WIP: A Black Box System for Automotive Digital Forensics
summary
A low‑cost logger is built from a Raspberry Pi + Pi HAT + GPS receiver that captures raw CAN frames, stores unlimited‑length logs, and records both OS and GNSS timestamps for independent time sync. The prototype implements continuous UDS authentication to prove ECU firmware state, successfully capturing normal, non‑responsive, and invalid‑version cases. Performance tests show perfect capture at 1,000 frames per second, <1% loss at 2,000 fps, and clear failure modes by 3,000 fps, guiding hardware limits and next steps.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 1:40Problem statement
- 3:29Forensic readiness matters
- 5:16Research objectives
- 5:58Logging system design
- 7:25Test bed validation
- 8:51Initial results
- 9:36ECU authentication
- 11:00Stress testing
- 11:41Result implications
- 12:43Industry viability
- 14:08Conclusion
- 15:13Q&A
related talks
42mCanspy: A Platform for Auditing Can Devices
14mAutoHack: A Physically Verified Multi-Bus CAN Dataset for Intrusion Detection...
12mDetect Denial of Service on an Open Embedded Automotive Platform
37mAutomatic Automotive Hacking
54mCantact: An Open Tool for Automative Exploitation
46mPASTA: Portable Automotive Security Testbed with Adaptability
30mFingerprinting Electronic Control Units for Vehicle Intrusion Detection
41mIt's easier to break than to patch: a stealthy DoS attack on CAN