Week - 01 Introduction to Automotive Cybersecurity
- In this session, we will:
- Introduce students to automotive cybersecurity as a concept and teach them about its rise to prominence in the automotive industry.
- A technical review of relevant case studies will give students an idea of what the process of hacking a car is like.
Week - 02 Introduction to Different In-Vehicle Network Technologies, OBDII and EOBD
- This lecture will cover the technical features of CAN, LIN, FlexRay, K-Line, Automotive Ethernet, and CAN FD.
- Students will learn about different IVN types and where each is used, with emphasis on what applications each is suited for based on price, bandwidth, and other factors.
- The different ports mandated to be on vehicles which grant access to some of these networks.
Week - 03 Advanced CAN Bus Concepts, Physical Attributes of CAN Bus
- Since the CAN bus will be the main area of focus for the hands-on portions of this course, a deeper look will be taken at the CAN protocol.
- Students will learn about the different parts of a CAN frame, how they are relevant from a security perspective, and more. They will learn about CAN arbitration and about error states in CAN.
- Physical attributes of CAN buses such as wiring patterns, termination, and what they will look like on wiring diagrams/technical documents will also be covered.
Week - 04 Building Your Digital Workstation
- This week’s content will assist the student in setting up their virtualization environment for the remainder of the course’s hands-on work.
- We will walk the students through setting up a Linux Virtual Machine, installing the necessary programmes for the CAN bus content later on, and an introduction to some of the software that will be used in this course
Week - 05 Building Your Virtual CAN Bus
- This course will take students through the process of setting up their own virtual CAN bus using the open source tools they set up the previous week
- Students will learn how to use the tools at their disposal to read data from a CAN bus
- Set up a CAN controller
- Troubleshooting, and more
- Parts of this week’s content will feature hardware that the students may not have access to, but it should still serve as useful knowledge
Week - 06 Advanced applications for open source CAN tools
- This week, students will learn about the more advanced applications of CAN bus
- This includes:
- Filtering data from a network
- Logging data
- Replaying data
- Writing basic programs to achieve certain functionality with their devices.
Week - 07 Setting up Virtual Infotainment System Simulation
- This week, students will be walked through the setting up of the Infotainment Cluster Simulator and shown some of its features
- Students will be taught the importance of being able to reverse-engineer CAN bus messages in the absence of a DBC file
- The format of a DBC file will be explored as well, showing students how CAN buses are structured in the industry
- This will lay the foundation for CAN bus message reverse-engineering
Week - 08 CAN Bus Hardware, CAN Bus Software
- This course will introduce students to some of the CAN bus products available on the market
- We will look at some of the most commonly used hardware tools for interfacing with a CAN bus and some of the most common software tools that go with them
- Expensive, industry-grade hardware and software will be reviewed, but cheaper hardware and open-source software will also be included
- Differing strengths and weaknesses of each product will be discussed, and a few live demonstrations will be given for some of the programs
Week - 09 Cyber Attacks on a CAN Bus, Security Measures for CAN Bus
- This week, some of the possible attacks against a vehicle’s CAN network will be explored
- We will go over the details of the attacks, what makes them effective, and possible countermeasures to them
- In tandem with this topic, we will discuss some possible security measures that can be applied to CAN bus including encryption, authentication, and transport-layer protocols
Week - 10 Vehicle Networking Architecture, Where to Find in-Vehicle Networks
- This lecture will contextualise how different subsystems can be connected to one another throughout a vehicle
- Students will learn how modern vehicle networks are organized and connected to one another and how information is shared
- Part of this lecture will also discuss how to find different vehicle networks in vehicles, as not all networks are available from the easily accessible diagnostic ports
Week - 11 Planning a Vehicular Penetration Test
- This week, students will learn the process of carrying out a vehicle penetration test
- This process includes:
- The discussion phase with the customer
- Identifying targets of engagement
- Planning an attack on the target
- The technical aspects of a penetration test including
- Scanning
- Enumeration
- Exploitation
- Post-exploitation
Week - 12 International Automotive Cybersecurity Legislation, Advanced Applications for Logged CAN Bus Data
- To conclude the course, a look will be taken at some of the international legislation surrounding automotive cybersecurity. Multinational standards such as the UN WP29 will be examined, but also country-specific legislation will be looked at.
- The final session will show how more expensive, industry-grade hardware and software can be used to recreate a vehicle’s driving session, allowing for advanced incident reconstruction and digital forensics.