Explore a conference talk detailing Mercedes-Benz's approach to cybersecurity and 360 Group's research on Mercedes-Benz vehicles. Delve into the transformation of the automotive industry, challenges in securing connected cars, and principles of fleet security operations. Learn about attack surfaces, near-field attack chains, and the process of building a testbench for security research. Discover the impact of findings and gain insights into Mercedes-Benz's Global Cyber Security Program, emphasizing the importance of leveraging the security community's skills to defend a diverse luxury fleet.
Mercedes-Benz and 360 Group - Defending a Luxury Fleet with the Community
Overview
Syllabus
Intro
Transformation of the Automotive Industry
Securing the Connected Car & Defending a Fleet
Diversity of a Fleet
Three Key Challenges of Ongoing Fleet Defense
Principles of FleetSecOps
Strong White Hot Community Is Key
Security Solutions for Connected Car
Research Procedure
Attack surfaces of Connected Cars Cloud Side
Attack chains - Near field
Build a Testbench-key components
Build a Testbench - Source the key components
Build a Testbench - Telematics Control Unit
Build a Testbench - In-vehicle infotainment System
Build a Testbench - Connection
Build a Testbench - Against the anti-theft system
Build a Testbench - Obtain signals from a real car
Build a Testbench - Successful testbench
Timeline
Impact of our findings
Global Cyber Security Program
Summary
Taught by
RSA Conference
