415: Rolling Computers

Lead Solution Architect at Cymotive, Benny Meisels spoke with us about implementing embedded software security in cars. The discussion touches ECUs, IoT vehicles, threat and risk analysis, and how reverse engineering plays a role in security testing.

Benny works at Cymotive (https://www.cymotive.com/). You can find him on LinkedIn benny-meisels or on Twitter @benny_meisels.

Resources for automotive security:

• Automotive Security Research Group (ASRG)

• Upstream Security

• Hacking a VW Golf Power Steering ECU - Part 1 – Willem Melching's Blog 

• Instrument Cluster (ICM) Simulator: ICSim on github

• Program | escar USA conference | Embedded Security in Cars

• Car in a box, also on github and Arduino based: A lower cost approximation of the Toyota PASTA:Portable Automotive Testbed with Adaptability 

• Ghost Peak: Practical Distance Reduction Attacks Against HRP UWB Ranging

Framework Laptop 

Transcript

149: Flamethrowers Aside

Craig Smith (@OpenGarages) spoke with us about hacking the software in cars. 

His book is the Car Hackers Handbook. There is a 40% off coupon toward the end of the show.

OpenGarages is Craig's site to improve and encourage hacking. Some tools he recommends for getting started are USB2CAN and CANTact.

An older (shorter) version of the handbook is on OpenGarages.

I Am The Cavalry (iamthecavalry.org) is an excellent site for learning more about security. CERT.org is also good.

Theia Labs is Craig's company.