Toward Automated and Black-box Vehicle Cybersecurity Testing

Abstract

Current automotive cybersecurity testing methods are often performed manually, and not automated, to find security vulnerabilities. The downside is that it is difficult, time-consuming, and expensive to find security risks. Therefore, it is necessary and beneficial to conduct automated and black-box security testing during the cycle of car development, pre-production testing and manufacturing. In this talk, the authors introduce the first automated automotive cybersecurity testing toolkit so OEMs can quickly and easily identify security vulnerabilities in their vehicles. The tool has successfully detected many serious security vulnerabilities in a number of vehicles, and has helped OEMs identify and correct ECU firmware security vulnerabilities by re-flashing new-version firmware.

Speaker Bio

VisualThreat is a leading connected-car security vendor based in Silicon Valley. He previously worked in McAfee, Trend Micro and Symantec joint venture as security architect and research scientist, and has deep understandings of anti-malware, mobile threat intelligence and auto security. Dr. Yan is also an active referee and serves as Editorial Board member of peer-reviewed professional journals and technique committee member of more than 40 international security conferences. He is the author of leading industry and academic conferences. He has a PhD in computer engineering from New Jersey Institute of Technology

Note : The doors close at 7:30 PM