VehicleSec '25
2025-08-11..2025-08-12
Seattle, United States
as the organisers put it
VehicleSec aims to bring together an audience of university researchers, scientists, industry professionals, and government representatives to contribute new theories, technologies, and systems on any security/privacy issues related to vehicles, their sub-systems, supporting infrastructures, and related fundamental technologies.
who it's for
vehicle security researchers, automotive security engineers, embedded systems engineers, autonomous vehicle engineers, electric vehicle infrastructure operators, drone and UAV security researchers, security testers and red teamers
topics
CAN bus traffic dataset; EV charging protocol security; oblivious Plug and Charge with ORAM; OCPP emulation and testing; aftermarket CarPlay adapter flaws; battery draining via DC charging; in-vehicle kernel sanitizers (QEMU TCG); vSLAM and localization spoofing; luminescent lane marking attacks; remote keyless entry exploitation history; federated learning for real-time trust; HD map tampering impacts
| title | author | length |
|---|---|---|
| Oblivious Plug&Charge: A Privacy-Preserving EV Charging Scheme based on ORAM | Timm Lauser, Nergiz Yuca, Dustin Kern, Nikolay Matyunin, Stefan Katzenbeisser, Christoph Krauß | 16m |
Claims that a multi-client ORAM placed at the charging station operator hides which database entry an EV updates so the CSO cannot link sessions, while the… | ||
| DrainDead: Emptying Batteries of Parked Electric Vehicles | Jakob Löw, Dominik Bayerl, Kevin Mayer, Hans-Joachim Hof | 13m |
Claim: an attacker can use DC charging protocol access to actively discharge parked EV batteries and steal energy. A lab rig named Dr. Kunigund prototype… | ||
| Keynote Presentation: Ten Years After the Jeep Hack: A Retrospective on... | Charlie Miller, Chris Valasek | 41m |
A decade-after retrospective explains how a remote compromise of a 2014 Jeep chains an internet-facing telematics unit to an internal Renesas V850 by abusing… | ||
| WIP: Hijacking Attacks on UAV Follow-Me Systems in Realistic Scenarios | Jiarui Li, Joseph Brewington, Qingzhao Zhang, Z. Morley Mao | 09m |
A gray‑box attack pipeline runs real‑time 3D detection + gradient optimization on a high‑fidelity simulator geo with an open‑source autopilot (PX4) to project… | ||
| EmuOCPP: Effective and Scalable OCPP Security and Privacy Testing | Soumaya Boussaha, Victor Fresno Gómez, Thomas Barber, Daniele Antonioli | 15m |
EmuOCPP is a container-based OCPP security and privacy testing framework using container emulation and IPMininet on low-cost hardware that runs real OCPP… | ||
| CarPlay at Risk: Unveiling Security Threats of Third-Party Infotainment Adapters | Jun Yeon Won, Wenzhuo Wang, Keith Redmill, Zhiqiang Lin | 15m |
Reverse engineering of one aftermarket adapter using a USB sniffer, log dumps and static binary analysis shows the adapter reproduces iPhone behavior and… | ||
| Lightning Talk: On-Road Driver Identification Dataset with CyberAttack | Jeremy Daily | 09m |
A naturalistic on-road dataset records responses to an instrument-cluster cyber attack where researchers inject bogus CAN messages via a MITM CAN fuzzing setup… | ||
| Lightning Talk: Securing the Future of Marine Data with NMEA OneNet | Jeremy Daily | 06m |
NMEA OneNet modernizes marine instrumentation by running IPv6 and standard IP stacks and explicitly specifying DTLS and TLS 1.2/1.3 cipher suites to move away… | ||
| Beyond the Glow: Understanding Luminescent Marker Behavior Against Autonomous... | Arkajyoti Mitra, Pedram MohajerAnsari, Afia Anjum, Paul Agbaje, Mert D. Pesé, Habeeb Olufowobi | 13m |
Paper demonstrates that simple luminescent lane paints and projected UV/laser illumination create non‑uniform glow and splat pattern textures that break modern… | ||
| WIP: QKSAN: Towards Multiple Sanitizers for In-vehicle COTS OS Kernels | Yalong Zou, Ziqiu Cheng, Dongliang Mu | 08m |
QKSAN builds a hypervisor-level sanitizer for binary-only in-vehicle kernels by instrumenting kernels in QEMU TCG and maintaining a 10-bit compound shadow (10… | ||
| WIP: Learning Adversarial Attacks on Adaptive Traffic Signal Control Systems... | Wangzhi Li, Tianheng Zhu, Yiheng Feng | 13m |
Adaptive traffic controllers under cooperative perception are vulnerable to a reinforcement-learning black-box attack that injects a fake CAV with falsified… | ||
| Short: Unencrypted Flying Objects: Security Lessons from University Small... | Rachel McAmis, Gregor Haas, Mattea Sim, David Kohlbrenner, Tadayoshi Kohno | 10m |
Study interviews 8 members across 4 U.S. university clubs and audits 203 repositories and 3 satellite codebases, finding none encrypted communications and… | ||
| CANdid - An Open-Access Annotated Dataset of Vehicle CAN Bus Traffic | Tomas Howson, Alexander Rohl, Matthew Roughan, Martin White, James Zanotti | 16m |
CANdid provides raw CAN packets, synchronized video and GPS, and timed control captures from 10 vehicles across four manufacturers (2012–2018) collected via… | ||
| ConfuSense: Sensor Reconfiguration Attacks for Stealthy UAV Manipulation | Alessandro Erba, John H. Castellanos, Sahil Sihag, Saman Zonouz, Nils Ole Tippenhauer | 17m |
ConfuSense shows that a single injected bus message can reconfigure IMUs (via a malicious supply-chain chip or EMI-manipulated write) to trigger suspend… | ||
| Short: Breaking the Charge: Exploiting State Manipulation in EV Charging | Ce Zhou, Qiben Yan, Zhiyan Yu, Eshan Dixit, Ning Zhang, Huacheng Zeng, Alireza Safdari Ghanhdari | 11m |
ChargeX is a hardware extension cable that embeds a tiny attack circuit to tamper with the J1772 control pilot voltage and flip charging states; two… | ||
| You Can Drive But You Cannot Hide: Detection of Hidden Cellular GPS Vehicle... | Moshe Chaim Satt, Donghan Hu, Patrick Zielinski, Danny Yuxing Huang | 17m |
A practical method detects hidden 4G LTE IoT GPS trackers by scanning device uplink bursts rather than noisy downlink traffic, using a cheap TinySA spectrum… | ||
| Secure FLOATING - Scalable Federated Learning Framework for Real-time Trust in... | Junaid Ahmed Khan, Kaan Ozbay | 14m |
Secure-FLOATING combines federated learning with secure multi-party computation (SMPC) and blockchain to validate trajectory data in real time without central… | ||
| SoK: Stealing Cars Since Remote Keyless Entry Introduction and How to Defend... | Tommaso Bianchi, Alessandro Brighente, Mauro Conti, Edoardo Pavan | 15m |
A Systematization of Knowledge of Remote Keyless Entry and Passive Keyless Entry maps attacks from 1982 infrared remotes through DST40/DST80 cryptographic… | ||
| Threat Analysis and Detection in In-Vehicle Infotainment System Leveraging MITRE... | Yeonjae Kang, Huy Kang Kim | 15m |
Built a realistic testbed running Automotive Grade Linux on Raspberry Pi 4, the work defines 11 attack scenarios across five classes (recon, exfiltration… | ||
| Keynote Presentation: What Vehicle Security Can Learn from Medical Device Security | Kevin Fu | 56m |
Medical device security history gives concrete precedents for vehicles: 2006 pacemaker RF replay attack allows disabling therapies and inducing fatal rhythms… | ||
| Short: PIBuster: Exploiting a Common Misconfiguration in CCS EV Chargers | Marcell Szakály, Sebastian Köhler, Ivan Martinovic | 10m |
Proof-of-concept shows Qualcomm HomePlug GreenPHY (QCA7000) modems accept remote PIB writes when a single configuration bit is unset; researchers build a lab… | ||
| Stateful Behavior Inference and Runtime Enforcement for Vehicle Network Security | Achintya Desai, Ruochen Dai, Yanju Chen, Ky Ho, Austin Kee, Sophie Bulatovic, Md Shafiuzzaman, Ken (Yihang) Bai, Il Ung Jeong, David Siu, Tuba Yavuz, Tevfik Bultan | 14m |
Framework infers hierarchical state machines from decoded CAN traces, compiles them to an FPGA checker and combines that with ECU fingerprinting for message… | ||
| WIP: Intrusion Detection and Localization for CAN by Extracting Propagation Delay.. | Zhaozhou Tang, Khaled Serag, Saman Zonouz, Z. Berkay Celik, Dongyan Xu, Raheem Beyah | 11m |
Proposes transmit signatures extracted from natural message intervals on CAN, claiming distance-dependent fingerprints that enable both detection and… | ||
| WIP: Evaluating the End-to-End Impact of False Localization Attacks on vSLAM-... | Yuga Ebine, Kazuki Nomoto, Yuna Tanaka, Ryunosuke Kobayashi, Go Tsuruoka, Tatsuya Mori | 11m |
A projected adversary video consisting of a fractal-noise binary pattern slides across the drone’s camera feed to repeatedly trigger ORB‑SLAM3’s FAST feature… | ||
| WIP: Blurred Lines -- A GDPR-Compliant Framework for Anonymising Automotive... | Rithwik Vinod, Luca Arnaboldi | 20m |
A framework called Blurred Lines processes vehicle camera feeds with five detectors (Haar/cascade, YOLO, a face-specific model, OCR for plates, and a… | ||
| Lightning Talk: PEPPAR on DS: Platform for Evaluating Physical-Layer and... | Tsuyoshi Toyama | 06m |
PEPPAR on DS is a CARLA-based driving simulator platform that links simulated sensors through perception, planning and control to test whole-vehicle… | ||
| WIP: Understanding the Mechanisms Behind NDT-Based Localization Vulnerabilities... | Yuna Tanaka, Kazuki Nomoto, Ryunosuke Kobayashi, Go Tsuruoka, Tatsuya Mori | 11m |
NDT scan matching relies on nearby map structures, so injecting or shifting points near those map cells causes pose drift that accumulates over time… | ||
| Human Drivers' Awareness of Utility and Privacy Risks of Vehicle-to-Everything... | Zekun Cai, Rao Li, Aiping Xiong | 18m |
A driving simulator study (N=32) evaluates V2X utility and privacy awareness by showing imminent but invisible hazards with event-based warnings with chime and… | ||
| WIP: A Black Box System for Automotive Digital Forensics | Muhammad Yusuf Bambang Setiadji, Eirini Anthi, Theodoros Spyridopoulos, Gareth Davies | 16m |
A low‑cost logger is built from a Raspberry Pi + Pi HAT + GPS receiver that captures raw CAN frames, stores unlimited‑length logs, and records both OS and GNSS… | ||
| WIP: Evaluation of Threats and Impacts of HD Map Tampering Attacks in Autonomous... | Miyu Sato, Ryunosuke Kobayashi, Kazuki Nomoto, Yuna Tanaka, Go Tsuruoka, Tatsuya Mori | 10m |
Systematic threat cataloging and end-to-end simulation show that lane-width expansion by 0.5 m increments in an Autoware + AWSIM environment causes planning… | ||
| WIP: From Detection to Explanation: Using LLMs for Adversarial Scenario Analysis... | David Fernandez, Pedram MohajerAnsari, Cigdem Kokenoz, Amir Salarpour, Bing Li, Mert D. Pesé | 10m |
Claims a framework that turns structured DSL vehicle scenarios into interpretable anomaly explanations using LLMs, evaluates 40 MUTCD-based cases, and requires… | ||
| nothing matches | ||