Vehicle diagnostics are security-critical because they represent a potential entry point for attackers. There have already been a large number of successful attacks on the SecurityAccess Service specified in the Unified Diagnostic Services (UDS) standard. Therefore, in 2020, the standard was significantly improved in terms of security by introducing a new Authentication Service. However, the formal security analysis of ACSD researchers has shown that vulnerabilities still exist. In the paper "Formal Security Analysis of Vehicle Diagnostic Protocols", the ACSD researchers present the identified vulnerabilities, describe how they can be mitigated, and formally verify the proposed protection measures. Further, they provide recommendations for securely implementing UDS and how the standard can be further improved. The paper is available here.
