A zero trust architecture for next generation automobiles

Abstract

Connected cars and autonomous cars are a subset of the next-generation automobile where the decision to drive is dependent and driven on data generated by various sensors connected to the automobile. These sensors constantly communicate with each other and the environment around them. With the assistance of these numerous sensors in automobiles, which have numerous vulnerabilities in them, individually or after being connected, we are maybe allowing the attacker to exploit these vulnerabilities to penetrate the network and can-do a considerable damage. To avoid such mishaps, we need to ensure that the data being transferred is based on the three pillars of security via confidentiality, integrity, and availability. To achieve that we propose architecture based on the Zero-trust model. We demonstrate that the attacks through malicious devices being connected to the network internally or externally are mitigated significantly by the use of the proposed zero-trust-based architecture. We simulated the attacks using a network simulation tool called NeSSi2 and captured packets using Wire shark, and we try to draw a contrast between the old conventional network and the new proposed network for the next-generation automobiles made using zero trust architecture. In our simulation, we used attacks like DDOS and packet sniffing so that the network will be loaded and verify how the packets are behaving before and after the attacks in both architectures.