  With the increasing amount of interconnections between vehicles, the attack
surface of internal vehicle networks is rising steeply. Although these networks
are shielded against external attacks, they often do not have any internal
security to protect against malicious components or adversaries who breach the
network perimeter. To secure the in-vehicle network, all communicating
components must be authenticated, and only authorized components should be
allowed to send and receive messages. This is achieved using an authentication
framework. Cryptography is widely used to authenticate communicating parties
and provide secure communication channels (e.g., Internet communication).
However, the real-time performance requirements of in-vehicle networks restrict
the types of cryptographic algorithms and protocols that may be used. In
particular, asymmetric cryptography is computationally infeasible during
vehicle operation.
  In this work, we address the challenges of designing authentication protocols
for automotive systems. We present Lightweight Authentication for Secure
Automotive Networks (LASAN), a full lifecycle authentication approach. We
describe the core LASAN protocols and show how they protect the internal
vehicle network while complying with the real-time constraints and low
computational resources of this domain. Unlike previous work, we also explain
how this framework can be integrated into all aspects of the automotive
lifecycle, including manufacturing, vehicle maintenance, and software updates.
We evaluate LASAN in two different ways: First, we analyze the security
properties of the protocols using established protocol verification techniques
based on formal methods. Second, we evaluate the timing requirements of LASAN
and compare these to other frameworks using a new highly modular discrete event
simulator for in-vehicle networks, which we have developed for this evaluation.
