Page 1 of 1

hacking modern ECUs -- a (personal) security threat?

Posted: Tue May 18, 2010 10:52 pm
by TireSmoker
http://www.autosec.org/pubs/cars-oakland2010.pdf

It's kinda long, 16 pages. I haven't finished reading it yet, but the from quote below, you can see where this is heading.
Instapundit wrote: Now that cars are just platforms and Ford is starting an apps store, how long before we see auto-malware? Not long, say researchers from the University of Washington, who managed to breach automobile networks using keyless entry systems. They were able to disengage or engage brakes (sometimes one wheel at a time), overriding the driver entirely. And in a move that may make this the first scientific paper to be turned into a major motion picture, they launched a “Self-Destruct” mode:

“a 60-second count-down is displayed on the DriverInformation Center (the dash), accompanied by clicks at an increasing rate and horn honks in the last few seconds. In our demo, this sequence culminated with killing the engine and activating the door lock relay (preventing the occupant from using the electronic door unlock button).”
Found at http://instapundit.com

They explicitly said they didn't name the car, as they believe these flaws are not inherent to one model or manufacturer. Regardless, the car involved in their testing is a Chevy Impala. There are two photos, one exterior, one interior. It's pretty obvious.

As it represents the intersection of computer hacking and car-control (not just engine control), it's pretty interesting (scary?) to see what can be done.

-Dave

Re: hacking modern ECUs -- a (personal) security threat?

Posted: Thu May 20, 2010 10:04 pm
by Basement Paul
I've said that I wouldn't be surprised if this Toyota "random acceleration" problem is a computer bug...

-BP

Re: hacking modern ECUs -- a (personal) security threat?

Posted: Thu May 20, 2010 10:11 pm
by TireSmoker
Wouldn't surprise me either, and after reading that paper, I'm a little more sympathetic to claims that maybe they couldn't shut off the engine/shift to neutral/apply the brakes.

-Dave

Re: hacking modern ECUs -- a (personal) security threat?

Posted: Fri May 21, 2010 8:26 am
by markss327
Me three...
I see the regenerative braking concept (hybrids only) difficult to manage. Calculations for deceleration rate, brake peddle pressure, inertia...
Although, logically not directly related to a full throttle experience, it's still all software controlled.

BTW, I've printed and saved the .pdf. Should make interesting lunchtime reading...