The content of my presentation consists of three parts and for each part I also could provide some hands-on exercices. The first part covers the basics about modern automotive electronics. I would give as small introduction to the most-common Bus-types (as CAN, LIN or SWCAN) which are in use since the 90's. Then I would close the first part with an overview of the different components like bus-systems, Electronic Control Units (ECU) (the different “computers”), the sensors and how they interact together to build the foundation of modern cars. Attendees will get introductions on different attack vectors and what the limits of each vector is. The second part provides an overview over available open source hardware. At the moment you could choose from a view Plattform or build your Plattform all by yourself. After more than 2 years practice with Arduino based-interfaces, I could show the participants how to debug errors and how to use networking tools to interact with different interfaces for automotive bus-systems. The third part would cover how to work with real-world collected samples. If there would be a hands-on part, Attendees could also sniff, alter and inject packages to real CAN-bus devices. The intended audience for my presentation are hackers and security researchers, interested in the internal communication of cars. Researchers and hackers will get the needed information how to connect to most cars newer than 1992. This session provides a perfect introduction to car hacking. It also covers new possibilities with open source hardware which at the moment starts to be available. I would close my presentation with an outlook, how to use the learned skills on modern industrial bus-systems. The participants need to bring their own notebook with a Linux or Windows operating system. Access to the Internet has to be available. I expect a basic understanding of networks or bus-systems because it makes it easier to follow the different parts of my presentation. The participants will get a solid foundation and a sharp toolkit to conduct their own research with modern automotive bus systems. Modern cars are more computers connected together with wheels and an engine attached. The attendees will get access to the possibilities to connect, sniff, alter and inject packets into the different bus-systems used in modern cars. They will get an understanding of how the different ECUs and sensors act together to build the foundation of modern cars and where they better should not mess with.

1. Surfin on your CAN-Bus
new bricks for Car-Hacking
Thomas Fischer
04.06.2018
Confidence Krakow 2018

2. table of contents
The CAN-Bus
Building your CAN-Hardware Lab for car-hacking
based on Arduino
based on Raspberry PI
Real car-hacking
Electric car conversion
1

3. The CAN-Bus

4. How could an CAN-Bus implementation look like?
2

5. How did the first CAN-Bus look?
3

6. How did the first CAN-Bus look?
4

7. How did the first CAN-Bus look?
5

8. How did the first CAN-Bus look?
6

9. How did the first CAN-Bus look?
7

10. How did the CAN-Bus change
Mercedes S-class
8

11. Figure 1: Mercedes W140
• 1991 - 1998
• 2nd production car
with an CAN-Bus
• 5 ECU
• <100 messages
Figure 2: Mercedes W222
• June 2013 -
• modern S-class
• >100 ECU
• >6000 messages
• multiple
interconnected bus
types (CAN, LIN,
MOST)

12. Building your CAN-Hardware Lab
for car-hacking
8

13. What do you need for an Arduino Lab?
9

14. What do you need for an Arduino Lab?
10

15. What do you need for an Arduino Lab?
11

16. What do you need for an Arduino Lab?
12

17. What do you need as Arduino Lab?
13

18. What do you need for an Arduino Lab?
14

19. What do you need for an Raspberry PI Lab?
15

20. Real car-hacking

21. Power up a vw-transporter
16

22. Power up a vw-transporter
17

23. Power up a vw-transporter
18

24. Power up a vw-transporter
19