What this course is about
A comprehensive 2-day introduction to automotive cybersecurity. Starting with vehicle network fundamentals and progressing to diagnostic protocol exploitation, this training provides hands-on experience with real ECUs from major manufacturers. You will learn to analyze CAN traffic, reverse engineer checksum algorithms, exploit diagnostic protocols like UDS and CCP/XCP, and extract firmware from live hardware, all using open-source tools on a Raspberry Pi lab environment.
Agenda
Day 1: Vehicle Networks and Tools
Theory
- Modern car network layouts and gateway architectures
- Physical and link layer standards: CAN, CAN FD, LIN, FlexRay, Automotive Ethernet
- Hardware attacks on CAN bus and mitigation strategies
- Real-world CAN traffic with integrity checks, counters and checksums
- SecOC (Secure Onboard Communication) and cryptographic developments
Hands-on
- Analyzing live CAN traffic using Wireshark and Cabana
- Creating DBC files from CAN signals
- Physical layer attacks on CAN bus
- Checksum algorithm reverse engineering
- Message spoofing and replay attacks
Day 2: Diagnostic Protocols and Hardware
Theory
- Diagnostic protocols: OBD-II, KWP2000, UDS (ISO 14229-1)
- Calibration protocols: CCP and XCP
- Microcontroller architectures used in automotive ECUs
- PCB reverse engineering and firmware extraction methods
- Fault injection attacks and countermeasures
Hands-on
- UDS endpoint scanning and service enumeration
- CCP/XCP endpoint communication and data extraction
- Diagnostics over IP (DoIP) exploration
- ECU firmware extraction using debug probes and multiple methods
