Building Automotive Security on Internet Standards: an Integration of DNSSEC, DANE, and DANCE to Authenticate and Authorize In-Car Services

The automotive industry is undergoing a software-as-a-service transformation that enables software-defined functions and post-sale updates via cloud and vehicle-to-everything communication. Connectivity in cars introduces significant security challenges, as remote attacks on vehicles have become...

COVESA vsomeip 竞争条件问题漏洞

vsomeip is an open source implementation of a scalable service-oriented IP middleware from the Connected Vehicle Systems Alliance. A Competitive Conditions Issue vulnerability exists in COVESA vsomeip versions prior to 3.4.10 that stems from the inclusion of a competitive condition...