Car brakes ‘can be hacked via radio’

Car hack uses digital-radio broadcasts to seize control

Infotainment
Car infotainment systems can allow drivers to see vehicle status updates, play music and videos, view maps and in some cases run third-party apps

Several car infotainment systems are vulnerable to a hack attack that could potentially put lives at risk, a leading security company has said.

NCC Group said the exploit could be used to seize control of a vehicle’s brakes and other critical systems.

The Manchester-based company told the BBC it had found a way to carry out the attacks by sending data via digital audio broadcasting (DAB) radio signals.

It coincides with news of a similar flaw discovered by two US researchers.

Chris Valasek and Charlie Miller showed Wired magazine that they could take control of a Jeep Cherokee car by sending data to its internet-connected entertainment and navigation system via a mobile-phone network.

Chrysler has released a patch to address the problem.

However, NCC’s work – which has been restricted to its labs – points to a wider problem.

NCC Group was able to transmit the DAB signal using a laptop and a box made from easy-to-source parts

The UK’s Society of Motor Manufacturers and Traders has responded by saying that car companies “invest billions of pounds to keep vehicles secure as possible”.

Breached brakes

NCC demonstrated its technique to BBC Radio 4’s PM programme at its offices in Cheltenham.

By using relatively cheap off-the-shelf components connected to a laptop, the company’s research director, Andy Davis, created a DAB station.

Because infotainment systems processed DAB data to display text and pictures on car dashboard screens, he said, an attacker could send code that would let them take over the system.

Once an infotainment system had been compromised, he said, an attacker could use it as a way to control more critical systems, including steering and breaking.

Depending on the power of the transmitter, he said, a DAB broadcast could allow attackers to affect many cars at once.

“As this is a broadcast medium, if you had a vulnerability within a certain infotainment system in a certain manufacturer’s vehicle, by sending one stream of data, you could attack many cars simultaneously,” he said.

“[An attacker] would probably choose a common radio station to broadcast over the top of to make sure they reached the maximum number of target vehicles.”

Mr Davis declined to publicly identify which specific infotainment systems he had hacked, at this point.

Lab simulation

In many ways, modern cars are computer networks on wheels.

Mike Parris, of SBD, another company that specialises in vehicle security, said modern cars typically contained 50 interlinked computers running more than 50 million lines of code.

By contrast, he said, a modern airliner “has around 14 million lines of code”.

The addition of automated car controls are creating new opportunities for hackers

Such technology allows the latest cars to carry out automatic manoeuvres. For example, a driver can make their vehicle parallel park at the touch of a button.

Mr Davis said he had simulated his DAB-based attack only on equipment in his company’s buildings because it would be illegal and unsafe to do so in the outside world.

But he added that he had previously compromised a real vehicle’s automatic-braking system – designed to prevent it crashing into the car in front – by modifying an infotainment system, and he believed this could be replicated via a DAB broadcast.

“If someone were able to compromise the infotainment system, because of the architecture of its vehicle network, they would in some cases be able to disable the automatic breaking functionality,” he said.

Jeep attack

On Tuesday, Wired magazine reported that two US security researchers had managed to remotely take control of a Jeep Cherokee’s air-conditioning system, radio and windshield wipers while its journalist was driving the vehicle.

Wired magazine reported that a Jeep Cherokee had been hacked

Mr Valasek – director of vehicle security research at IOActive – said that NCC’s attack appeared to have similarities with his own.

“I mean that’s essentially what we did over the cell [mobile] network – we took over the infotainment system and from there reprogrammed certain pieces of the vehicle so we could send control commands,” he said.

“So, it sounds entirely plausible.”

But he added that such exploits were beyond the reach of most criminals.

“It takes a lot of time skill and money,” he said.

“That isn’t to say that there aren’t large organisations interested in it.”

More details about both the NCC and the US team’s research will be presented to the Black Hat security convention in Las Vegas next month.

This entry passed through the Full-Text RSS service – if this is your content and you’re reading it on someone else’s site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.

  1. I together with my pals were taking note of the best points on the website then quickly I had an awful suspicion I had not expressed respect to the website owner for those techniques. My ladies had been as a consequence happy to learn all of them and have in effect seriously been enjoying them. We appreciate you simply being indeed thoughtful and also for deciding upon this sort of excellent areas millions of individuals are really eager to understand about. My very own honest regret for not expressing gratitude to earlier.

  2. I enjoy you because of all of the hard work on this web page. My daughter delights in carrying out internet research and it’s easy to see why. A lot of people know all regarding the compelling method you produce worthwhile steps on the blog and therefore encourage response from other individuals on that area plus our girl is always studying a lot of things. Take advantage of the rest of the new year. You are always performing a superb job.

  3. I am just writing to let you understand what a cool experience my cousin’s girl obtained browsing yuor web blog. She discovered so many issues, which include what it’s like to possess an incredible giving character to have the mediocre ones without difficulty fully understand specific multifaceted topics. You truly did more than readers’ expected results. Many thanks for showing such precious, safe, educational as well as easy tips on that topic to Ethel.

  4. I definitely wanted to make a brief comment to be able to appreciate you for the nice hints you are giving out at this website. My extended internet search has now been recognized with good quality concept to share with my family. I would claim that most of us website visitors actually are unequivocally fortunate to live in a fabulous website with very many brilliant individuals with interesting strategies. I feel truly happy to have come across your entire website and look forward to tons of more fabulous minutes reading here. Thanks once again for a lot of things.

  5. My spouse and i were fulfilled John managed to finish up his inquiry because of the precious recommendations he was given out of your site. It is now and again perplexing to just choose to be giving away helpful hints that many others may have been making money from. We really see we need the writer to give thanks to for that. Most of the explanations you made, the easy site menu, the friendships your site help foster – it is all remarkable, and it’s really assisting our son in addition to our family know that that article is awesome, and that’s especially mandatory. Thank you for the whole thing!

  6. My husband and i ended up being quite thrilled Albert could finish up his analysis out of the precious recommendations he made from your own blog. It’s not at all simplistic just to continually be making a gift of instructions which men and women might have been making money from. We consider we now have you to appreciate because of that. All the illustrations you’ve made, the easy blog menu, the friendships you will give support to foster – it’s mostly impressive, and it’s making our son in addition to the family consider that this matter is cool, which is certainly pretty pressing. Many thanks for all the pieces!

  7. I precisely wished to appreciate you all over again. I’m not certain what I could possibly have worked on in the absence of the thoughts shown by you over such a problem. It truly was a very horrifying circumstance in my view, nevertheless taking note of the very expert approach you processed it took me to leap with joy. Extremely grateful for your work and trust you really know what a powerful job that you are putting in teaching many others using your webblog. Most probably you have never encountered any of us.

  8. I simply needed to thank you very much again. I’m not certain the things that I would have gone through in the absence of the entire tips and hints documented by you concerning such a theme. It had become a very daunting circumstance for me personally, nevertheless witnessing a new specialized manner you handled the issue forced me to cry with fulfillment. I’m just happier for this help and thus believe you are aware of an amazing job you were putting in teaching the rest through the use of a web site. More than likely you haven’t encountered all of us.

  9. I want to express my passion for your generosity supporting those people that really need help with this important concern. Your very own dedication to getting the message all-around appeared to be extraordinarily significant and have consistently empowered somebody much like me to achieve their desired goals. Your entire important guideline indicates a whole lot to me and further more to my office colleagues. Thank you; from all of us.

  10. I simply wanted to send a brief word so as to say thanks to you for some of the remarkable tricks you are writing at this site. My time-consuming internet search has at the end been paid with professional knowledge to talk about with my neighbours. I would claim that most of us visitors are really lucky to dwell in a superb place with very many marvellous professionals with interesting advice. I feel very grateful to have come across your entire web pages and look forward to many more thrilling minutes reading here. Thanks a lot once more for everything.

  11. I wish to point out my respect for your generosity supporting people that really want help on this area of interest. Your very own commitment to passing the solution along turned out to be incredibly important and have without exception encouraged guys and women just like me to get to their goals. Your valuable information can mean much to me and even further to my colleagues. Many thanks; from everyone of us.

  12. I precisely wanted to thank you so much yet again. I’m not certain what I might have tried in the absence of the type of suggestions revealed by you relating to such a area of interest. It actually was a frightening dilemma in my position, but spending time with the very professional strategy you dealt with the issue made me to weep with gladness. I’m thankful for this help and in addition hope that you realize what a great job that you’re doing teaching many people via your site. I know that you haven’t come across any of us.

  13. I needed to put you this tiny remark in order to say thanks as before relating to the marvelous advice you have shared above. It has been really pretty open-handed of people like you to offer unhampered all many people might have sold as an e-book to generate some dough for their own end, precisely seeing that you might well have tried it if you desired. The tactics additionally served to be a easy way to realize that many people have a similar keenness really like my very own to know the truth many more regarding this issue. I think there are some more enjoyable moments ahead for those who looked at your site.

  14. I have to express my admiration for your kind-heartedness supporting those who really need help with this important theme. Your personal commitment to getting the solution up and down had become remarkably productive and have in most cases helped most people just like me to reach their dreams. Your new interesting hints and tips signifies a lot to me and even further to my colleagues. Thank you; from each one of us.

  15. I just wanted to compose a small message so as to express gratitude to you for some of the awesome suggestions you are placing here. My incredibly long internet look up has at the end been compensated with useful knowledge to share with my good friends. I ‘d suppose that we readers are really lucky to dwell in a useful website with so many perfect individuals with good principles. I feel extremely happy to have encountered your entire website and look forward to so many more brilliant times reading here. Thank you once again for a lot of things.

  16. I would like to convey my admiration for your kind-heartedness in support of persons who really want assistance with the subject matter. Your personal dedication to getting the message up and down was really functional and have surely allowed those like me to arrive at their dreams. Your personal helpful hints and tips can mean a whole lot to me and still more to my office workers. Warm regards; from everyone of us.

  17. I am also commenting to let you understand of the amazing experience my friend’s girl found browsing yuor web blog. She even learned a wide variety of things, most notably how it is like to possess an ideal giving spirit to get many people very easily completely grasp selected impossible things. You undoubtedly surpassed our expected results. Thanks for showing the informative, safe, explanatory and in addition unique tips about this topic to Lizeth.

  18. I wanted to send you a bit of remark to be able to say thank you as before with your pleasing solutions you have featured on this page. It was simply particularly generous of people like you to give openly all a few individuals might have distributed as an ebook to help with making some profit on their own, primarily since you might well have tried it in case you desired. The principles additionally served like the good way to be sure that some people have the identical fervor much like my own to realize a great deal more when considering this problem. I know there are several more pleasurable situations up front for individuals who start reading your website.

  19. I would like to show some thanks to this writer just for bailing me out of this particular dilemma. As a result of looking through the world-wide-web and getting solutions which are not beneficial, I thought my entire life was well over. Being alive without the solutions to the difficulties you’ve solved as a result of your entire short post is a serious case, and the kind which may have badly affected my career if I had not discovered the blog. Your actual know-how and kindness in playing with a lot of stuff was priceless. I’m not sure what I would have done if I had not come across such a solution like this. I am able to at this moment look forward to my future. Thanks a lot very much for your high quality and result oriented help. I will not hesitate to suggest the website to any person who should have care about this situation.

  20. My spouse and i felt quite fortunate that Louis could finish off his basic research through the entire ideas he obtained when using the site. It’s not at all simplistic to simply be giving freely tips and hints which men and women may have been selling. So we see we have the writer to give thanks to for this. Those explanations you have made, the straightforward website menu, the relationships you will make it possible to foster – it’s got mostly fantastic, and it’s letting our son and the family do think that subject is entertaining, and that’s pretty mandatory. Many thanks for everything!

  21. I have to express some thanks to the writer just for bailing me out of this type of scenario. Right after exploring through the internet and finding techniques which are not helpful, I figured my life was well over. Living without the presence of answers to the difficulties you’ve resolved as a result of your main posting is a crucial case, as well as the kind which may have in a wrong way affected my career if I hadn’t come across your web page. Your mastery and kindness in dealing with all things was excellent. I am not sure what I would have done if I had not come upon such a subject like this. I am able to at this time look forward to my future. Thanks for your time very much for the specialized and result oriented help. I will not think twice to endorse the website to any person who ought to have direction on this topic.

  22. After I initially commented I clicked the -Notify me when new feedback are added- checkbox and now every time a comment is added I get 4 emails with the identical comment. Is there any way you possibly can take away me from that service? Thanks!

  23. I discovered your blog web site on google and verify a number of of your early posts. Proceed to keep up the very good operate. I just extra up your RSS feed to my MSN Information Reader. Searching for ahead to reading more from you afterward!?

  24. Thanks so much for providing individuals with remarkably marvellous opportunity to discover important secrets from this web site. It’s usually so pleasurable and as well , packed with amusement for me and my office fellow workers to visit your blog the equivalent of 3 times every week to study the newest tips you have. And indeed, I’m so always amazed with the sensational secrets you serve. Certain two facts in this article are really the most impressive we have all had.

  25. Youre so cool! I dont suppose Ive read something like this before. So nice to find someone with some original thoughts on this subject. realy thanks for starting this up. this website is something that’s wanted on the internet, somebody with somewhat originality. helpful job for bringing something new to the internet!

  26. This is the appropriate weblog for anybody who wants to find out about this topic. You realize a lot its almost laborious to argue with you (not that I actually would need匟aHa). You definitely put a brand new spin on a subject thats been written about for years. Great stuff, simply great!

  27. Thanks for all of your labor on this web site. Debby really likes going through investigation and it’s easy to see why. Most people know all regarding the lively means you present powerful ideas via your website and even invigorate participation from visitors on this matter while our daughter is truly starting to learn so much. Have fun with the rest of the new year. You are always doing a superb job.

  28. Youre so cool! I dont suppose Ive learn something like this before. So good to seek out somebody with some unique ideas on this subject. realy thanks for beginning this up. this website is one thing that’s wanted on the internet, somebody with a little originality. useful job for bringing something new to the internet!

  29. I wanted to send you one very little word to help thank you as before on your precious ideas you have contributed above. It’s simply pretty open-handed of people like you to grant unreservedly all some people might have advertised for an e book in making some profit for their own end, and in particular considering that you might well have tried it if you ever decided. Those inspiring ideas likewise served to provide a fantastic way to be certain that other individuals have the identical desire really like my very own to learn a lot more on the subject of this condition. Certainly there are some more pleasant opportunities up front for individuals that looked over your blog.

  30. This web page is really a stroll-via for all of the information you wished about this and didn抰 know who to ask. Glimpse right here, and also you抣l positively uncover it.

  31. I needed to post you one little bit of word to thank you as before with the marvelous methods you have contributed here. This is remarkably open-handed with you to present extensively what exactly a number of people might have offered for sale as an ebook to help with making some money for themselves, particularly since you could possibly have done it in case you desired. Those ideas additionally served to be a fantastic way to be sure that other people have the same fervor like my personal own to realize many more with reference to this matter. I’m sure there are a lot more pleasurable situations up front for those who looked over your blog post.

Leave a Reply

Your email address will not be published.