As “smart” is becoming the new standard for everything, malicious threat actors are quick to capitalize on the insecurity of IoT devices. Hackers compromising your network and spying on you is not something new in the world of personal computers, but definitely an emerging threat in the world of personal cars.

1. 1© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
Smart car forensics &
vehicle weaponization
Gabriel Cirlig – Software Engineer
Stefan Tanase – Security Researcher

2. 2© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
INGENIOUS! A ROMANIAN managed
to modify public transportation cards!
whoami

3. 3© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
whoami2

4. 4© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
./shameless_plug.sh
@hookgab
@stefant

5. 5© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |

6. 6© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE CONNECTED CAR

7. 7© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE MOTIVATION

8. 8© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE START

9. 9© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE TECH
• Freescale i.MX6 ARM Cortex-A9
• random *nix distribution
• GPS soldered on board
(even if you didn’t buy the nav package)
• 1GB RAM
• WIFI!!!1!1111
• revolutionary usb debugging ™
A lot of power for a car, eh?

10. 10© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. | 10© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
Smart car forensics

11. 11© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
GETTING IN
• Abuse “autorun” script from USB
• disable iptables
• run SSHD for our platform
• …prophit!
• root/jci
• ez ‘till now

12. 12© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
WHAT WE FOUND
everything?

13. 13© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
EXTRA
• voice profiles
• vehicle status
• directory listings for your phone (wtf, the car is crawling me)

14. 14© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
AUTO INDUSTRY IN A NUTSHELL

15. 15© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
AUTO INDUSTRY IN A NUTSHELL

16. 16© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. | 16© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
Vehicle weaponization

17. 17© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
WHAT WE CAN EXPLOIT
• deployed via the same script that granted ssh access
• uses cron to keep itself alive
• constantly looks for open wifis
• constantly logs GPS coordinates
• whenever we connect, upload new data
• WARDRIVING WITHOUT A LAPTOP!

18. 18© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
GIVING IT SOME LOVE

19. 19© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
LIVE DEMO

20. 20© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
https://www.youtube.com/watch?v=q0CjVHlEJuQ&feature=em-upload_owner

21. 21© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
SMART CAR RANSOMWARE

22. 22© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE FUTURE

23. 23© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE FUTURE

24. 24© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE FUTURE

25. 25© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE FUTURE

26. 26© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE FUTURE

27. 27© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE FUTURE

28. 28© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
Our privacy is threatened
Travelers always rent cars, car sharing programs
are becoming popular in big cities, shared corporate car fleets
Evolution of technology – a double edged sword
We *want* smartphones, tablets, smart watches,
smart cars, self driving cars, internet of things etc.
EURONCAP for automotive cybersecurity
We already have crash-tests for physical safety. Seatbelts and airbags are
mandatory. Why is the industry ignoring cybersecurity?
CONCLUSIONS

29. 29© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
THE AFTERMATH

30. 30© 2016 IXIA AND/OR ITS AFFILIATES. ALL RIGHTS RESERVED. |
Follow us on Twitter!
@hookgab
@stefant