The Car Hackers Handbook A Guide For Penetration Er 2016

User Manual:

Open the PDF directly: View PDF .
Page Count: 306 [warning: Documents this large are best viewed by clicking the View PDF Link!]

Scroll down to view the document on your mobile browser.

About the Author
About the Contributing Author
About the Technical Reviewer
Brief Contents
Contents in Detail
Foreword
Acknowledgments
Introduction
- Why Car Hacking Is Good for All of Us
- What’s in This Book
Chapter 1: Understanding Threat Models
- Finding Attack Surfaces
- Threat Modeling
- Threat Identification
- Threat Rating Systems
  - The DREAD Rating System
  - CVSS: An Alternative to DREAD
- Working with Threat Model Results
- Summary
Chapter 2: Bus Protocols
- The CAN Bus
- The SAE J1850 Protocol
  - The PWM Protocol
  - The VPW Protocol
- The Keyword Protocol and ISO 9141-2
- The Local Interconnect Network Protocol
- The MOST Protocol
- The FlexRay Bus
- Automotive Ethernet
- OBD-II Connector Pinout Maps
- The OBD-III Standard
- Summary
Chapter 3: Vehicle Communication with SocketCAN
- Setting Up can-utils to Connect to CAN Devices
- The CAN Utilities Suite
  - Installing Additional Kernel Modules
  - The can-isotp.ko Module
- Coding SocketCAN Applications
- The Socketcand Daemon
- Kayak
- Summary
Chapter 4: Diagnostics and Logging
- Diagnostic Trouble Codes
- Unified Diagnostic Services
- Event Data Recorder Logging
- Automated Crash Notification Systems
- Malicious Intent
- Summary
Chapter 5: Reverse Engineering the CAN Bus
- Locating the CAN
- Reversing CAN Communications with can-utils and Wireshark
- Creating Background Noise with the Instrument Cluster Simulator
- Reversing the CAN Bus with OpenXC
- Fuzzing CAN
- Troubleshooting When Things Go Wrong
- Summary
Chapter 6: ECU Hacking
- Front Door Attacks
- Backdoor Attacks
- Exploits
- Reversing Automotive Firmware
- Code Analysis
  - A Plain Disassembler at Work
  - Interactive Disassemblers
- Summary
Chapter 7: Building and Using ECU Test Benches
- The Basic ECU Test Bench
- Building a More Advanced Test Bench
  - Simulating Sensor Signals
  - Hall Effect Sensors
- Simulating Vehicle Speed
- Summary
Chapter 8: Attacking ECUs and Other Embedded Systems
- Analyzing Circuit Boards
  - Identifying Model Numbers
  - Dissecting and Identifying a Chip
- Debugging Hardware with JTAG and Serial Wire Debug
- Side-Channel Analysis with the ChipWhisperer
  - Installing the Software
  - Prepping the Victim Board
- Brute-Forcing Secure Boot Loaders in Power-Analysis Attacks
- Fault Injection
- Summary
Chapter 9: In-Vehicle Infotainment Systems
- Attack Surfaces
- Attacking Through the Update System
- Attacking the IVI Hardware
  - Dissecting the IVI Unit’s Connections
  - Disassembling the IVI Unit
- Infotainment Test Benches
  - GENIVI Meta-IVI
  - Automotive Grade Linux
- Acquiring an OEM IVI for Testing
- Summary
Chapter 10: Vehicle-to-Vehicle Communication
- Methods of Vehicle Communication in V2V
- The DSRC Protocol
- Security Concerns
- PKI-Based Security Measures
- Summary
Chapter 11: Weaponizing CAN Findings
- Writing the Exploit in C
- Determining Your Target Make
  - Interactive Probing
  - Passive CAN Bus Fingerprinting
- Responsible Exploitation
- Summary
Chapter 12: Attacking Wireless Systems with SDR
- Wireless Systems and SDR
  - Signal Modulation
- Hacking with TPMS
- Attacking Key Fobs and Immobilizers
- Summary
Chapter 13: Performance Tuning
- Performance Tuning Trade-Offs
- ECU Tuning
  - Chip Tuning
  - Flash Tuning
- Stand-Alone Engine Management
- Summary
Appendix A: Tools of the Trade
- Hardware
  - Lower-End CAN Devices
  - Higher-End CAN Devices
- Software
Appendix B: Diagnostic Code Modes and PIDs
- Modes Above 0x10
- Useful PIDs
Appendix C: Creating Your Own Open Garage
- Filling Out the Character Sheet
Abbreviations
Index

Navigation menu