Projects:2021s1-13003 Car Hacking - Revision history

A1686568: /* Introduction */

2021-10-21T03:05:36Z

‎Introduction

A1686568: /* Conclusion */

2021-10-21T03:03:28Z

‎Conclusion

A1686568: /* Results */

2021-10-21T02:49:45Z

‎Results

A1746150: /* Bosch CDR Analysis */

2021-10-21T02:48:15Z

‎Bosch CDR Analysis

A1746150: /* Bosch CDR Analysis */

2021-10-21T02:47:53Z

‎Bosch CDR Analysis

A1746150: /* Bosch CDR Analysis */

2021-10-21T02:45:21Z

‎Bosch CDR Analysis

A1686568: /* Analysing EDR Hardware */

2021-10-21T02:44:39Z

‎Analysing EDR Hardware

A1746150: /* Bosch CDR Analysis */

2021-10-21T02:44:33Z

‎Bosch CDR Analysis

A1686568: /* Analysing EDR Hardware */

2021-10-21T02:43:48Z

‎Analysing EDR Hardware

A1746150: /* Bosch CDR Analysis */

2021-10-21T02:41:52Z

‎Bosch CDR Analysis

← Older revision		Revision as of 03:05, 21 October 2021
Line 16:		Line 16:

	The position of our research is focused on a sub-module of the ACM known as the Event Data Recorder (EDR). The EDR is a data storage tool designed to capture all relevant data that is produced in a motor vehicle crash. The EDR is constantly storing and refreshing data in its memory with data from various motion and crash related sensors around the vehicle [1]. This data consists of information on vehicle speed, status of brakes (ON/OFF), throttle position, seat belt use and etc. This data can then be used to determine crash outcomes. It is used by SAPOL Major Crash for forensic analysis and insurance companies to determine who in the crash is liable. As this data has been used in the past as supporting evidence for crash re-creations, we as a group are interested in the trustworthiness of the information given by the EDR post-crash. More importantly, can this data be manipulated to benefit or relieve an individual of crash liability or even modified to reflect a different sequence of events.		The position of our research is focused on a sub-module of the ACM known as the Event Data Recorder (EDR). The EDR is a data storage tool designed to capture all relevant data that is produced in a motor vehicle crash. The EDR is constantly storing and refreshing data in its memory with data from various motion and crash related sensors around the vehicle [1]. This data consists of information on vehicle speed, status of brakes (ON/OFF), throttle position, seat belt use and etc. This data can then be used to determine crash outcomes. It is used by SAPOL Major Crash for forensic analysis and insurance companies to determine who in the crash is liable. As this data has been used in the past as supporting evidence for crash re-creations, we as a group are interested in the trustworthiness of the information given by the EDR post-crash. More importantly, can this data be manipulated to benefit or relieve an individual of crash liability or even modified to reflect a different sequence of events.
		+
		+	[[File:Screen Shot 2021-10-21 at 1.35.02 pm.png\|thumb\|center]]

	=== Project team ===		=== Project team ===

← Older revision		Revision as of 03:03, 21 October 2021
Line 55:		Line 55:

	== Conclusion ==		== Conclusion ==
		+	In conclusion, the Car Hacking 13003 group was able to identify potential security concerns within EDR systems. The group developed skills in hacking using available tools including the Buspirate, JTAGulator, and Arduino Board systems, accompanied with softwares including Minicom, Flashrom, and OpenOCD. The project concluded the primary area of concern for hacking into EDR systems was through the debugging interfaces (JTAG) present on the EDR microcontroller/microprocessor systems. Future research should focus on developing methods to utilise the debug interface on EDR microcontrollers. This could result in the development of data extraction and manipulation techniques on EDR systems and its firmware.

	== References ==		== References ==

@@ Line 53: / Line 53: @@
 The Bosch Crash Data Retrieval (CDR) tool is the dusty standard method of retrieval and analysis of crash data from a wide range of vehicle manufacturers. Through reverse engineering techniques and pattern analysis, the algorithms used by the CDR was replicated through Microsoft Excel using in-built functions. The Excel generator can determine up to 91% of outputs based on the hexadecimal data retrieved from an EDR. This generator will allow for prompt and easy and decoding of EDR data once it is obtained from an EDR.
 [[File:CDR1.png|frame|centre|Depiction of the Bosch Crash Data Retrieval (CDR) Tool used by CASR. The picture shows the CDR module (green) and the serial connections for computer to CDR and CDR to ACU.]]
 == Conclusion ==

@@ Line 52: / Line 52: @@
 The Bosch Crash Data Retrieval (CDR) tool is the dusty standard method of retrieval and analysis of crash data from a wide range of vehicle manufacturers. Through reverse engineering techniques and pattern analysis, the algorithms used by the CDR was replicated through Microsoft Excel using in-built functions. The Excel generator can determine up to 91% of outputs based on the hexadecimal data retrieved from an EDR. This generator will allow for prompt and easy and decoding of EDR data once it is obtained from an EDR.
-[[File:CDR1.png|frame|right|Depiction of the Bosch Crash Data Retrieval (CDR) Tool used by CASR. The picture shows the CDR module (green) and the serial connections for computer to CDR and CDR to ACU.]]
+[[File:CDR1.png|frame|centre|Depiction of the Bosch Crash Data Retrieval (CDR) Tool used by CASR. The picture shows the CDR module (green) and the serial connections for computer to CDR and CDR to ACU.]]
 == Results ==

@@ Line 52: / Line 52: @@
 The Bosch Crash Data Retrieval (CDR) tool is the dusty standard method of retrieval and analysis of crash data from a wide range of vehicle manufacturers. Through reverse engineering techniques and pattern analysis, the algorithms used by the CDR was replicated through Microsoft Excel using in-built functions. The Excel generator can determine up to 91% of outputs based on the hexadecimal data retrieved from an EDR. This generator will allow for prompt and easy and decoding of EDR data once it is obtained from an EDR.
-[[File:CDR1.PNG|frame|right|Depiction of the Bosch Crash Data Retrieval (CDR) Tool used by CASR. The picture shows the CDR module (green) and the serial connections for computer to CDR and CDR to ACU.]]
+[[File:CDR1.png|frame|right|Depiction of the Bosch Crash Data Retrieval (CDR) Tool used by CASR. The picture shows the CDR module (green) and the serial connections for computer to CDR and CDR to ACU.]]
 == Results ==

← Older revision		Revision as of 02:44, 21 October 2021
Line 44:		Line 44:


−	[[File:Screen Shot 2021-10-21 at 1.11.54 pm.png\|~~frame~~\|center\|Hacking Hardware Layout]]	+	[[File:Screen Shot 2021-10-21 at 1.11.54 pm.png\|thumb\|center\|Hacking Hardware Layout]]

	=== Reverse Engineering Firmware ===		=== Reverse Engineering Firmware ===

← Older revision		Revision as of 02:43, 21 October 2021
Line 44:		Line 44:


−	[[File:Screen Shot 2021-10-21 at 1.06.33 pm.png\|~~thumb~~]]	+	[[File:Screen Shot 2021-10-21 at 1.11.54 pm.png\|frame\|center\|Hacking Hardware Layout]]

	=== Reverse Engineering Firmware ===		=== Reverse Engineering Firmware ===

← Older revision		Revision as of 02:41, 21 October 2021
Line 52:		Line 52:

	The Bosch Crash Data Retrieval (CDR) tool is the dusty standard method of retrieval and analysis of crash data from a wide range of vehicle manufacturers. Through reverse engineering techniques and pattern analysis, the algorithms used by the CDR was replicated through Microsoft Excel using in-built functions. The Excel generator can determine up to 91% of outputs based on the hexadecimal data retrieved from an EDR. This generator will allow for prompt and easy and decoding of EDR data once it is obtained from an EDR.		The Bosch Crash Data Retrieval (CDR) tool is the dusty standard method of retrieval and analysis of crash data from a wide range of vehicle manufacturers. Through reverse engineering techniques and pattern analysis, the algorithms used by the CDR was replicated through Microsoft Excel using in-built functions. The Excel generator can determine up to 91% of outputs based on the hexadecimal data retrieved from an EDR. This generator will allow for prompt and easy and decoding of EDR data once it is obtained from an EDR.
		+
		+	[[File:CDR1.png\|thumb]]

	== Results ==		== Results ==