Keynote Presentation: Ten Years After the Jeep Hack: A Retrospective on...
summary
A decade-after retrospective explains how a remote compromise of a 2014 Jeep chains an internet-facing telematics unit to an internal Renesas V850 by abusing an unsigned update flow, requiring two weeks to reach remote code execution and about six months of reverse engineering to craft a firmware reflash that sends arbitrary CAN messages; fix paths include carrier-side IP blocking, network segmentation with gateway modules, secure boot and signed updates — the exploit works on old architectures but is far harder on modern cars.
AI-written summary · about
chapters (10)
- 0:00Introduction and background
- 1:20Early automotive research
- 3:56The 2015 Jeep hack
- 8:00Responsible disclosure
- 12:17Remote exploitation methods
- 15:54Evolution of vehicle security
- 24:11Prioritizing physical safety
- 25:05Trends in industry technology
- 28:36Real-world development hurdles
- 34:37Conclusions on security
related talks
43mSecuring the Connected Car
20mSecurity and Safety in the Modern Vehicles
41mPanel: Tackling Automotive Hardware Vulnerabilities
51mSteering Clear of Danger: Decrypting the Realities of Remote Car Hacking
40mSecuring the Connected Car
43mSecuring the Connected Car
51m0-days & Mitigations: Roadways to Exploit and Secure Connected BMW Cars
50mAdvanced CAN Injection Techniques for Vehicle Networks