WIP: A Black Box System for Automotive Digital Forensics

Modern vehicles through increased connectivity are growingly susceptible to cybersecurity threats. Research has demonstrated vulnerabilities exploitable via infotainment systems, underscoring the need for robust automotive digital forensics. However, automotive digital forensic lags behind mature computer forensics, facing challenges such as lack of standardized guidelines, specialized tools, and technical limitations in current logging systems. These limitations, such as trigger-based recording, inadequate time synchronization, and insufficient trust preservation, compromise the reliability and legal admissibility of digital evidence. This paper presents a novel black box system designed to overcome these challenges by integrating GPS-based time synchronization and continuous Electronic Control Unit authentication leveraging Unified Diagnostic Services. Extending beyond traditional vehicle logging, Event Data Recorder, the proposed system features expanded memory capacity and data collection. Rigorous testing, including continuous authentication, stress tests, and functional analyses, demonstrates the enhanced capabilities of our black box in ensuring data integrity and credibility. These improvements strengthens the credibility of forensic evidence for legal proceedings involving connected vehicles.