Institut Mines-Telecom
If I secure my car, will it still brake? Ludovic Apvrille
[email protected] Hack.lu 2014
What’s in my car? (Well, apart from the radio, the hitchhiker, the Hack.lu stickers, Joe Gunslinger, . . . )
2/9
10/22/2014
Institut Mines-Telecom
If I secure my car, will it still brake?
Attacks
In cars, they first care about safety, not security . . . ( and privacy is hardly known ;-) )
Insecure over-the-air and in-car channels I
Eavesdropping, replaying, impersonating, faking
Consequences
3/9
I
Car safety: e.g., brake system corrupted
I
Economy: e.g., toll bill overcharged
I
Privacy: e.g., personal driver information disclosed to insurance companies
10/22/2014
Institut Mines-Telecom
If I secure my car, will it still brake?
A few known attacks on cars
I
Inject bogus traffic signals [Andrea,07] I
4/9
Deception (bad weather, full car parking, road works, accidents, ....)
10/22/2014
Institut Mines-Telecom
I
Digital car hijacking [Koscher 2010] I I
Car control by malware Changing parameters and firmware
If I secure my car, will it still brake?
Towards secure car architectures
(BTW: Is attacking cars of the organizers part of the CTF?) 5/9
10/22/2014
Institut Mines-Telecom
If I secure my car, will it still brake?
The car is now better secured . . . But can it still brake on time? Use of models and simulations (TTool/Diplodocus)
6/9
10/22/2014
Institut Mines-Telecom
If I secure my car, will it still brake?
The car is now better secured . . . But can it still brake on time? (Cont.) Simulation WITHOUT security
7/9
10/22/2014
Institut Mines-Telecom
If I secure my car, will it still brake?
The car is now better secured . . . But can it still brake on time? (Cont.) Simulation WITH security
8/9
10/22/2014
Institut Mines-Telecom
If I secure my car, will it still brake?
To Go Further ...
TTool/DIPLODOCUS ttool.telecom-paristech.fr
The research leading to these results has received funding from the European Community’s Seventh Framework Programme (FP7/2007-2013) under grant agreement EVITA no 224275 and TRESCCA no 318036.
9/9
10/22/2014
Institut Mines-Telecom
If I secure my car, will it still brake?