+- (https://hackmyride.com/forum)
+-- Forum: Automotive Hacking (https://hackmyride.com/forum/forumdisplay.php?fid=211)
+--- Forum: Car Hacker’s Handbook (https://hackmyride.com/forum/forumdisplay.php?fid=226)
+---- Forum: Chapter 1 - Understanding Threat Models (https://hackmyride.com/forum/forumdisplay.php?fid=227)
+----- Forum: Finding Attack Surfaces (https://hackmyride.com/forum/forumdisplay.php?fid=232)
+----- Thread: Car Hacker's Handbook - Attack Surfaces (/showthread.php?tid=431)
Attack Surfaces - HackMaster - 02-25-2023
Understanding Attack Surfaces
If you come from the software penetration-testing world you
probably already get this. For the rest of us, attack surface means all
the possible ways to attack a target. The target could be a
component or the entire vehicle. At this stage we do not consider
how to exploit any piece of the target, we are only concerned with all
the “entry points” into it.
Think of yourself as an evil spy, trying to do bad things to the
vehicle. To find the weaknesses, evaluate the perimeter and
document the environment. For a vehicle, we need to consider all
the ways data can get into the vehicle – that is, all the ways the
vehicle communicates with the outside world.
From outside the vehicle:
- What signals are received? Radio waves? Keyfobs? Distance
sensors?
- Physical keypad access?
- Touch or motion sensors?
- If electric, how does it charge?
From inside the vehicle:
- Audio input options: CD? USB? Bluetooth?
- Diagnostic ports?
- What are the capabilities of the dashboard? GPS? Bluetooth?
Internet?
Once you have thought about this, you should have realized there
are a LOT of ways data can enter the vehicle. If any of this data is
malformed or intentionally malicious, what happens?