Im using a canberry with raspberry pi. Is there any way possible to send two messages at the same time with same id and be received by the other raspberry without any particular chance of getting a middle man attack ? I mean if someone is using the same id would it possible to prevent this in your opinion ? I made a research and I cannot find anything particular to this.
\$\begingroup\$
\$\endgroup\$
1
-
1\$\begingroup\$ CAN bus has no "security", it was never intended for such applications. If someone has acccess to your CAN bus that shouldn't have it, then it's either because they are a burglar or because some IdiOticThing (IOT) has connected the bus to a live internet connection through firmware updates etc. In case of burglars, take the usual counter-measures such as locks. In case of IdioticThings, remove them from the CAN bus. \$\endgroup\$– LundinFeb 25, 2020 at 15:49
Add a comment
|
1 Answer
\$\begingroup\$
\$\endgroup\$
3
Not only can an attacker send a frame with the same ID as you, it can also make different receivers see the same frame as having different data, according to Ken Tindell who has developed the Janus Frame Attack. This depends on the receivers having different sampling points, which is against the CAN guidelines but could occur if the nodes are from different manufacturers.
-
\$\begingroup\$ is there a way to allow messages >7 on canbus? According to STN1100 you can use ATAL for this particular reason but is there something already implemented for CAN ? \$\endgroup\$ Feb 25, 2020 at 14:43
-
-
\$\begingroup\$ These kind of "hacks" are clever but at the same time rather silly. It isn't some TCP/IP thing... once you are live on a CAN bus, you can do pretty much whatever you want. My favourite "hack" being to cut the wires and replace a node with your own... \$\endgroup\$– LundinFeb 25, 2020 at 15:44