~/talk

Advanced CAN Injection Techniques for Vehicle Networks

on YouTube 50m
Talkat Black Hat USA 2016 · 2016-08-03..08-04· [security, embedded-and-hardware]

speakers

name:Charlie Miller
x:0xcharlie
name:Chris Valasek
links:none on file

resources

video:https://youtu.be/4wgEmNlu20c
slides:none on file

summary

Demonstrations show remote CAN injection achieving steering, braking and acceleration control on a Jeep at real speeds by combining precise bus timing to bypass message validation (counter buster), forcing ECUs into boot/diagnostic mode and then interrupting firmware updates (halfway reflash) to take modules offline and impersonate them. Tools include EcomCat and vehicle spy, a two‑byte firmware checksum is brute‑forced, and demos include stuck parking brake, forced steering turns and phantom cruise acceleration; a simple rate‑based detector reliably flags these attacks.

AI-written summary · about

chapters (5)

  1. 0:00Start
  2. 31:58Message Confliction
  3. 38:45The Power Steering Control Module
  4. 40:39Engage the Brakes at Speed
  5. 43:07Steering

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.