Research Article
Reflections on the Security of In-Vehicle Connectivity
@INPROCEEDINGS{10.1007/978-3-032-38705-9_5, author={Xiangji Chen and Jingqi Wu and Shengzhi Zhang and Wu Zhou}, title={Reflections on the Security of In-Vehicle Connectivity}, proceedings={Intelligent Transport Systems. 9th EAI International Conference, INTSYS 2025, Marietta, GA, USA, December 10, 2025, Proceedings}, proceedings_a={INTSYS}, year={2026}, month={10}, keywords={Infotainment System Vehicle Security SmartDeviceLink}, doi={10.1007/978-3-032-38705-9_5} }- Xiangji Chen
Jingqi Wu
Shengzhi Zhang
Wu Zhou
Year: 2026
Reflections on the Security of In-Vehicle Connectivity
INTSYS
Springer
DOI: 10.1007/978-3-032-38705-9_5
Abstract
The framework that links mobile devices with automotive head units, such as SmartDeviceLink (SDL), facilitates smooth interaction between mobile applications and in-vehicle infotainment platforms. However, their open interfaces significantly expand the attack surface and raise unresolved security concerns. We analyzed SDL’s transport and policy layers on both the mobile device and the head unit, uncovering attack vectors including compromising mobile systems, hijacking SDL sessions, etc. Our experiments demonstrate that these weaknesses can be exploited to spoof GPS navigation and manipulate projected information on head units. To address these vulnerabilities, we discuss the necessity of defense strategies incorporating app signature authentication, device integrity checks, and end-to-end encryption.