Hey android, Where is my car?

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

Ad

#RSAC
Victor Chebyshev, Mikhail Kuzin
Hey Android, Where is My Car?
Session# HTA-R10
Security experts
@Kaspersky Lab

#RSAC
My day life
2
You may know that sometimes it`s too cold in Russia
It`s me warming up my car
almost every winter day

#RSAC
My day life
3
I want this
But reality is

#RSAC
Mikhail`s day life
4
Misha has a car too
But it has one feature:
Remote Start from his phone
Misha just pushes a but...

#RSAC
Scope
5
There are millions of people like Misha, who have paired their cars
with their phones:
They have become nice...

#RSAC
Consequences
6
So Mikhail like many other people has remote access to his car
But …
Mikhail`s phone was infected wit...

#RSAC
Ok, how did that happen?

#RSAC
About
8
With mobile phone you can
Start the engine of your car
Unlock the doors
Track your car location
Even drive w...

#RSAC
This part of interaction is likely to be more secure
than the mobile app itself, it`s much more difficult to use MiT...

#RSAC
Car mobile app local data
10
Connected car app like any other app has its internal data:
Login and password
Authenti...

#RSAC
Stored data examples
11
[top tier auto manufacturer app] with
credentials.xml
[another top tier auto manufacturer ap...

#RSAC
Stored data secured
12
In normal scenario
There is no way to read protected data
There is no way to download an app ...

#RSAC
Infection vector
13
• But how do they get into the phone?
• We usually leave them a small loophole
• We put our phon...

#RSAC
Rooting
Is it that dangerous?

#RSAC
Mobile malware stats
15
Top 10 Android malware list by Q3 2016
Threat name
% of attacked
users
1 DangerousObject.Mul...

#RSAC
Vulnerable Android versions
16
Version Codename API Distribution
2.2 Froyo 8 0.1%
2.3.3 -
2.3.7
Gingerbread 10 1.3%
...

#RSAC
All devices are at risk
17
“Dirty Cow” exploit (CVE-2016-5195)
Discovered by Phil Oester
Race condition in the Linux...

#RSAC
All devices are at risk
18
“Drammer” - DRAM Rowhammer Attack
Hardware-based attack
Doesn’t depend on Android version...

#RSAC
All devices are at risk
19
“QuadRooter”
Discovered by CheckPoint
Uses 4 different vulnerabilities in the drivers
Aff...

#RSAC
All devices are at risk
20
Want more?
December 2016
Android Security
Bulletin
And this is just the
tip of the
iceber...

#RSAC
Demo

#RSAC

#RSAC
Different attack possibilities

#RSAC
Overlapping technique

#RSAC
Overlapping technique
25
The phone was infected
Car app launch attempt is
intercepted
Entered login and password jus...

#RSAC
Overlapping technique
26
Common technique for Android banking Trojans
Faketoken trojan uses this technique to attack...

#RSAC
Repackaging technique

#RSAC
Repackaging technique
28
Almost every Android app can be decompiled
Some code changes can be performed
App can be co...

#RSAC
Repackaging technique
29
In the case with the connected car app login activity can be patched
We modified app code, ...

#RSAC
Repackaging technique
30
Common technique for Android adware and “rooting” Trojans
Trojan-Downloader.AndroidOS.Leech...

#RSAC
Attacks conclusion

#RSAC
Developers fail
32
We listed three attack techniques
Internal data leakage
Overlapping of the app
Repackaging of the...

#RSAC
Mitigations

#RSAC
Connected car app = Banking app
34
App that controls such an expansive thing like a car must not be less
protected t...

#RSAC
Collaboration
35
Security researchers
App developers
Car manufacturers

#RSAC
Victor Chebyshev (Victor.Chebyshev@kaspersky.com),
Mikhail Kuzin (Mikhail.Kuzin@kaspersky.com)
Thank you!
Questions?...

Share Slideshare

LinkedIn
Facebook
Twitter

Embed

Size (px)

Show related Slideshows at end

WordPress Shortcode

Link

Share
Email

2024 Trend Updates: What Really Wor... by Search Engine Jou... 1063109 views
Storytelling For The Web: Integrate... by Chiara Aliotta 981811 views
Artificial Intelligence, Data and C... by OECD Directorate ... 923520 views
How to Leverage AI to Boost Employe... by SocialHRCamp 392340 views
2024 State of Marketing Report – by... by Marius Sescu 221896 views
Everything You Need To Know About C... by Expeed Software 237729 views

View on Slideshare

1 of 36 Ad

View on Slideshare

1 of 36 Ad