_sorry, due to technical difficulties, the first few minutes are missing_ Modern cars and tractors are not only bare metal, a motor and wheels, but a complex system, controlled by software within electronic control units (ECU). Safety and usability play a big role in the development of those systems. Since those devices have to be adapted to more than one car type and in field and have to be operational for several decades. Robustness and flexibility is important - the car should work in harsh environments, the car repair shop should be able to troubleshoot the car and the original equipment manifacturer (OEM) needs to be able to adapt and update the software. The ECUs are connected via common communication protocols and offer several interfaces to other ECUs, diagnostics systems or troubleshooters. Security is also a concern, but with focus on threat scenarios, that may not be obvious to the end users. Since the ECUs contain intellectual property, sensitive information and should not be tamped with, the developers implemented security features and use cryptographic protocols. But are those measures and protocols State-of-the-Art and can withstand attacks even several years after the manufacture? This demonstration shows the implementation security features in diagnostics protocols of automotive electronic control units. It shows on real devices how a security tester approaches the analysis and how the devices defend against attacks.

Wieso hinterlassen unsere Cyber Security Tipps gefühlt einen weniger bleibenden Eindruck also so viele andere Werbungen, TikToks, und Produkte? Viele haben sich vermutlich diese (oder eine ähnliche) Frage schon einmal gestellt. In diesem Vortrag thematisieren wir wie die Erste Bank auf diese konkrete Frage gestoßen ist, welche Wege und fachliche Kooperationen wir schon gefunden haben und auch noch erkunden wollen um diese Herausforderung anzugehen.