31-07-2013, 05:40 AM
And, yes, Barnaby Jack was on to car hacking cases....amongst others.
Quote: Original URL: http://www.theregister.co.uk/2012/08/21/...r_hacking/
McAfee puts Barnaby Jack on car-jacking hackers' case
Security whiz to thwart actual crashes
By John Leyden
Posted in Security, 21st August 2012 12:38 GMT
McAfee has put together an elite team of researchers to investigate how to go about protecting car systems from next-generation hacking attacks.
Members of the team include Barnaby Jack, the security researcher best known for demonstrating ways that crooks can force ATMs to spit out cash and for highlighting security shortcomings in insulin pumps.
Modern cars increasingly rely on embedded processors. Security researchers have already demonstrated how these embedded systems might be hacked to generating bogus tire blowout warning messages or pull off other dangerous exploits. Attack scenarios include injecting malware using via on-board diagnostics systems, wireless connections and booby-trapped CDs.
No such attacks have ever taken place in the real world but car manufacturers and auto industry associations are already aware of the possible risk.
SAE International, a global association of more than 128,000 engineers and related technical experts in the aerospace, automotive and commercial-vehicle industries, has put together a number of technical papers that look into information security risks that look beyond potential concerns about hacking into electronic vehicle access systems, which have been an issue for several years.
"Vehicles include more and more electronic systems and open communication channels based on public standards, making them vulnerable to a variety of attacks," the abstract to one recent SAE technical paper explains. "Security mitigation mechanisms are implemented in software and might be supported by a controller with basic security features," it adds.
"Any cyber security breach carries certain risk," said Jack Pokrzywa, SAE's manager of ground vehicle standards, the Daily Tech reports. "SAE Vehicle Electrical System Security Committee is working hard to develop specifications which will reduce that risk in the vehicle area."
Meanwhile Ford and Toyota have both recruited information security experts to look into the potential problem. Ford, for example, has hired infosec experts to make its SYNC in-vehicle communications and entertainment system more resistant against hackers and malware.
The McAfee team will be assigned to looking into much the same issues but with a slightly different mandate, geared towards developing security software and other protection technologies suitable for car-based embedded computing systems.
Bruce Snell, a McAfee executive managing the firm's research on car security, told Reuters via PCPro. "If your laptop crashes you'll have a bad day, but if your car crashes that could be life threatening.
"I don't think people need to panic now. But the future is really scary," he added. ®
Related stories
- Pacemaker hack legend Barnaby Jack dies just before Black Hat revelations (26 July 2013) http://www.theregister.co.uk/2013/07/26/...jack_dies/
- Police 'stumped' by car thefts using electronic skeleton key (6 June 2013) http://www.theregister.co.uk/2013/06/06/...e_stumped/
- McAfee: Cyber thugs will turn your car into Christine (8 September 2011) http://www.theregister.co.uk/2011/09/08/...isk_study/
- Hacker pwns police cruiser and lives to tell tale (3 May 2011) http://www.theregister.co.uk/2011/05/03/...r_hacking/
- Car immobilisers easily circumvented by crafty carjackers (20 December 2010) http://www.theregister.co.uk/2010/12/20/...ity_flaws/
- Thieves jam key-fob lock signals in mystery car thefts (21 September 2010) http://www.theregister.co.uk/2010/09/21/...heft_scam/
- Hackers spoof car warning system (13 August 2010) http://www.theregister.co.uk/2010/08/13/...less_hack/
- Boffins warn on car computer security risk (14 May 2010) http://www.theregister.co.uk/2010/05/14/...ity_risks/
- Ex-worker blamed for car immobilisation hack (18 March 2010) http://www.theregister.co.uk/2010/03/18/repo_man_hack/
- Ford preps anti-hacking tech for in-car WiFi (12 March 2010) http://www.theregister.co.uk/2010/03/12/...cure_wifi/
- Hey car thief! Gonna shut you down (10 October 2007) http://www.theregister.co.uk/2007/10/10/...car_theft/
- Crypto boffins break car cypher (24 August 2007) http://www.theregister.co.uk/2007/08/24/...her_crack/
- My RFID-embedded car numberplate has a virus (11 April 2007) http://www.theregister.co.uk/2007/04/11/...ds_mcafee/
- Car virus myth debunked (10 May 2005) http://www.theregister.co.uk/2005/05/10/..._debunked/
- 'Thiefproof' car key cracked (31 January 2005) http://www.theregister.co.uk/2005/01/31/...pto_alert/
"The philosophers have only interpreted the world, in various ways. The point, however, is to change it." Karl Marx
"He would, wouldn't he?" Mandy Rice-Davies. When asked in court whether she knew that Lord Astor had denied having sex with her.
“I think it would be a good idea” Ghandi, when asked about Western Civilisation.
"He would, wouldn't he?" Mandy Rice-Davies. When asked in court whether she knew that Lord Astor had denied having sex with her.
“I think it would be a good idea” Ghandi, when asked about Western Civilisation.