A survey on authentication schemes in VANETs for secured communication

Vehicular ad hoc networks (VANETs) are an emerging type of mobile ad hoc networks (MANETs) with robust applications in intelligent traffic management systems. VANET has drawn significant attention from the wireless communication research community and has become one of the most prominent research fields in intelligent transportation system (ITS) because of the potential to provide road safety and precautionary measures for the drivers and passengers. In this survey, we discussed the basic overview of the VANET from the architecture, communication methods, standards, characteristics, and VANET security services. Second, we presented the threats and attacks and the recent state-of-the-art methods of the VANET security services. Then, we comprehensively reviewed the authentication schemes that can protect vehicular networks from malicious nodes and fake messages. Third, we discussed the latest simulation tools and the performance of the authentication schemes in terms of simulation tools, which was followed by the VANET applications. Lastly, we identified the open research challenges and gave future research directions. In sum, this survey fills the gap of existing surveys and summarizes the latest research development. All the security attacks in VANETs and their related countermeasures are discussed with respect to ensuring secure communication. The authentication schemes and comprehensive applications were introduced and analyzed in detail. In addition, open research challenges and future research directions were issued.

https://www.mdpi.com/1424-8220/19/16/3589/pdf

A Survey of Security Services, Attacks, and Applications for Vehicular Ad Hoc Networks (VANETs).

Recently, vehicular ad hoc networks (VANETs) embark a great deal of attention in the area of wireless and communication technology and are becoming one of the prominent research areas in the intelligent transportation system (ITS) because they provide safety and precautionary measures to the drivers and passengers, respectively. VANETs are quite different from the mobile ad hoc networks (MANETs) in terms of characteristics, challenges, system architecture, and their application. In this paper, we summarize the recent state-of-the-art methods of VANETs by discussing their architecture, security, and challenges. Secondly, we discuss the detailed analysis of security schemes and the possible measures to provide secure communication in VANETs. Then, we comprehensively cover the authentication schemes, which is able to protect the vehicular network from malicious nodes and fake messages. Thus, it provides security in VANETs. Thirdly, we cover the mobility and network simulators, as well as other simulation tools, followed by the performance of authentication schemes. Finally, we discuss the comfort and safety applications of VANETs. In sum, this paper comprehensively covers the entire VANET system and its applications by filling the gaps of existing surveys and incorporating the latest trends in VANETs.

/pdf/a-comprehensive-survey-on-vanet-security-services-in-traffic-suj83twewu.pdf

A Comprehensive Survey on VANET Security Services in Traffic Management System

Driverless vehicle security: Challenges and future research opportunities

The ubiquitous connectivity between vehicles and smart transportation infrastructure will facilitate the information flow necessary for empowering smart service for efficient, safe, and eco-friendly transportation of people and goods. Although vehicular communication technologies is quickly advancing toward ubiquitously connected cars, the design of networking protocols for such vehicles is still in its infancy, facing multiple daunting challenges. In this article, we advocate for the use of the information-centric networking (ICN) paradigm for the full realization of connected cars, that is, the integration of both in-car computing systems and the car-to-digital world. We discuss the emerging challenges for the design of ICN-based protocols for connected cars, and we formally put the current debate into perspective regarding which transmission mode (broadcast or unicast) should prevail for the design of such protocols. Concerning this debate, we propose to classify recent and representative protocols in broadcast and unicast-oriented solutions, and we highlight the trade-offs of each approach. Based on a critical qualitative evaluation, we advocate that adaptive and hybrid approaches would perform better for information- centric connected cars. Hence, we provide a guideline for the further design of ICN-based protocols for connected cars. Finally, we discuss some future research directions that might be considered to advance the process of content distribution in connected cars.

Design Guidelines for Information-Centric Connected and Autonomous Vehicles

Authentication is an essential security requirement in safety-related vehicle-to-vehicle applications in VANETs TESLA is one of the most popular broadcast source authentication protocols proposed and standardized for this purpose Having strict time constraints and being prone to GPS synchronization errors make the analysis of this protocol challenging In this paper, we utilize a timed model checking approach based on timed colored Petri nets to model and verify TESLA considering its time-sensitive behaviors In this way, we show how neglecting timing aspects in protocol design and in protocol modelling can lead to successfully launched attacks and erroneous analyses respectively, and how its refinement can help improve the protocol's security Our work extends the problem of analyzing basic TESLA done in previous related works, to one in which TESLA is modelled and verified in a loose synchronization setting, which is the case in VANETs This new problem definition led to finding new attacks that are directly rooted in the sending times of packets We show what changes need to be made to TESLA so that its security property be preserved in a loose synchronization condition

Analysis of TESLA protocol in vehicular ad hoc networks using timed colored Petri nets

Vehicles are increasingly equipped with sensors for safety applications. Sharing information among vehicles can further improve the safety of the overall transportation environment. Enabling each vehicle to get the “right information at the right time” can be valuable to avoid dangerous situations. Information-Centric Networks (ICN) that use the notion of “named-objects” enable information dissemination regardless of location of the publisher or consumer. ICNs, especially supporting publish/subscribe capabilities, can provide timely delivery of the safety information. Our V-ICE architecture utilizes Roadside Units (RSUs) as infrastructure-based aggregators to communicate with vehicles generating notifications. RSUs disseminate information to vehicles that subscribe to the RSUs on their route. To evaluate the benefit of V-ICE, we demonstrate its use in propagating “black ice” warnings to vehicles that will likely be affected on their routes. The critical need is to deliver the information in a timely manner, providing other vehicles sufficient time to react. We build V-ICE's namespace and architecture using the roadways of Luxembourg as an example, and evaluate our approach with a trace-driven simulation using a 4-hour trace generated by SUMO. We show that V-ICE performs better than a server-based approach or even V2V broadcast, in terms of timeliness, relevance, and reduced network traffic.

Black ice! Using Information Centric Networks for timely vehicular safety information dissemination

Timely, flexible and accurate information dissemination can make a life-and-death difference in managing disasters. Complex command structures and information organization make such dissemination challenging. Thus, it is vital to have an architecture with appropriate naming frameworks, adaptable to the changing roles of participants, focused on content rather than network addresses. To address this, we propose POISE, a name-based and recipient-based publish/subscribe architecture for efficient content dissemination in disaster management. POISE proposes an information layer, improving on state-of-the-art Information-Centric Networking (ICN) solutions such as Named Data Networking (NDN) in two major ways: 1) support for complex graph-based namespaces, and 2) automatic name-based load-splitting. To capture the complexity and dynamicity of disaster response command chains and information flows, POISE proposes a graph-based naming framework, leveraged in a dissemination protocol which exploits information layer rendezvous points (RPs) that perform name expansions. For improved robustness and scalability, POISE allows load-sharing via multiple RPs each managing a subset of the namespace graph. However, excessive workload on one RP may turn it into a “hot spot”, thus impeding performance and reliability. To eliminate such traffic concentration, we propose an automatic load-splitting mechanism, consisting of a namespace graph partitioning complemented by a seamless, loss-less core migration procedure. Due to the nature of our graph partitioning and its complex objectives, off-the-shelf graph partitioning, e.g., METIS, is inadequate. We propose a hybrid partitioning solution, consisting of an initial and a refinement phase. Our simulation results show that POISE outperforms state-of-the-art solutions, demonstrating its effectiveness in timely delivery and load-sharing.

Graph-based Namespaces and Load Sharing for Efficient Information Dissemination in Disasters

Traditional means for contacting emergency responders depend critically on the availability of the 911 service to request help. Large-scale natural disasters such as hurricanes and earthquakes often result in overloading and sometimes failure of communication facilities. Affected citizens are increasingly using social media to obtain and disseminate information. Social media is not only being used to communicate with first responders but also for people to organically volunteer and seek help from each other, complementing the role of first responders. In this paper, we examine the use of Twitter during two major hurricanes in the U.S. in 2017. We find that there exists a sizable number of people with access to the Internet even in areas where 911 services were down, and they tweet disaster-related information including requests for help. Our analysis indicates that social media can potentially help in disaster management and improve outcomes.

The Evolving Nature of Disaster Management in the Internet and Social Media Era

Named Data Networking (NDN) has a number of forwarding behaviors, strategies, and protocols proposed by researchers and incorporated into the codebase, to enable exploiting the full flexibility and functionality that NDN offers. This additional functionality introduces complexity, motivating the need for a tool to help reason about and verify that basic properties of an NDN data plane are guaranteed. This paper proposes Name Space Analysis (NSA), a network verification framework to model and analyze NDN data planes. NSA can take as input one or more snapshots, each representing a particular state of the data plane. It then provides the verification result against specified properties. NSA builds on the theory of Header Space Analysis, and extends it in a number of ways, e.g., supporting variable-sized headers with flexible formats, introduction of name space functions, and allowing for name-based properties such as content reachability and name leakage-freedom. These important additions reflect the behavior and requirements of NDN, requiring modeling and verification foundations fundamentally different from those of traditional host-centric networks. For example, in name-based networks (NDN), host-to-content reachability is required, whereas the focus in host-centric networks (IP) is limited to host-to-host reachability. We have implemented NSA and identified a number of optimizations to enhance the efficiency of verification. Results from our evaluations, using snapshots from various synthetic test cases and the real-world NDN testbed, show how NSA is effective, in finding errors pertaining to content reachability, loops, and name leakage, has good performance, and is scalable.

https://dl.acm.org/doi/pdf/10.1145/3357150.3357406

Mohammad Jahanian

Papers

Analysis of TESLA protocol in vehicular ad hoc networks using timed colored Petri nets

Black ice! Using Information Centric Networks for timely vehicular safety information dissemination

Graph-based Namespaces and Load Sharing for Efficient Information Dissemination in Disasters

The Evolving Nature of Disaster Management in the Internet and Social Media Era

Name Space Analysis: Verification of Named Data Network Data Planes