Canspy: A Platform for Auditing Can Devices
summary
A low-cost hardware + firmware platform that implements STM32 discovery kit plus a <$40 shield to give two CAN interfaces and SD card logging, designed to forward/filter/inject/replay frames at full CAN speeds (up to 1 Mbps) with Ethernet (100 Mbps) and socketCAN over Ethernet for Scapy/Wireshark integration. Firmware guarantees low latency by controlling ACKs and sending dummy frames to avoid congestion; supports rule-based autonomous filtering and interactive filter/forward/inject services. Demo on OBD-II works functionally though the Bluetooth dongle reconnection is flaky.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:12Presentation overview
- 2:20Auditing conventional IT systems
- 5:58What about car manufacturer?
- 12:23CAN architectures
- 16:54Crafting CAN attacks
- 24:18CANSPY objectives
- 25:46CANSPY hardware
- 34:00Man-in-the-middle interesting point
- 40:03Demonstration bench
related talks
49mHopping on the CAN Bus
54mCantact: An Open Tool for Automative Exploitation
16mWIP: A Black Box System for Automotive Digital Forensics
12mDetect Denial of Service on an Open Embedded Automotive Platform
31mOverview of CAN Subsystem in Zephyr
43mFeasibility and Architecture of a Dual-Board Embedded System: Yocto & Zephyr Integration
32mNo cars were harmed for this talk: Automotive Rust, amateur style
41mIt's easier to break than to patch: a stealthy DoS attack on CAN