Hands-on-Training „Automotive Security“ – Focus on Hardware (2 days)

​​​​​​​Thursday, 18th and Friday, 19th April2024 (9:00 a.m. to 5:00 p.m.), TechBase Regensburg

Trainer: Jonas Horreis, dissecto GmbH

​​​​​​​​​​​​​​Language: English

What protocols and systems are present in modern vehicle control units (ECUs)? What are the attack surfaces on both the hardware and software side? This course gives you an overview of a wide range of possible methods that an attacker can use. The focus is on using examples of real ECUs to understand a complete exploit chain and thus expand awareness of the possible attack surfaces.

Training topics and focus areas:

• Common vehicle architectures and network topologies
• Identification of potential attack surfaces of ECUs
• Understanding low-level CAN communication and attacks
• Reverse Engineering von Hardware
• Firmware-Dumping
• Reverse engineering of the captured firmware
• Cracking security access mechanisms of current vehicle models
• Execute your own code on insecure ECUs
• Common software update mechanisms used by OEMs
• Basic knowledge of current immobilizer systems

Target group / Requirements (please note):

• Safety engineers/developers/designers from the automotive industry
• Project managers, technical project managers
• System testers, system architects
• Cybersecurity managers and coordinators

Participants need a functional laptop for the practical sessions (at least Intel i5 / 8 GB RAM / SSD / free access to all interfaces), pre-installed with a virtual machine (alternatively Linux) with access to the physical interfaces of the host laptop. The virtual machine is provided by the trainer in advance. Furthermore, participants should hold basic technical knowledge of micro-controllers from the automotive industry.

​​​​​​​Participation in the trainings is free of charge. For organizational reasons, the number of places to participate is limited. Registration is required three days before the start of the training. Registration for the event here.