Тёмный

37C3 - Unlocking the Road Ahead: Automotive Digital Forensics 

media.ccc.de
Подписаться 208 тыс.
Просмотров 6 тыс.
50% 1

media.ccc.de/v/37c3-11935-unl...
A deep dive into an underrepresented research area
The importance and relevance of vehicles in investigations are increasing. Their digital capabilities are rapidly growing due to the introduction of additional services and features in vehicles and their ecosystem.
In this talk on automotive digital forensics, you will embark on a journey through the cutting-edge world of automotive technology and the critical role digital forensics plays in this domain. We will explore the state-of-the-art methods and tools to investigate modern vehicles, shedding light on forensic experts' significant challenges.
This presentation delves into the latest research areas and trends, providing insights into how technology rapidly evolves in the automotive industry, creating opportunities and challenges for digital forensics specialists. We will also peer into the future, discussing the directions in which automotive digital forensics is heading and the implications for our increasingly connected and autonomous vehicle landscape.
Through case studies, you will gain a firsthand look at different investigations conducted on modern vehicles, showcasing the real-world applications of digital forensics in this field--explicitly focusing on privacy issues and security pitfalls in modern vehicles. Whether you're a seasoned expert or a curious enthusiast, this talk will give you a deeper understanding of the complex intersection of automotive technology and digital investigations.
This talk will be a deep dive into automotive digital forensics! We will explore the dynamic landscape of automotive technology and its intricate relationship with digital forensics. Our journey will traverse classical in-vehicle protocols, proprietary communication methods, and external interfaces, revealing these technologies' crucial role in modern vehicles.
The current toolkit, used in automotive digital forensics investigations, includes the Berla iVe for infotainment analyses and specialized Airbag controller tools like Bosch CDR. For both, there is a limited understanding of its functionality and reliability, and for Airbag controllers, even contrary research results are available. We'll discover how these tools empower forensic experts to dissect the digital traces left within vehicles and the ecosystem, uncovering invaluable insights.
As we embark on this journey, we'll confront significant challenges faced by automotive digital forensics practitioners. These obstacles include limited accessibility to vehicle systems, the integration of proprietary technologies, a shortage of knowledge and expertise in this domain, concerns over safety implications, and the absence of standardized storage systems.
Keeping pace with the latest research trends, we'll delve into process development, the introduction of additional tools, in-depth analytical methods, and innovative investigation techniques shaping this field's future.
But the road ahead is not without twists and turns, and we'll navigate through privacy and security issues that are paramount in the automotive digital forensics landscape. We'll shed light on privacy concerns, referencing investigations like the one conducted by the Mozilla Foundation and explore security topics through real-world examples such as attacks showcased at the Pwn2Own conference and those disclosed by KeenLabs Security. We will also focus on investigations we conducted on Tesla vehicles in the area of digital forensics.
Throughout this talk, you'll gain insights into the automotive ecosystem's vast capabilities for digital forensics investigations. We'll also tackle the challenges head-on, highlighting the intricate balance between privacy and security in this ever-evolving domain. Whether you're an expert in the field or intrigued by the intersection of technology and automotive investigations, this talk promises to leave you with a profound understanding of the road ahead in automotive digital forensics.
Kevin Gomez
events.ccc.de/congress/2023/h...
#37c3 #Security

Опубликовано:

 

13 янв 2024

Поделиться:

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист
Посмотреть позже
Комментарии : 14   
@asudeno
@asudeno 4 месяца назад
very informative presentation, thx
@rolux4853
@rolux4853 5 месяцев назад
I know someone that works for a car company and is involved with the ECUs. They told me it’s shocking how hard it is for third parties to get to this data, when for them it’s just one dongle insertion away.
@Jinguapingi
@Jinguapingi 5 месяцев назад
Nice talk ! The website of Kevin is down ATM btw :(
@FrankCH12345
@FrankCH12345 5 месяцев назад
If my smartphone is connected to the car, are they allowed to readout my data on my smartphone?
@josephbargo5024
@josephbargo5024 4 месяца назад
I would assume this is controlled by the smartphone? Stuff like CarPlay is very limited in the data it can send
@MNKYY
@MNKYY 3 месяца назад
As far as i've seen there are so called "black functions" that hide and secure any data that has nothing to do with the actual architecture of the vehicle. Can also be OEM specific.
@cdh76
@cdh76 5 месяцев назад
Which vehicles connect with traffic lights?
@DigitalSentinel
@DigitalSentinel 5 месяцев назад
EMS
@MNKYY
@MNKYY 3 месяца назад
Audi is already able to communicate with traffic lights. The car shows you exactly how long the red will last as you arrive the traffic light.
@user-pr4zo9fo1r
@user-pr4zo9fo1r 5 месяцев назад
21:18 your sexual preferences? How would they know and why do they want that? 🤨
@TheCloudhopper
@TheCloudhopper 5 месяцев назад
It's data, if in doubt sell it for profit.
@TheSwanies
@TheSwanies 5 месяцев назад
...advertisers want it
@rolux4853
@rolux4853 5 месяцев назад
Money money money
Далее
Я ВЫЖИЛ ПОСЛЕ УКУСА ЗМЕИ!
22:56
Просмотров 988 тыс.
Comedy Moments 🤣 #2
00:25
Просмотров 2,8 млн
Digital Forensic Crash Course for Beginners
24:06
Просмотров 46 тыс.
18 Things Our Brain Can't Handle
26:20
Просмотров 757 тыс.
37C3 -  SMTP Smuggling - Spoofing E-Mails Worldwide
31:40
DFS101: 4.1 Basics of Cybercrime Investigation
20:21
Просмотров 44 тыс.
Hopping on the CAN Bus
49:10
Просмотров 82 тыс.