WeAreDevelopers Logo WeAreDevelopers
Sign in
For You LIVE
WeAreDevelopers LIVE • Oct 6, 2021

Cyber Security: Small, and Large!

Martin Schmiedecker

A single software bug in a connected vehicle can trigger a catastrophic physical event. Learn to integrate cryptographic foundations from the very first line of your embedded code.

Pause
Mute Enter Fullscreen
#1 about 4 min

Introduction to automotive security and digital forensics

Martin introduces his role investigating security incidents and details modern engineering focus on bespoke vehicle projects.

#2 about 3 min

Early explorations and academic research in automotive hacking

Academic research from 2011 reveals how spoofed sensor inputs and buffer overflows in media players enabled remote compromises.

#3 about 5 min

Highway compromise and wireless key fob vulnerabilities

High-profile remote attacks on driving cars and range extension tools prompted the industry to prioritize security against wireless threats.

#4 about 3 min

Advanced digital theft and vehicle odometer manipulation

Recent attacks demonstrate sophisticated token cloning for luxury vehicles and widespread tampering of digital odometers via consumer tools.

#5 about 2 min

Attacker motivations and the right to repair movement

Agricultural workers increasingly bypass software locks to repair necessary equipment while security researchers probe complex systems out of curiosity.

#6 about 5 min

Developer challenges in securing modern connected vehicles

Increasing vehicle network complexity introduces risks from supply chain attacks, wireless interfaces, and unauthenticated physical access by users.

#7 about 4 min

Software dependence and risks in autonomous driving algorithms

Relying on software abstraction for autonomous navigation introduces critical safety risks from issues like integer overflows and sensor spoofing.

#8 about 2 min

Transitioning to smartphones as secure digital vehicle keys

Replacing traditional key fobs with smartphone credentials offers better cryptography and seamless integration into modern shared mobility services.

#9 about 2 min

Navigating impending automotive security regulations and compliance

New international standards require manufacturers to implement auditable cybersecurity processes throughout a vehicle's entire production lifecycle.

#10 about 2 min

Following security research and continuous developer education

Developers must constantly track new vulnerabilities by engaging with networks alike the Automotive Security Research Group.

#11 about 3 min

Legal liability and software edge cases in autonomy

Tricky legal questions around automated accidents persist while engineers work to handle unpredictable edge cases safely in software.

#12 about 3 min

Standardization of hardware trust anchors in embedded systems

Implementing standardized cryptographic building blocks and hardware trust boundaries is essential for component verification but remains economically challenging.

#13 about 1 min

Programming languages optimized for embedded vehicle software

Embedded components rely on C, assembly, and custom firmware instead of full operating systems to guarantee fast execution times.

#14 about 4 min

Machine learning limitations and centralized server risks

The limitations of anomaly detection and the risks of centralized servers causing fleet-wide outages complicate fully connected vehicle deployments.

Matching moments

11:26 min

Identifying system risks and collaborative ecosystem legal challenges

Hans-Jürgen Eidler · LIVE

1:23 min

Adapting industry practices for long-term vehicle software security

Henning Harbs · World Congress 2023

5:14 min

Approaching vehicle connectivity, offline telemetry, and software cybersecurity

Denis Grahovac · World Congress 2021

4:22 min

Implementing automotive cybersecurity frameworks and compliance standards

Davor Frkat · LIVE

3:50 min

Managing cybersecurity risks throughout the entire vehicle lifecycle

Henning Harbs · World Congress 2023

3:11 min

Connected vehicle attack vectors and international cybersecurity regulations

Henning Harbs · World Congress 2023

More from WeAreDevelopers LIVE

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail
1:00:18
4 days ago

WeAreDevelopers LIVE - Tech Education in Two Languages

Daniel Cranney, Roxy Rodriguez-Becker

WeAreDevelopers LIVE - Playing in Production thumbnail
1:06:40
11 days ago

WeAreDevelopers LIVE - Playing in Production

Andrew MacLean, Daniel Cranney, Christian Heilmann

WeAreDevelopers LIVE - Is CSS Catching Up to Flash? thumbnail
1:03:33
25 days ago

WeAreDevelopers LIVE - Is CSS Catching Up to Flash?

Chris Heilmann, Daniel Cranney, Bramus Van Damme

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along thumbnail
1:21:17
about 1 month ago

WeAreDevelopers LIVE - Project Chopin: Make Your Team and Agents Play Along

Chris Heilmann, Daniel Cranney, Krzysztof Cieślak

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak thumbnail
4:23
about 1 month ago

Fake or News - AI Toothbrushes, Carrier Pigeon Tech & Life on Mars - Krzysztof Cieślak

Chris Heilmann, Daniel Cranney

WeAreDevelopers LIVE - Open Source Agent Toolkits thumbnail
1:00:38
about 1 month ago

WeAreDevelopers LIVE - Open Source Agent Toolkits

Chris Heilmann, Daniel Cranney, Eddie Jaoude

Upcoming sessions on this topic

Open session

Supply Chain Security for the Everyday Engineer

  • Pradumna Saraf

    Kestra Technologies

    Quality Assurance Engineer

Open session

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

  • Vikram Vaswani

    Consultant

Open session

Autopsy of an Autonomous Incident: When the Agent Made It Worse

  • Navin Pai

    StackGen

    Director of Engineering

Open session

How is SWE & EM roles are changing in the age of AI

  • Amol Sharma

    Stripe

    Engineering Manager

Open session

From Prompt Engineering to Harness Engineering: Building Observable and Governed GenAI Systems

  • Lakshmi Devi Prakash

    JPMorgan Chase

    VP, Applied AI/ML Lead

Open session

ULTRON: Your Agent Has No Hands - Real-Time Voice, MCP, and Ten Phones on Stage

  • Sagar Tamang

    Two Spoon Technologies

    AI Engineer

Related videos

Automotive Security Challenges: A Supplier's View thumbnail
58:59
LIVE • over 3 years ago

Automotive Security Challenges: A Supplier's View

Davor Frkat

Cybersecurity for Software Defined Vehicles thumbnail
22:09
World Congress 2023 • about 3 years ago

Cybersecurity for Software Defined Vehicles

Henning Harbs

On developing smartphones on wheels thumbnail
1:51:43
LIVE • almost 5 years ago

On developing smartphones on wheels

Hans-Jürgen Eidler

The future of automotive mobility: Upcoming E/E architectures, V2X and its challenges thumbnail
1:47:33
LIVE • over 4 years ago

The future of automotive mobility: Upcoming E/E architectures, V2X and its challenges

Georg Kühberger, Manuel Pascual

A Hitchhikers Guide to Container Security - Automotive Edition 2024 thumbnail
21:49
World Congress 2024 • about 2 years ago

A Hitchhikers Guide to Container Security - Automotive Edition 2024

Reinhard

Software defines the vehicle: Why customers and developers will love cars even more thumbnail
27:17
World Congress 2024 • about 2 years ago

Software defines the vehicle: Why customers and developers will love cars even more

Peter Bosch

Related articles

From learning to earning

Jobs that call for the skills explored in this talk.