| Welcome, Guest |
You have to register before you can post on our site.
|
| Online Users |
There are currently 16 online users. » 0 Member(s) | 15 Guest(s) Bing
|
| Latest Threads |
Mysterious Kill Switch Di...
Forum: The Hacker News
Last Post: yazrozzarn
01-10-2026, 04:36 AM
» Replies: 1
» Views: 846
|
UAW drops unfair labor pr...
Forum: Other Automakers
Last Post: BillyMum
06-16-2025, 09:15 PM
» Replies: 2
» Views: 2,504
|
Uber's Ex-CISO Appeals Co...
Forum: Dark Reading.com
Last Post: BillyMum
06-15-2025, 05:26 AM
» Replies: 2
» Views: 3,737
|
2021 Hyundai Ioniq SEL
Forum: Kia USB Entry
Last Post: HackMaster
03-31-2025, 07:17 AM
» Replies: 0
» Views: 440
|
Vulnerability of Remote K...
Forum: Keyless entry
Last Post: HackMaster
03-31-2025, 07:14 AM
» Replies: 0
» Views: 344
|
The (In)Security of Autom...
Forum: Keyless entry
Last Post: HackMaster
03-31-2025, 07:12 AM
» Replies: 0
» Views: 318
|
Relay Attacks on Passive ...
Forum: Keyless entry
Last Post: HackMaster
03-31-2025, 07:07 AM
» Replies: 0
» Views: 313
|
Hacking Tesla from Wirele...
Forum: Tesla
Last Post: HackMaster
03-31-2025, 06:58 AM
» Replies: 0
» Views: 355
|
Hacking Tesla from Wirele...
Forum: Tesla
Last Post: HackMaster
03-31-2025, 06:22 AM
» Replies: 0
» Views: 342
|
Schematics and Datasheets
Forum: Schematics
Last Post: HackMaster
02-27-2025, 12:26 AM
» Replies: 0
» Views: 296
|
|
|
Attack Surfaces |
|
Posted by: HackMaster - 02-25-2023, 05:28 AM - Forum: Finding Attack Surfaces
- No Replies
|
 |
Understanding Attack Surfaces
If you come from the software penetration-testing world you
probably already get this. For the rest of us, attack surface means all
the possible ways to attack a target. The target could be a
component or the entire vehicle. At this stage we do not consider
how to exploit any piece of the target, we are only concerned with all
the “entry points” into it.
Think of yourself as an evil spy, trying to do bad things to the
vehicle. To find the weaknesses, evaluate the perimeter and
document the environment. For a vehicle, we need to consider all
the ways data can get into the vehicle – that is, all the ways the
vehicle communicates with the outside world.
From outside the vehicle:
- What signals are received? Radio waves? Keyfobs? Distance
sensors?
- Physical keypad access?
- Touch or motion sensors?
- If electric, how does it charge?
From inside the vehicle:
- Audio input options: CD? USB? Bluetooth?
- Diagnostic ports?
- What are the capabilities of the dashboard? GPS? Bluetooth?
Internet?
Once you have thought about this, you should have realized there
are a LOT of ways data can enter the vehicle. If any of this data is
malformed or intentionally malicious, what happens?
|
|
|
|