Cyber Risks · Cisco Talos

New 4CAN tool helps identify vulnerabilities in on-board car computers

Summary: Cisco Talos describes how its Connected Vehicle Security practice built and open-sourced 4CAN, a hardware tool with accompanying software that lets researchers access four CAN buses simultaneously to test on-board car computers for vulnerabilities. The team says existing devices did not meet its needs of ease of use, four-bus access, and affordability, and notes that compromising the CAN bus can lead to total control of the vehicle.

What you should know: The CAN bus is reachable through an OBD2 connector on the driver-side lower dash, and attacks on Wi-Fi or LTE components are often just a route to it - so the gateway's ability to segregate traffic across the four buses inside a vehicle is the control that matters.

Read the original at Cisco Talos ↗

Topics
Malware
Related