Security and Safety in the Modern Vehicles
summary
Modern cars contain 100 million lines of code and many ECUs lack code signing and secure boot so researchers desolder chips, extract firmware, and find real vulnerabilities such as buffer overflows in NXP components. Attack chains include exploiting open network ports (the Jeep Cherokee incident leads to a 1.4 million Jeep recall), overwriting ECU firmware and sending accelerator/brake commands, and WebKit CVEs used to disable protections on Tesla systems. The recommendation is layered defenses from chip-level secure boot to network hardening and supply‑chain verification.
AI-written summary · about
chapters (10)
- 0:00Start
- 1:18Agenda
- 2:32Codebases
- 6:54Desoldering
- 9:11Software is not protected
- 11:11Fly by Wire
- 13:11Risk based on CASE
- 14:48Jeep Cherokee . 14M Jeeps were recalled
- 18:10CASE System
- 19:02Jeep Cherokee - 14M Jeeps were recalled
related talks
41mPanel: Tackling Automotive Hardware Vulnerabilities
43mSecuring the Connected Car
21mIndustrial IoT security issues and countermeasures
41mKeynote Presentation: Ten Years After the Jeep Hack: A Retrospective on...
43mSecuring Software-Defined Vehicles: From Threat Awareness To Holistic Cybersecur...
19mSecuring the future of mobility: Automotive threat modeling
43mSecuring the Connected Car
28mProtecting the connected car