SoylentNews is people
SoylentNews
Wired reports that:
They built their anti-hacking device for $150 in parts: an mbed NXP micro controller and a simple board. This plugs into a jack underneath a car or truck's dashboard known as the OBD2 port. Power it on for a minute during routine driving, and it captures the vehicle's typical data patterns. Then switch it into detection mode to monitor for anomalies like an unusual flood of signals or a command that should be sent when the car is parked but shows up when you're instead doing 80 on the highway.
If it spots mischief, the device puts the car into what Miller and Valasek call "limp mode," essentially shutting down its network and disabling higher-level functions like power steering and lane assist until the vehicle restarts. "You just plug it in, it learns, then it stops attacks," says Valasek, the director of vehicle security research at security consultancy IOActive.
Miller and Valasek's gadget may raise fears about false positives that could mistakenly disable your car's computers during rush hour. But in their tests, they say it hasn't misinterpreted any innocent signals in the car's networks as attacks. That's in part, they say, because a car's digital communications are far more predictable than those of a typical computer network. "It's just machines talking to machines," says Valasek. "In the automotive world, the traffic is so normalized that it's very obvious when something happens that's not supposed to happen."
The inventors claim it defeats all previous CANBus attacks. However, when you've got no authentication, no encryption and no source address in your "trusted" network, defense seems like a losing battle.
(Score: 2, Interesting) by anubi on Thursday July 24 2014, @10:36AM
how a car gets infected? I did not think they were online to the internet.
I thought I would have to explicitly connect an accessory to the CAN bus.
The car industry is not like the software industry as when cars malfunction, companies get sued : big-time.
If any company made a device which messed with the CAN bus and could be implicated in someone getting killed, there would be no end to the damage claims. And I mean just *implicated* would be enough to be financially quite painful.
"Prove all things; hold fast that which is good." [KJV: I Thessalonians 5:21]
(Score: 3, Informative) by Urlax on Thursday July 24 2014, @11:35AM
Well the "car" as a whole is not connected to the Internet, but the sat-nav may be internet enabled. or it gets updated from SD/USB/DVD.
If the sat-nav uses the same USB port as the radio (often they are integrated), it must be possible to run code on them. There are literally almost no security updates, so given sufficient time, there should be a way in.
from there you should be able to spew data onto the vehicles bus.
(opening a vehicle and inserting a Bluetooth ODB device is also possible, but it requires driving in close proximity and is more dificult than cutting a brake line)
(Score: 3, Informative) by kaszz on Thursday July 24 2014, @11:45AM
Internet may come through satellite connection for remote upgrades, repair shop plugging in or just plainly someone at the parking lot connecting for mischief.
(Score: 0) by Anonymous Coward on Thursday July 24 2014, @04:44PM
> how a car gets infected? I did not think they were online to the internet.
>
> I thought I would have to explicitly connect an accessory to the CAN bus.
Through the tires [arstechnica.com]