Cars hacked through wireless tire sensors
08-11-2010, 03:10 PM
#1
Members
Thread Starter
Join Date: Nov 2009
Location: Honolulu, Hawaii
Posts: 137
Likes: 0
Received 0 Likes
on
0 Posts
The tire pressure monitors built into modern cars have been shown to be insecure by researchers from Rutgers University and the University of South Carolina. The wireless sensors, compulsory in new automobiles in the US since 2008, can be used to track vehicles or feed bad data to the electronic control units (ECU), causing them to malfunction.
Earlier in the year, researchers from the University of Washington and University of California San Diego showed that the ECUs could be hacked, giving attackers the ability to be both annoying, by enabling wipers or honking the horn, and dangerous, by disabling the brakes or jamming the accelerator.
The new research shows that other systems in the vehicle are similarly insecure. The tire pressure monitors are notable because they're wireless, allowing attacks to be made from adjacent vehicles. The researchers used equipment costing $1,500, including radio sensors and special software, to eavesdrop on, and interfere with, two different tire pressure monitoring systems.
The pressure sensors contain unique IDs, so merely eavesdropping enabled the researchers to identify and track vehicles remotely. Beyond this, they could alter and forge the readings to cause warning lights on the dashboard to turn on, or even crash the ECU completely.
Unlike the work earlier this year, these attacks are more of a nuisance than any real danger; the tire sensors only send a message every 60-90 seconds, giving attackers little opportunity to compromise systems or cause any real damage. Nonetheless, both pieces of research demonstrate that these in-car computers have been designed with ineffective security measures.
The Rutgers and South Carolina research will be presented at the USENIX Security conference later this week.
http://arstechnica.com/security/news...re-sensors.ars
Earlier in the year, researchers from the University of Washington and University of California San Diego showed that the ECUs could be hacked, giving attackers the ability to be both annoying, by enabling wipers or honking the horn, and dangerous, by disabling the brakes or jamming the accelerator.
The new research shows that other systems in the vehicle are similarly insecure. The tire pressure monitors are notable because they're wireless, allowing attacks to be made from adjacent vehicles. The researchers used equipment costing $1,500, including radio sensors and special software, to eavesdrop on, and interfere with, two different tire pressure monitoring systems.
The pressure sensors contain unique IDs, so merely eavesdropping enabled the researchers to identify and track vehicles remotely. Beyond this, they could alter and forge the readings to cause warning lights on the dashboard to turn on, or even crash the ECU completely.
Unlike the work earlier this year, these attacks are more of a nuisance than any real danger; the tire sensors only send a message every 60-90 seconds, giving attackers little opportunity to compromise systems or cause any real damage. Nonetheless, both pieces of research demonstrate that these in-car computers have been designed with ineffective security measures.
The Rutgers and South Carolina research will be presented at the USENIX Security conference later this week.
http://arstechnica.com/security/news...re-sensors.ars
08-11-2010, 05:12 PM
#3
Members
Join Date: Mar 2010
Location: Michigan
Posts: 82
Likes: 0
Received 0 Likes
on
0 Posts
How could you disable the brakes from the ECU? ABS/stability yes, but the brakes are hydraulic.
I'm not worried though, my car has a firewall and the Symantec Anti-virus mod...
I'm not worried though, my car has a firewall and the Symantec Anti-virus mod...
Thread
Thread Starter
Forum
Replies
Last Post
socale39
Complete Car Sales
9
09-05-2023 08:30 AM
JonathonK
Other BMW Models
0
03-11-2015 03:13 PM