英文_卡巴斯基_现代汽车网络安全趋势_27页_3mb

Car Hacking: Bench Setup and Testing

1. Background & Goals

• Challenge: Traditional car hacking requires expensive vehicles.
• Solution: Set up ECUs (Electronic Control Units) on a workbench using low-cost tools, enabling affordable testing.
• Key Contribution: Provide safe, budget-friendly environment for ECU analysis and attack development.

ECU Workbench Setup

Steps for ECU Testing

1. Capture CAN Bus Traffic:

   • Use OBD-II or tools like ECOM for live captures of vehicle CAN messages.
   • Save data for bench simulation.

2. Prepare ECUs:

   • Power & CAN Bus: Connect 12V power and CAN lines to ECUs. Add termination resistors (> 120 ohms).
   • Wire Harness: Connect sensors/actuators based on ECU requirements (e.g., wheel speed sensors for ABS).

3. Simulate Environment:

   • Replay captured traffic to ECUs to mimic vehicle behavior.
   • Use fake sensors (e.g., 120-ohm resistors for fuel levels).

4. Troubleshooting:

   • Verify power/ground connections, CAN resistors, and CAN message injection.
   • Use tools like ECOMCat to monitor ECU responses.

Multi-ECU & Mobile Testing

• Breadboard Setup: Use breadboards for power/CAN sharing among multiple ECUs.
• Go-Cart Platform: Test on a low-cost mobile platform (e.g., Kandi KD-150 buggy) for dynamic testing.

Testing Capabilities

• Bench Limits:
  • Cannot fully replicate all vehicle subsystems (e.g., ABS requires physical brakes).
  • Attacks must later validate in real cars.
• Mobile Benefits:
  • Improved sensor data/injectable attacks (e.g., lane keep assist).

Attacks on Bench

• Injectable Vulnerabilities:
  • CAN message injection to test features like steering, speed, or fuel gauge.
  • Bluetooth/TPMS exploits via external tools.
• Validation Method:
  • Execute attacks locally before testing in real vehicles.

Limitations

• Incomplete Simulation: Missing sensors/actuators can affect ECU behavior.
• Physical Constraints: Dynamic tests require moving platforms, but wheel/brake systems may still need real-world validation.

Conclusion

• Value: Low-cost bench setup accelerates ECU research, testing, and attack development.
• Next Step: Prototype attacks locally before real-world validation.