":[{"award-number":["107\/1.5\/S\/77265"]}]},{"name":"Flemish Government through FWO","award":["G.0550.12N"],"award-info":[{"award-number":["G.0550.12N"]}]},{"name":"POSDRU Romania","award":["2007-2013"],"award-info":[{"award-number":["2007-2013"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Embed. Comput. Syst."],"published-print":{"date-parts":[[2017,8,31]]},"abstract":"<jats:p>Despite realistic concerns, security is still absent from vehicular buses such as the widely used Controller Area Network (CAN). We design an efficient protocol based on efficient symmetric primitives, taking advantage of two innovative procedures: splitting keys between nodes and mixing authentication tags. This results in a higher security level when compromised nodes are in the minority, a realistic assumption for automotive networks. Experiments are performed on state-of-the-art Infineon TriCore controllers, contrasted with low-end Freescale S12X cores, while simulations are provided for the recently released CAN-FD standard. To gain compatibility with existent networks, we also discuss a solution based on CAN+.<\/jats:p>","DOI":"10.1145\/3056506","type":"journal-article","created":{"date-parts":[[2017,4,6]],"date-time":"2017-04-06T12:50:07Z","timestamp":1491483007000},"page":"1-28","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":46,"title":["LiBrA-CAN"],"prefix":"10.1145","volume":"16","author":[{"given":"Bogdan","family":"Groza","sequence":"first","affiliation":[{"name":"Politehnica Timisoara, Timisoara, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stefan","family":"Murvay","sequence":"additional","affiliation":[{"name":"Politehnica Timisoara, Timisoara, Romania"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Anthony Van","family":"Herrewege","sequence":"additional","affiliation":[{"name":"KU Leuven, Heverlee, Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ingrid","family":"Verbauwhede","sequence":"additional","affiliation":[{"name":"KU Leuven, Heverlee, Belgium"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2017,4,6]]},"reference":[{"key":"e_1_2_1_1_1","volume-title":"Proceedings of 9th Embedded Security in Cars Conference (ESCAR\u201909)","author":"Bar-El H.","year":"2009","unstructured":"H. Bar-El . 2009 . Intra-vehicle information security framework . In Proceedings of 9th Embedded Security in Cars Conference (ESCAR\u201909) . H. Bar-El. 2009. Intra-vehicle information security framework. In Proceedings of 9th Embedded Security in Cars Conference (ESCAR\u201909)."},{"key":"e_1_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-06644-8_11"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44987-6_27"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-10181-1_15"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/INFCOM.1999.751457"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1049\/el:19991289"},{"key":"e_1_2_1_7_1","volume-title":"Proceedings of the IEEE Symposium on Security and Privacy. IEEE, 197--213","author":"Chan H.","unstructured":"H. Chan , A. Perrig , and D. Song . 2003. Random key predistribution schemes for sensor networks . In Proceedings of the IEEE Symposium on Security and Privacy. IEEE, 197--213 . H. Chan, A. Perrig, and D. Song. 2003. Random key predistribution schemes for sensor networks. In Proceedings of the IEEE Symposium on Security and Privacy. IEEE, 197--213."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1016\/0012-365X(90)90322-9"},{"key":"e_1_2_1_9_1","unstructured":"S. Checkoway D. McCoy B. Kantor D. Anderson H. Shacham S. Savage K. Koscher A. Czeskis Fr. Roesner and T. Kohno. 2011. Comprehensive experimental analyses of automotive attack surfaces. In USENIX Security.  S. Checkoway D. McCoy B. Kantor D. Anderson H. Shacham S. Savage K. Koscher A. Czeskis Fr. Roesner and T. Kohno. 2011. Comprehensive experimental analyses of automotive attack surfaces. In USENIX Security."},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48329-2_40"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-35404-5_15"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2013.2239301"},{"key":"e_1_2_1_13_1","volume-title":"Proceedings of the 10th International Conference on Embedded Security in Cars (ESCAR\u201912)","author":"Hartkopp O.","unstructured":"O. Hartkopp , C. Reuber , and R. Schilling . 2012. Macan-message authenticated can . In Proceedings of the 10th International Conference on Embedded Security in Cars (ESCAR\u201912) . O. Hartkopp, C. Reuber, and R. Schilling. 2012. Macan-message authenticated can. In Proceedings of the 10th International Conference on Embedded Security in Cars (ESCAR\u201912)."},{"key":"e_1_2_1_14_1","volume-title":"Proceedings of the 2nd Workshop on Embedded Systems Security (WESS\u201907)","author":"Hoppe T.","unstructured":"T. Hoppe and J. Dittman . 2007. Sniffing\/replay attacks on CAN Buses: A simulated attack on the electric window lift classified using an adapted CERT taxonomy . In Proceedings of the 2nd Workshop on Embedded Systems Security (WESS\u201907) . T. Hoppe and J. Dittman. 2007. Sniffing\/replay attacks on CAN Buses: A simulated attack on the electric window lift classified using an adapted CERT taxonomy. In Proceedings of the 2nd Workshop on Embedded Systems Security (WESS\u201907)."},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-87698-4_21"},{"key":"e_1_2_1_16_1","first-page":"11898","author":"International Organization for Standardization","year":"2003","unstructured":"International Organization for Standardization 2003 . ISO 11898 - 11891 . Road Vehicles - Controller Area Network (CAN) - Part 1: Controller Area Network Data Link Layer and Medium Access Control. International Organization for Standardization. International Organization for Standardization 2003. ISO 11898-1. Road Vehicles - Controller Area Network (CAN) - Part 1: Controller Area Network Data Link Layer and Medium Access Control. International Organization for Standardization.","journal-title":"ISO"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2010.34"},{"key":"e_1_2_1_18_1","volume-title":"Proceedings of the 14th International Conference on Embedded Security in Cars (ESCAR\u201914)","author":"Kurachi R.","unstructured":"R. Kurachi , Y. Matsubara , H. Takada , N. Adachi , Y. Miyashita , and S. Horihata . 2014. CaCAN - Centralized authentication system in CAN (controller area network) . In Proceedings of the 14th International Conference on Embedded Security in Cars (ESCAR\u201914) . R. Kurachi, Y. Matsubara, H. Takada, N. Adachi, Y. Miyashita, and S. Horihata. 2014. CaCAN - Centralized authentication system in CAN (controller area network). In Proceedings of the 14th International Conference on Embedded Security in Cars (ESCAR\u201914)."},{"key":"e_1_2_1_19_1","volume-title":"Proceedings of the Keynote Speech 5th IEEE International Workshop on Factory Communication Systems","author":"Leohold J.","year":"2004","unstructured":"J. Leohold . 2004 . Communication requirements for automotive systems . In Proceedings of the Keynote Speech 5th IEEE International Workshop on Factory Communication Systems . Vienna University of Technology. J. Leohold. 2004. Communication requirements for automotive systems. In Proceedings of the Keynote Speech 5th IEEE International Workshop on Factory Communication Systems. Vienna University of Technology."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1109\/LES.2014.2354011"},{"key":"e_1_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1007\/BFb0055750"},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/381677.381696"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2000.848446"},{"key":"e_1_2_1_24_1","unstructured":"Robert BOSCH GmbH 1991. CAN Specification Version 2.0. Robert BOSCH GmbH.  Robert BOSCH GmbH 1991. CAN Specification Version 2.0. Robert BOSCH GmbH."},{"key":"e_1_2_1_25_1","unstructured":"Robert BOSCH GmbH 2012. CAN with Flexible Data-Rate Version 1.0. Robert BOSCH GmbH.  Robert BOSCH GmbH 2012. CAN with Flexible Data-Rate Version 1.0. Robert BOSCH GmbH."},{"key":"e_1_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-010-9096-4"},{"key":"e_1_2_1_27_1","first-page":"332","article-title":"Sequences of games: A tool for taming complexity in security proofs","volume":"2004","author":"Shoup V.","year":"2004","unstructured":"V. Shoup . 2004 . Sequences of games: A tool for taming complexity in security proofs . IACR Cryptology ePrint Archive 2004 (2004), 332 . V. Shoup. 2004. Sequences of games: A tool for taming complexity in security proofs. IACR Cryptology ePrint Archive 2004 (2004), 332.","journal-title":"IACR Cryptology ePrint Archive"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSNW.2013.6615528"},{"key":"e_1_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2009.5270342"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1873548.1873558"},{"key":"e_1_2_1_32_1","volume-title":"Proceedings of the 9th Embedded Security in Cars Conference.","author":"Herrewege A. Van","unstructured":"A. Van Herrewege , D. Singelee , and I. Verbauwhede . 2011. CANAuth-A simple, backward compatible broadcast authentication protocol for CAN bus . In Proceedings of the 9th Embedded Security in Cars Conference. A. Van Herrewege, D. Singelee, and I. Verbauwhede. 2011. CANAuth-A simple, backward compatible broadcast authentication protocol for CAN bus. In Proceedings of the 9th Embedded Security in Cars Conference."},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/IOT.2014.7030108"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-28428-1_6"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/TITS.2014.2351612"},{"key":"e_1_2_1_36_1","volume-title":"Proceedings of Design, Automation 8 Test in Europe Conference 8 Exhibition (DATE). IEEE, 1088--1093","author":"Ziermann T.","unstructured":"T. Ziermann , S. Wildermann , and J. Teich . 2009. CAN+: A new backward-compatible Controller Area Network (CAN) protocol with up to 16x higher data rates . In Proceedings of Design, Automation 8 Test in Europe Conference 8 Exhibition (DATE). IEEE, 1088--1093 . T. Ziermann, S. Wildermann, and J. Teich. 2009. CAN+: A new backward-compatible Controller Area Network (CAN) protocol with up to 16x higher data rates. In Proceedings of Design, Automation 8 Test in Europe Conference 8 Exhibition (DATE). IEEE, 1088--1093."}],"container-title":["ACM Transactions on Embedded Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3056506","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3056506","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:03:13Z","timestamp":1750215793000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3056506"}},"subtitle":["Lightweight Broadcast Authentication for Controller Area Networks"],"short-title":[],"issued":{"date-parts":[[2017,4,6]]},"references-count":35,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2017,8,31]]}},"alternative-id":["10.1145\/3056506"],"URL":"https:\/\/doi.org\/10.1145\/3056506","relation":{},"ISSN":["1539-9087","1558-3465"],"issn-type":[{"value":"1539-9087","type":"print"},{"value":"1558-3465","type":"electronic"}],"subject":[],"published":{"date-parts":[[2017,4,6]]},"assertion":[{"value":"2014-10-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2016-11-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2017-04-06","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}