Interes/ng data is in the applica/on layer.CAN ID is used as a priority ﬁeld – CAN ID 00 has priority over CAN ID 01.Data length can be 0 to 8 bytes in length.ECUs are running custom code on unusual hardware – Infotainment systems may be Linux/Windows variant, but func/on ECUs are custom code.Located in various places throughout the car.Take input from sensors and provide output to actuators.infotainment systems)Ĭontrols almost every aspect of the modern automobile Local can actually take longer due to being diﬀerent for every vehicle – Remote can span makes/models due to nature of OEM purchasing of devices (i.e.Both learning the local control and remote vulnerability are required.Remote vulnerability s/ll relies on ‘local’ informa/on – Example: A remote exploit targe/ng a vulnerability in the Bluetooth receiver is only harmful if the aJacker knows speciﬁc informa/on about the vehicle

Remote Telema/cs unit TPMS Bluetooth “Connec/vity” apps, Web browser, etcĬompromised ECU ABS ECU Steering ECU Other ECUs….Charlie Miller Chris Valasek INTRODUCTION

Ford vcm 2 linux