Uploaded February 2024 | Updated September 2026, 1 week ago
Event date: 25 May 2023. Carlos Gómez Quintana, IOActive Associate Security Consultant, expounds on IOActive’s whitepaper analyzing in-vehicle radio frequency input systems, such as the ECUs handling automotive key fobs and related CAN Bus messages; the paper presented real-world attack scenarios against such systems and detailed the enabling factors: such as the required hardware devices and the need for close proximity to the vehicle. The whitepaper highlighted the criticality of the vehicle’s security systems, with the objective of understanding and protecting these systems to create a safer environment - using the recent rollback attack published at BlackHat 2022 as a starting point, and extending it to more vulnerable vehicles and chips to highlight the novel and previously unpublished methods of executing rollback attacks.
Carlos presents the entire research process, from the most important vehicle components and how they interact with each other to the analysis and treatment of RF signals and the execution of various publicly-known RF attacks. The talk will also provided detail to the novel attacks, together with possible remediations for protecting vehicles in the future from RF attacks.
Event date: 25 May 2023. Carlos Gómez Quintana, IOActive Associate Security Consultant, expounds on IOActive’s whitepaper analyzing in-vehicle radio frequency input systems, such as the ECUs handling automotive key fobs and related CAN Bus messages; the paper presented real-world attack scenarios against such systems and detailed the enabling factors: such as the required hardware devices and the need for close proximity to the vehicle. The whitepaper highlighted the criticality of the vehicle’s security systems, with the objective of understanding and protecting these systems to create a safer environment - using the recent rollback attack published at BlackHat 2022 as a starting point, and extending it to more vulnerable vehicles and chips to highlight the novel and previously unpublished methods of executing rollback attacks.
Carlos presents the entire research process, from the most important vehicle components and how they interact with each other to the analysis and treatment of RF signals and the execution of various publicly-known RF attacks. The talk will also provided detail to the novel attacks, together with possible remediations for protecting vehicles in the future from RF attacks.
