Institut für Verteilte Systeme der Universität Ulm

Open Topics

Taken Topics

Completed Topics

“Comparing different vehicle architectures based on attack path analysis,” Bachelor's thesis, M. Wolf (Supervisor), Inst. of Distr. Sys., Ulm Univ., 2022 – Completed.

In this thesis you have to make attack path analyses on different internal vehicle network architectures and compare them based on which provides more security with regards attack paths. The first step would be creating multiple different architecture diagrams. Then you have to write a program, which reads files of a vehicle network topology, maps this to a list of entry point and target ECUs, and generates a list of all possible attack paths. To get a quick and early result, this list should be sorted by the number of hops over each gateway. The next step would be giving each entry point, gateway and connection a rating on how big the attack feasibility for this element is. Then, attack paths can be calculated - e.g. with the formula of the paper "ThreatSurf A method for automated Threat Surface assessment". At last, you have to decide on a criteria on how to rate the different topologies and compare them with it.

“The impact of privacy on smart traffic lights systems,” Master's thesis, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2021 – Completed.

With modern technologies in vehicles like the use of VANETS, other systems like traffic lights can be upgraded. A smart traffic light system (STLS) can adjust the green phases according to the number of vehicles driving towards it. An even more intelligent version, can even calculate the vehicles' trajectory and approximate arrival time, adjust the phase appropriately and then send a message to the vehicle with how long the green phase will last. With this information, the vehicle can then adjust the speed so it will does not need to break. The STLS would need certain information of the vehicles, like position, speed and size, which could lead to a privacy breach when the vehicle can be tracked. Therefore, privacy mechanisms need to be implemented, like the PET Differential Privacy. In this thesis, you should create a survey of possible PETs as well as look into possible scheduling algorithms for this scenario. Select a simple and a more complex algorithm for the traffic light control and compare them with the help of a simulation. Then choose at least one PET with which you will evaluate the impact of privacy on your STLS.

“The impact of privacy in Vehicular Edge Computing,” Bachelor's thesis, Master's thesis, Project, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2021 – Completed.

Modern vehicles will communicate with their environment using Vehicular Ad Hoc Networks (VANET) sending out regular status beacons or warning messages. Those are collected by Road Side Units (RSU) and will be combined with other data, like weather or information from the backend. With this data certain calculations can be performed (e.g. predicting the vehicle density). Furthermore, vehicles may transfer additional data, which is too resource intensive to calculate for themselves, to the RSUs . This process of transmitting data for expensive calculations is called Edge Computing. Currently a lot of work focuses on the benefits and possible applications of VEC, as well as on how PETS can be implemented. But little research is done how privacy techniques impact VEC and safety. In this project/thesis, you have to implement one or more PETS (depending on ECTS) in a VANET simulation framework (Plexe/Veins) and analyze its impact.

“Migrating the Maat framework to C++,” Projectarbeit, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2021 – Completed.

In this project, the student has to migrate the Maat Framework to C++. In the future, the controller logic of the Carrera demonstrator should run on automotive hardware which mainly supports C/C++. Therefore, a MBS is required which is not written in Java or Python. Maat, which was developed by van der Heijden to analyze the VeReMi dataset, is written in Java and only batch processing log files. So in order to implement Maat into the Carrera demonstrator, it has to be ported into C++, the 3rd party libraries need to be exchanged for C++ versions and the logic adapted to process stream data. This migration has the additional benefit, that (the stream version of) Maat can be implemented into the VEINS framework for an in-time simulation.

“Designing exercise tasks for Security in IT-Systems lecture,” Bachelor's thesis, Master's thesis, Project, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2021 – Completed.

This topic addresses primarily students of the teaching profession, however others may also apply. In this work you should design and create one or more exercise sheets (depending on the ECTS) for the lecture Security in IT-Systems combined with an automated grading system. One such sheet can be about web security where students have to hack a web server launched on a docker image - similar to hackthissite.org. For a list of other topics, please refer to the module description: https://www.uni-ulm.de/in/vs/teach/sec

“Continuous Configuration Security Testing on Unix Based Embedded Systems in the Automotive Domain,” Projectarbeit, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2021 – Completed.

Modern vehicles have many ECUs running specific software, which require continuous updates. Always testing the whole application when only small corrections (in the configuration) are made, would require unnecessary resources. A solution to this problem can be to only test the changes made from a safe state, which implies checking mostly the differences in the configuration. Unfortunately currently only few tools and research exists, which tackles this problem in the embedded and automotive domain. Therefore in this theses, the student has to look at the configuration testing of embedded devices in the automotive domain in the security context. For this, a survey of existing research and frameworks about configuration testing has to be done - in the automotive domain but also in other areas. Then the student has to highlight problems and address them with an own solution by creating a model and test it either by using existing tools or writing a small PoC app. Afterwards, the test results have to be evaluated in regards to the security context e.g. by expert interviews.

“Security Analysis of an Android App,” Master's thesis, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2020 – Completed.

The majority of adults have cell phones that are used for many different tasks, and for each task there are different apps, resulting in 2.8 million apps in the Google Play Store. Using apps always requires a certain level of trust, as most of them require at least an Internet connection and access to storage. However, such permissions open the door to vulnerabilities that can be exploited. Especially apps for older Android versions that are no longer patched may have known vulnerabilities. Furthermore, these permissions can be abused to collect user information which are sent it to backend servers. In this thesis, you first have to consider which app of the Google Play Store is most likely to have a vulnerability and justify this decision. Then compare existing methods for finding vulnerabilities in APKs and either choose one or create a new methodology that is more appropriate for your use case.Then you must reverse engineer the app and analyze it for vulnerabilities. As an additional optional task, you can also look for security and privacy v breaches in the app itself.

“Improving the Carrera Vehicle Control,” Projectarbeit, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2020 – Completed.

Simulating Cooperative Adaptive Cruise Control (CACC), where vehicles exchange status messages and adapt their driving behavior accordingly, is already possible with VEINS or ARTERY. However, in order to present the concept of CACC, an attack on it and the prevention, a live system would better demonstrate the need of a misbehavior detection system (MDS). For this we have chosen a Carrera Digital track, which allows controlling multiple cars in one lane, each with a different speed. However, currently only 15 speed levels can be used which prevents a more fine grained control. In this project, you have to improve the control over the speed levels from the Carrera cars. For this, the student has to disassemble a Carrera vehicle, and determine if the motor and/or controller has to be changed. If so, the student has to choose a suitable hardware which can replace the current one. Then, a protocol has to be defined and implemented which is modulated over the power supply to control the speed of different vehicles on the same track.

“Generating synthetic data using MABS,” Bachelor's thesis, Project, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2020 – Completed.

PaySim, a Mobile Money Payment Simulator simulates money transactions between users based on Multi Agent Based Simulation (MABS). It also generates data that can be used to test algorithms which should detect suspicious activities or fraud. This generated data is based on real financial data, which cannot be published for security reasons. In order to use or train the detection algorithms on real data, the synthetic information should be as similar as possible to the real one but not exactly the same. In this project or thesis, you should read the work of A. Elmir and E. Lopez-Rojas (PaySim), as well as the theory of MABS. Then you should implement a similar program to PaySim, which has certain data as input and should output generated synthetic data which fulfills the above requirement. As a test, you have to use the VeReMi Dataset where detection algorithms and results already exist. Then, the tool will be used on CAN messages.

“Defense strategies against attacks on platooning,” Bachelor's thesis, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2020 – Completed.

In this Bachelor thesis possible attacks on platooning should be gathered and defense strategies against these attacks proposed. With the help of a simulation framework (OMNET++, SUMO, VEINS) one attack and defense mechanisms should be implemented and evaluated.

“CACC Demonstration with a Carrera Track,” Project, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2020 – Completed.

In this project, the student has to build a Carrera Track demonstrator where cars are using CACC and driving in a platoon. First, the Carrera Track has to be build up where each car can be accessed and controlled from a Raspberry Pi. Then, a object tracking system needs to be implemented in cooperation with TU Braunschweig, which outputs the position of each vehicle on the track. After this, a controller needs to be programmed which uses the position data to form a platoon. Now, the program needs to be split up in such a way, that each instance is controlling only one vehicle and communicating with the others. At last, a use case of a crash has to be simulated, where the 2nd vehicle in the platoon is sending wrong data (e.g. the vehicle is accelerating but sending a deceleration).

“ARXML Parser for a Wireshark Dissector,” Projectarbeit, M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2020 – Completed.

In this project, the student has to write a tool which parses an .arxml file and outputs a configuration for a Wireshark dissector, which also needs to be implemented. The parser has to output a .json file containing the relevant data from the .arxml files, as well as storing this output in a database. The dissector will have an import function, where the .json file can be uploaded. Additionally, the dissector should be able to talk to a REST Api which exposes the database.

“Using Machine Learning for Misbehavior Detection in CACC,” M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2019 – Completed.

Modern vehicles will use communication to increase the safety of its passengers, reduce fuel consumption, travel time, and more. The communication between the vehicles will be mainly beacon messages containing the speed, position, acceleration and other properties. These messages need to be validated, if they contain correct (plausible) information. For example, when a vehicle is suddenly stopping, but sending an increase in speed, the following vehicles may crash into the misbehaving vehicle. In literature, there is already existing work on detecting misbehavior in the data with different techniques such as subjective logic or machine learning. In this project, we will analyze the VeReMi data-set with the help of different machine learning algorithms. The number of algorithms compared is depending on the scope (credits). The student can choose the framework, e.g. PyTorch.

“Building a DoIP Fuzzer,” M. Wolf (Supervisor), F. Kargl (Examiner), Inst. of Distr. Sys., Ulm Univ., 2019 – Completed.

In this project, the student has to build a Diagnostics over Internet Protocol (DoIP) Fuzzer, which will send arbitrary messages to electronic control units (ECUs) and records their responses. Based on these, a list of possible commands with their accepted parameters should be generated. Additionally, with the help of the DoIP Fuzzer, possible security vulnerabilities should be discovered and listed.

Michael Wolf

Research

Teaching

Publications

Theses and Projects

Open Topics

Taken Topics

Completed Topics

Seminars

Bachelorseminar ATVS and Masterseminar RTDS

Proseminar PRIV