2016 - Andy Davis & David Claire - Vehicle cyber security and innovative assessment techniques

The attack surface of the modern connected car is large and increasing. In this talk we will describe the technologies that comprise this attack surface, the tools we use to identify security vulnerabilities within them and the engineering approach we recommend to our clients, incorporating a Secure Development Lifecycle that should be adopted to reduce the risks of security vulnerabilities in future vehicle systems. The talk will include videos of some of the tools in action and some anonymised "war stories" from the many automotive engagements we have performed over the last four years.