INSicherheit cordially invites you to the lecture "Analysis of Digital Forensics Capabilities of State-of-the-art Vehicles" on 14.01.2020 at 15:45 in room D202 at the Technical University Ingolstadt, Esplanade 10, 85049 Ingolstadt. In the lecture, Kevin Klaus Gomez Buquerin, external doctoral student in INSicherheit, presents the results of his master's thesis.
Abstract:
"Vehicles get increased attention in the field of security. During the car hack village at Defcon Security Conference in 2016, Charlie Miller and Chris Valasek proved that modern vehicles are vulnerable to manipulation and attacks. At Pwn2Own 2019, security researchers were able to manipulate the infotainment of a state-of-the-art electrical vehicle.
New technologies introduced in modern vehicles and new business models, such as car sharing or features on demand, attract an increasing number of security researchers and malicious actors. As a result, Original Equipment Manufacturers (OEMs), legal institutions, insurance companies, and other entities need to be prepared for potential car security incidents. Such responses include forensic analysis to resolve liability issues or identify possible flaws in vehicles.
The master thesis focuses on capabilities of digital forensics for automotive systems. On upcoming chapters, corresponding types of forensic analysis as well as resulting requirements and challenges for automotive forensics are presented. Furthermore, a four-step concept for digital forensic analysis on state-of-the-art vehicles is presented. The process includes a forensic readiness phase, data acquisition phase, analysis phase, and documentation phase. By using the On-Board Diagnostics (OBD)-II interface, an implementation of the presented concept is performed. Communication with a modern vehicle is conducted over Automotive Ethernet with Diagnostics over Internet Protocol (DoIP) and Unified Diagnostic Services (UDS). The concept itself and the automotive forensics results are evaluated for usability in possible prosecutions.
OBD-II is usable to collect data and use it for forensic analysis. On the other hand, several gaps and disadvantages that complicate or even prevent forensic analysis for modern vehicles, are identified. Furthermore, an approach to fixed stated gaps is presented."