Methodology for controlling connected cars remotely

No ratings

Presented at CODEBLUE2018@TOKYO 2018 by

Minrui Li

In this talk, we will introduce our methodology for connected car security evaluation with low cost. Connected car is a car that is equipped with Internet access, and usually also with a wireless local area network. This allows the car to share internet access with other devices both inside as well as outside the vehicle. Often, the car is also outfitted with special technologies that can provide additional benefits to the owners. Owners can open their car's door remotely, even start engine and control steering wheel. These all could be a risk for connected car.Main attack surfaces are divided into three parts: cloud platform, communication channel and end points. We will introduce our methodology to find vulnerabilities inside of them and combine the vulnerabilities to a attack path, then we could follow the path to control car remotely.More and more internet companies are participating in automobile industry and trying to develop and produce connected cars, but they do not have strict security thought to build a security system. It means more and more vulnerabilities are hiding behind. In that case, car hacking will be more and more popular in the future.