AFLA Conference Archives-Current State of Vehicle Security

Video Transcription

Video Summary

The concluding session of a program focuses on cybersecurity, involving prominent associations like the American Automotive Leasing Association and the National Auto Auction Association. The session is led by Robert Leal, founder of CanBusHack, a pioneering vehicle network security company, and a Black Hat trainer. Leal's company initially aided aftermarket electronics integration and later focused on vehicle network security. He also established the Car Hacking Village, providing hands-on learning experiences for vehicle system hacking, with support from major automakers like Fiat Chrysler.<br /><br />Leal's approach to hacking involves understanding vehicle systems at a fundamental level to identify vulnerabilities, facilitating the integration of new features. His process includes selecting a target vehicle, acquiring wiring diagrams, extracting firmware, reverse engineering, and identifying attack vectors, akin to finding open doors in a house. The ultimate goal is to enhance vehicle functionality ethically rather than exploit weaknesses maliciously.<br /><br />He emphasizes collaboration with the automotive industry, highlighting moves by OEMs to form security teams and engage with hackers through channels like Twitter and bug bounty programs. He also advises on the importance of having good tools and being knowledgeable about published materials like wiring diagrams, which can reveal a vehicle's connectivity and vulnerabilities. Current trends in hacking show a disparity in motivation, from hackers seeking fame or employment opportunities, to those driven by financial incentives through vehicle theft or manipulation.<br /><br />Throughout, Leal stresses the importance of cybersecurity awareness, training, and investments in research and development of security measures, especially given the increasing connectivity of modern vehicles.

Asset Subtitle

Robert Leale

Meta Tag

Location San Diego, CA

Year 2016

Keywords

cybersecurity

vehicle network security

Car Hacking Village

Robert Leal

American Automotive Leasing Association

National Auto Auction Association

automotive industry

hackers

OEM security teams

vehicle connectivity

San Diego, CA

2016