preview-image for Title image

The PROBoter software framework

July 10, 2023 #proboter #embedded security #secforcars #toolrelease

The last part of the PROBoter series showed how innovative algorithms can help an embedded system pentester to analyze recorded voltage signals of an unknown PCB. Besides basic signal characteristics, these algorithms can link signal lines and identify communication buses typically found on PCBs like I2C or SPI. In this final post of the PROBoter series, we draw the big picture of the PROBoter software framework. In parallel to the release of this post, all missing services forming the framework are released on the PROBoter Github repo.

preview-image for PROBoter title image

Visual PCB analysis with Neural Networks and classic Computer Vision algorithms

August 8, 2022 #proboter #embedded security #secforcars #toolrelease

The last part of the PROBoter series introduced the heart of the PROBoter framework - the hardware platform. The platform allows (semi) automated electrical probing of an unknown PCB which is usually a very time consuming and error prone task. This post focuses on methods to automate the initial analysis step of an embedded system - the visual analysis of the PCB(s) forming the device under test.

preview-image for PROBoter video title image

SecForCARs Demo Video of our PROBoter released

February 2, 2022 #proboter #automotive security #embedded security #secforcars #toolrelease #news

The PROBoter is a modular, self-calibrating probing machine to support PCB analysis tasks in penetration tests of embedded systems. The video of the PROBoter demonstrates its four main contributions: 1) The automatic visual detection of components and contact points on a PCB, 2) the automatic probing of contact points for net reversing and signal detection, 3) the mapping of signal lines to given bus protocols, and 4) the support in identification of potential attack vectors.

preview-image for PROBoter title image

The PROBoter hardware platform

February 2, 2022 #proboter #embedded security #secforcars #toolrelease

The first part of the PROBoter series gave an introduction to the manual process of embedded system pentesting. It then showed a possible automated workflow which will be implemented in the form of the PROBoter platform. After a longer phase of further internal development and evaluation, this post describes the core component of the PROBoter framework - a hardware platform for automated electrical probing and PCB image generation.

preview-image for Logo

SCHUTZWERK participated at escar Europe 2021 with two talks

November 15, 2021 #proboter #automotive security #event #research #secforcars

The escar is the world’s leading automotive cyber security conference. SCHUTZWERK participated at this year’s escar Europe with two talks. The first talk of Dr. Bastian Könings discussed the current challenges in automotive penetration testing. The second talk of Fabian Weber presented the PROBoter, a hardware platform to support penetration tests of embedded systems by automating time-consuming analysis tasks.

preview-image for Logo

Power analysis based software reverse engineering assisted by fuzzing II

September 3, 2020 #embedded security #secforcars #power analysis #reverse engineering #fuzzing #attacks

In the previous post a setup and a technique to extract a representative section of a powertrace of a specific instruction of a STM32F3 processor were described. This section is called a “template”. These templates should later be used to identify instructions via a power sidechannel and reconstruct the flow of an unknown program on a controller that can not be dumped via JTAG. In this part of our poweranalysis series the extracted templates from the previous post will be analyzed to determine whether they are representative enough to reverse engineer entire programs from a powertrace.


Power analysis based software reverse engineering assisted by fuzzing I

August 26, 2019 #embedded security #secforcars #power analysis #reverse engineering #fuzzing #attacks

This is the first part of a three part series about power analysis based software reverse engineering. It is part of our work in the SecForCARs project and the bachelor thesis ‘Poweranalyse basiertes Software Reverse Engineering mit Hilfe von Fuzzing’. The results will be summarized in this blogpost series. In this first part the goals of the research and the power analysis template extraction process are presented.

preview-image for Image of the Modify the Threats Tab of the TMTe4PT tool.

Threat Modeling with TMTe4PT

February 20, 2019 #threat modeling #toolrelease #automotive security #secforcars #embedded security

From a traditional point of view, vehicles used to be closed systems in which components communicated between each other over a central vehicle bus and no connection to remote systems was possible. However, this has drastically changed during the last years with increasing connectivity and autonomy of today’s vehicles. While car manufacturers have a long experience in dealing with safety problems, dealing with security risks raised by this development is a relatively new domain for them.

placeholder image igel_sm.png

Powerful IT security for the car of the future

May 25, 2018 #news #secforcars #automotive security #research #cooperation

Munich, Germany – 25 May 2018 – The more electronics steer, accelerate and brake cars, the more important it is to protect them against cyber-attacks. That is why 15 partners from industry and academia will work together over the next three years on new approaches to IT security in self-driving cars. The joint project goes by the name Security For Connected, Autonomous Cars (SecForCARs) and has funding of €7.2 million from the German Federal Ministry of Education and Research.

Free Consultation