xorgx304/pasta1.0

PASTA: Portable Automotive Security Testbed with Adaptability

PASTA1.0

PASTA:Portable Automotive Security Testbed with Adaptability, developed by Toyota InfoTechnology Center, is a platform based on non-proprietary technology, allowing researchers or engineers to freely construct in-vehicle networks. PASTA will contribute to accelerate research, education, and information sharing of vehicle cybersecurity as an open and handy platform which has typical physical attack surfaces.

Abstract

For accelerating the development of sophisticated driving-assist technologies such as automated driving, securing vehicles against cyberattacks is challenging. To promote the development of security-measurement methods, a company's electronic control unit (ECU) places tough restrictions on security analysis. In such circumstances, we need an environment that includes transparent ECUs with high adaptability. Ideally, anyone will be able to apply technology and evaluate that technology with ECUs. Simulating an actual vehicle through hardware is also required for assessing threats of cyberattacks. We need not only to provide an adaptable platform for developing measures for existing cybersecurity but also simulate any function in actual vehicles using white-box ECUs. In addition, to easily demonstrate and evaluate the applied security technique, it is important to make the environment portable. Considering these requirements, we propose the portable automotive security testbed with adaptability (PASTA), and give an example for evaluating it for proof of concept. PASTA has the possibility to contribute to a comprehensive development platform against vehicle cyberattacks.

Philosophy of PASTA

PASTA is designed and developed with the following philosophy:

• Open:
  • It must be based on non-proprietary technologies.
• Adaptable:
  • Users should be able to rewrite the firmware of ECUs, re-design the architecture and connect their own devices, for example.
• Safe:
  • There should be no real actuators; it can avoid incidents.
  • Such as wheels, brakes and window should be realized by simulator rather than the real things.
• Portable:
  • Platform is preferred to be small and portable so that users can study, research, and hack it anywhere. 

Presentations

• 情報セキュリティ研究会 (ISEC) (2018年度), ポータブルで拡張可能な自動車セキュリティ・テストベッドPASTAの開発(Japanese) (2018/9/7)

• Black Hat Europe 2018, PASTA: Portable Automotive Security Testbed with Adaptability (2018/12/5)

• S4x19, PASTA: PORTABLE AUTOMOTIVE SECURITY TESTBED WITH ADAPTABILITY (2019/1/15)

• Black Hat Asia 2019, PASTA: Portable Automotive Security Testbed with Adaptability (2019/3/28)

Contacts

• GitHub: pasta-auto
• Twitter: @pasta_auto
• Email: [email protected]

Note:

• Please kindly note that we may not be able to reply all the messages because of our limited resources.
• If you find a security vulnerability, do NOT open an issue. Please contact us via Email instead.
• These contacts are for PASTA, not for reporting security issues of Toyota vehicles.
• Please use GitHub to file issues and send pull requests.
• We will provide the latest information about PASTA via Twitter.
• If you are interested in joint research or asking us a presentation, please contact us via Email.

Acknowledgements

• This work has been supported by Toyota Motor Corporation.
• This project is a joint work with Yokohama National University.