Harsh Singh’s Post

Can-Bus Hacks: Unlocking the Secrets of Automotive Network Unlock the hidden potential of automotive networks with "Can-Bus Hacks: Reverse Engineering and Exploiting Automotive Networks." This comprehensive guide delves deep into the intricate world of Controller Area Network (CAN) systems, offering a roadmap for enthusiasts and professionals alike to understand, manipulate, and optimize automotive networks. Whether you're a curious hobbyist, a seasoned mechanic, or a cybersecurity expert, this eBook equips you with the knowledge and tools needed to explore the inner workings of modern vehicles. From decoding CAN messages to exploiting vulnerabilities, each chapter is packed with practical insights, real-world examples, and step-by-step tutorials. Inside, you'll discover: An overview of CAN architecture and protocols Techniques for sniffing and analyzing CAN traffic Reverse engineering CAN messages and data payloads Implementing CAN bus attacks and exploits Safeguarding automotive systems against cyber threats Case studies and demonstrations of CAN bus hacks in action Written by industry professionals with years of experience in automotive engineering, "Can-Bus Hacks" is your ultimate companion for mastering the art of automotive network manipulation. Whether you're interested in performance tuning, security research, or simply exploring the limits of technology, this eBook provides the insights and guidance you need to navigate the complex world of CAN bus systems. Unlock the full potential of automotive networks today with "Can-Bus Hacks." Get your copy now and embark on a journey into the heart of automotive technology Buy Now↓ https://lnkd.in/d8XkCjRf

🚗 Revving Up for the Auto-ISAC USA Summit in Detroit Next Week! With the evolution of ISO 21434 and ISO 26262 standards, automakers are navigating increasingly complex requirements to ensure software security and functional safety. At Finite State, we’re here to support them on this journey. Read our Blog and join us at the Auto-ISAC USA Summit as we demonstrate how Finite State is enabling the automotive industry in secure, standards-compliant software development. https://hubs.ly/Q02TgXzF0 #AutoISAC2024 #FiniteState #Cybersecurity

Discover the interconnected nature of ASPICE, Functional Safety, and Cybersecurity in the development of cutting-edge automotive technologies. Follow us for expert insights on driving excellence in software development. #Interconnected #CuttingEdge #AutomotiveTechnologies #Excellence

What sets your company apart from the competition? 🤔 Putting customers first isn't just a catchy phrase—it’s the cornerstone of what sets exceptional companies apart from their competition. At EETech Group, this commitment runs deep and takes mindful effort, strategic focus, and an unwavering dedication to realizing customer value. Over the past 60 days, I’ve had the privilege of collaborating with an outstanding team of professionals to build the infrastructure and engage the right engineering audience for a six-day webinar series featuring interactive live sessions from 17 leading electronics suppliers. From initial planning to execution, every step was meticulously aligned with our Customer Success principles. 📝 The result? A dynamic virtual event delivering valuable educational content to thousands of engineers across the globe. 🌍 The lesson is clear: when you prioritize your clients, you foster stronger relationships and achieve exceptional outcomes—for your clients AND their customers. Taking on the event wasn’t just a sale for us, it was a testament to our commitment to realizing our customer’s value and helping engineers engineer the future. 🔬👩🔬 This was a cool project and if you want to see this project in action, join us on September 3rd at EBVTechDays.com to see some incredible live sessions focusing on the EU Cyber Resilience Act.

🚗 As the automotive industry embraces digital transformation, CI/CD practices like Continuous Integration are pivotal for OEMs. Streamlining software updates, validating security patches, and enhancing PLM integration drive innovation. With solutions like Excelfore's eSync OTA, OEMs can quickly deploy changes across multiple ECUs, ensuring faster, more secure, and standardized operations. Emphasizing automation, standardization, and cybersecurity, CI/CD is shaping the future of vehicle technology. 𝐑𝐞𝐚𝐝 𝐭𝐡𝐞 𝐟𝐮𝐥𝐥 𝐚𝐫𝐭𝐢𝐜𝐥𝐞 𝐡𝐞𝐫𝐞: https://lnkd.in/gBczMfHS #Innovation #AutomotiveTech #OEM #CI #CD #SoftwareDevelopment #eSyncOTA #Cybersecurity #Standardization #AutomotiveInnovation #ConnectedCars #SmartVehicles #CloudTechnology #ECU #FutureOfMobility #DigitalTransformation

Why use SecOc in AUTOSAR? In vehicle networks, CAN bus is one of the commonly used communication buses, and most of its data is broadcasted in plain text and received without authentication. This solution has the advantages of low cost and high performance, but with the networking and intelligent business needs of automobiles, data security is becoming more and more important. The traditional method of adding RollingCounter and Checksum information to the message has very limited security and is easy to be reverse cracked and forged to control the vehicle. The network security mechanisms in the AUTOSAR architecture include E2E (End to End) protection and SecOC (Secure Onboard Communication), which are mainly used to authenticate sensitive data information within the vehicle. SecOC is an information security component added to the AUTOSAR software package. This feature adds a series of functions and new requirements such as encryption and decryption operations, key management, fresh value management and distribution. The SecOC module provides an effective and feasible authentication mechanism for critical data at the PDU level. The specification mainly uses symmetric authentication methods with message authentication codes (MAC-Message Authentication Code). Compared with asymmetric methods, they achieve the same level of security with smaller keys and can be implemented compactly and efficiently in software and hardware. However, the specification provides two necessary levels of abstraction, so both symmetric and asymmetric authentication methods can be used. Due to the large amount of asymmetric encryption calculations, symmetric encryption is currently mainly used. #SecOc #AUTOSAR #Automotive #Embedded #CyberSecurity

✅ Winbond Drives Automotive Security with New W77T Secure Flash Thanks to EE Times | Electronic Engineering Times Gary Hilson for featuring our latest innovation! Despite the emergence of new memory technologies, NOR Flash continues to be a crucial component in automotive systems, particularly for applications requiring fast boot times and high-speed processing. #TrustME’s security capabilities are just as important, “We’ve seen that the security requirements are increasing recently, particularly because there’s been a lot of supply chain penetration.” Winbond has launched the W77T Secure Flash, a game-changer for automotive security. This cutting-edge solution addresses the critical need for enhanced security in connected vehicles. Key features include: 📍 High Performance: 200MHz DTR for fast boot times and demanding applications. 📍 Robust Security: Compliant with ISO 26262 ASIL-D and ISO 21434, featuring PQC, secure boot, and robust data protection. The W77T empowers automakers to build safer and more secure vehicles while meeting the evolving demands of the automotive industry. 🔗 Full article: NOR Flash Keeps Pace with Automotive Security - EE Times https://lnkd.in/gVSqRz8Y #Winbond #W77T #SecureFlash #Automotive #Security #ISO26262 #ISO21434 #EETimes #cybersecurity #safety

On Wednesday, July 24, we had an interesting Manufacturing Enterprise Solutions Association (MESA) International Smart Manufacturing Community Group call. The call was on the topic: "OT Security in a Smart Connected Factory" and was facilitated by me, Dave Noller, (MESA). It was a very good discussion and we had excellent participation from the community. Some key take-aways: * Breaches are happening in the OT layer and are working their way up to IT. This is because of reasons such as poor interfaces on equipment, old technology being used for communications (and for computer hardware), etc * Traditionally, plants have handled security at the OT layer for their own systems. This needs to be standardized across the enterprise to make it possible to secure this layer in a consistent, cost-effective way. * There needs to be a shift of funding from IT to OT * Companies were mentioned that specialize in secure access for this layer: 2 examples are Xenexsoc and Databricks. * One participant said that it is important to approach security the same way we approach safety – beginning with a risk assessment to help find vulnerabilities and to help prioritize what needs to be done. * To really attack this, expertise is needed from security specialists and consultants. * Denodo talked at length about the role their fabric and related tools can play here and about the importance of assessing risk in combination with impact. Another person added “likelihood” to that equation. * It was pointed out that IT and OT have different concerns. IT is all about data (and analytics) while OT is more about Safety, Reliability, Productivity and Quality. Interestingly, the different motivations lead to a need for similar actions though. * It is important to consider the human element here as humans can be an attack vector (or can cause issues themselves without help from outside). * And much more - for more details on the discussion, you can listen to the recording at https://lnkd.in/gS7mfGD5 once it is posted. #mfg #mesa #mes #industry4 #manufacturing #ITOTintegration #OTsecurity #cybersecurity Please join the MESA (Manufacturing Enterprise Solutions Association) International LinkedIn Smart Manufacturing Community group https://lnkd.in/gr7-fiHS

AES Algorithm in Automotive Applications 🚗🔐: As vehicles become increasingly connected, ensuring data security is critical. The Advanced Encryption Standard (AES) is a cornerstone of modern cryptography, extensively used in automotive systems to safeguard data integrity and confidentiality. Why AES in Automotive? In automotive networks, sensitive data such as vehicle-to-vehicle (V2V) communication, vehicle-to-infrastructure communication and over-the-air (OTA) updates need to be encrypted to prevent unauthorized access. AES provides: 🔒 Robust Security ⚡ Efficient Performance 🌐 Wide Industry Adoption How AES Works: AES is a symmetric encryption algorithm, meaning the same key is used for both encryption and decryption. It operates on a block of 128 bits, supporting key sizes of 128, 192, or 256 bits. Key features include: 1️⃣ SubBytes: Non-linear substitution step. 2️⃣ ShiftRows: Transposition of data. 3️⃣ MixColumns: Polynomial mixing to diffuse data. 4️⃣ AddRoundKey: XOR operation with a round key. Check out the diagram below for a simplified representation of AES steps tailored for automotive applications. 🚗✨ 💡 In Automotive: AES is crucial for secure communication within ECUs, secure boot processes, and encrypted CAN message exchanges. It ensures your car's data remains safe from tampering and theft. #Cybersecurity #Automotive #Cryptography #AESAlgorithm #DataSecurity #automotivecybersecurity Here's the diagram illustrating the AES algorithm in the context of automotive systems. It highlights the key steps—SubBytes, ShiftRows, MixColumns, and AddRoundKey—along with automotive elements like an ECU and CAN bus for clarity.

The collaboration is to improve vehicle cybersecurity to the next level. Vector’s AUTOSAR Classic embedded software MICROSAR Classic supports Infineon’s new AURIX™ TC4x microcontroller (MCU) family.