With the rapid increase in interconnectedness and digitization in the automotive sector, the potential attack surface for vehicles, both present and future, is constantly expanding. The 2015 Jeep-Hack incident demonstrated the severity of vulnerabilities in vehicle systems, highlighting the direct threats to human safety and well-being due to the physical nature of vehicles. Additionally, risks encompass accessing personal data, unlocking paid services, and more. Conducting IT security assessments of vehicles and their integrated control units has become imperative to mitigate potential high-impact attacks.
In Automotive Security Assessments, we scrutinize individual electronic control units and entire vehicles for vulnerabilities related to these attack vectors. The assessment encompasses both hardware and software analyses of control units. The evaluator assumes the role of both an external attacker and a privileged user. Potential attacks range from memory dumping and man-in-the-middle attacks to exploiti