hacklu cars

Institut Mines-Telecom If I secure my car, will it still brake? Ludovic Apvrille [email protected] ...

0 downloads 146 Views 2MB Size
Institut Mines-Telecom

If I secure my car, will it still brake? Ludovic Apvrille [email protected] Hack.lu 2014

What’s in my car? (Well, apart from the radio, the hitchhiker, the Hack.lu stickers, Joe Gunslinger, . . . )

2/9

10/22/2014

Institut Mines-Telecom

If I secure my car, will it still brake?

Attacks

In cars, they first care about safety, not security . . . ( and privacy is hardly known ;-) )

Insecure over-the-air and in-car channels I

Eavesdropping, replaying, impersonating, faking

Consequences

3/9

I

Car safety: e.g., brake system corrupted

I

Economy: e.g., toll bill overcharged

I

Privacy: e.g., personal driver information disclosed to insurance companies

10/22/2014

Institut Mines-Telecom

If I secure my car, will it still brake?

A few known attacks on cars

I

Inject bogus traffic signals [Andrea,07] I

4/9

Deception (bad weather, full car parking, road works, accidents, ....)

10/22/2014

Institut Mines-Telecom

I

Digital car hijacking [Koscher 2010] I I

Car control by malware Changing parameters and firmware

If I secure my car, will it still brake?

Towards secure car architectures

(BTW: Is attacking cars of the organizers part of the CTF?) 5/9

10/22/2014

Institut Mines-Telecom

If I secure my car, will it still brake?

The car is now better secured . . . But can it still brake on time? Use of models and simulations (TTool/Diplodocus)

6/9

10/22/2014

Institut Mines-Telecom

If I secure my car, will it still brake?

The car is now better secured . . . But can it still brake on time? (Cont.) Simulation WITHOUT security

7/9

10/22/2014

Institut Mines-Telecom

If I secure my car, will it still brake?

The car is now better secured . . . But can it still brake on time? (Cont.) Simulation WITH security

8/9

10/22/2014

Institut Mines-Telecom

If I secure my car, will it still brake?

To Go Further ...

TTool/DIPLODOCUS ttool.telecom-paristech.fr

The research leading to these results has received funding from the European Community’s Seventh Framework Programme (FP7/2007-2013) under grant agreement EVITA no 224275 and TRESCCA no 318036.

9/9

10/22/2014

Institut Mines-Telecom

If I secure my car, will it still brake?