Explore the critical aspects of securing connected vehicles in this conference talk by Mirza Krak, Embedded Solutions Architect for Mender.io. Delve into the opportunities presented by connected cars, exemplified by Tesla's over-the-air (OTA) software updates. Examine the technical details of the Jeep Cherokee hack, understanding the vulnerabilities exploited and learning strategies to minimize attack surfaces. Gain insights into best practices for implementing secure OTA software updates with effective failover management. Discover the potential of software-defined cars, including new revenue streams and cost savings through open-source platforms. Analyze the challenges of security patching in connected devices and learn about automated rollback mechanisms. Prepare to secure the future of automotive technology by understanding the complexities of car networks, the importance of timely security updates, and proactive approaches to potential hacking incidents.
Overview
Syllabus
Intro
About me
Session overview
Software defined car: New revenue streams
Cost savings by using open source platforms
The software defined car requires OTA updates
Jeep Cherokee hacked in July 2015
Jeep Cherokee architecture
Jeep Cherokee Head Unit with WiFi
Wifi-based breach: Short-range
Cellular-based breach: Country-wide
The Controller Area Network (CAN) bus
CAN bus
Putting it together
More complexity leads to larger attack surface
Security patching is done too late
Why security patching happens too late
Patching connected devices is harder
Generic embedded updater workflow
Why automated rollback is important
Prepare for securing the software defined car
The best way to respond to hacking?
Taught by
NDC Conferences
