【サイバーセキュリティ 実践】車載ネットワークに対するサイバー攻撃シミュレーションとCAN通信の基礎知識

CAN-BUS Automotive Security: Cyberattack Simulation Course

Learn about cybersecurity threats targeting vehicle networks in this comprehensive course. Focus on CAN-BUS (Controller Area Network), the crucial communication protocol used in Electronic Control Units (ECUs) within modern vehicles. This course delves into simulated cyberattacks against automotive systems, specifically targeting the OBD2 (On Board Diagnostics) port, a common entry point for malicious actors.

What You'll Learn:

• CAN-BUS Architecture: Understand the fundamental principles of CAN communication and how ECUs interact within a vehicle network.
• Cybersecurity Threats: Explore various attack vectors targeting automotive systems, with a focus on threats originating from unauthorized access.
• OBD2 Exploitation: Learn how attackers can leverage the OBD2 interface for malicious purposes.
• Attack Simulation: Gain practical experience using the ICSim simulator to simulate real-world cyberattacks on vehicle networks.

Key Attack Techniques Covered:

• Replay Attacks: Understand how attackers can capture and retransmit valid CAN messages to manipulate vehicle behavior.
• Spoofing Attacks (CWE-294): Learn how to forge CAN messages to impersonate legitimate devices or control systems.
• Fuzzing Attacks (CWE-290): Discover how to use automated testing techniques to identify vulnerabilities in CAN-based systems.

Tools You'll Master:

• ICSim (Instrument Cluster Simulator for SocketCAN): A powerful CAN network simulator for creating realistic test environments.
• cangen: Generate dummy CAN frames for testing and simulation.
• candump: Capture, filter, and analyze CAN data for debugging and security analysis.
• cansniffer: Real-time CAN data monitoring and analysis.
• canplay: Play back recorded CAN data files for testing and replay attacks.
• cansend: Send individual CAN frames to test system responses.
• Metasploit Framework - Hardware Bridge: Automate attack exploitation using pre-built modules.
• SavvyCAN: Reverse engineer and capture CAN-BUS data for analysis.
• Wireshark: Analyze network traffic, including CAN packets, for detailed insights.

Important Notes:

• This course utilizes virtual CAN devices within a Kali Linux environment. No physical vehicles or ECUs are required.
• Out of Scope: The course does not cover physical attacks such as engine modifications ("bore up," "honing") or physical security measures (window film, steering wheel locks).
• Course Updates: The course is actively updated, with new content added since September 15, 2022. Recent additions include lectures and quizzes on CAN communication fundamentals and Metasploit Framework usage.

Course Updates:

• 2024/11/13: Added content
• 2024/11/12: Section: 車載ネットワークの基礎知識 - レクチャー: CAN通信における物理層の動き
• 2024/11/12: Section: 車載ネットワークの基礎知識 - レクチャー: 一問一答問題集 - 自動車整備技能登録試験 - CAN通信編
• 2024/11/11: Section: 車載ネットワークの基礎知識 - 小テスト:「自動車整備士 - 自動車整備技能登録試験[学科試験]」より改題
• 2022/12/12: Section: Metasploit Framework - レクチャー: Metasploit Framework - コマンド&リファレンス
• 2022/09/26: Section: Metasploit Framework - レクチャー: エクスプロイトモジュールを使用した攻撃の自動化
• 2022/09/26: Section: Metasploit Framework - レクチャー: Metasploit Hardware Bridge API
• 2022/09/26: Section: Metasploit Framework - レクチャー: msfconsoleによるautomotiveモジュールの検索
• 2022/09/19: Section: 電子制御ユニット(ECU)に車速を欺瞞させる - レクチャー: 電子制御ユニット(ECU)に車速を欺瞞させる - コマンド&リファレンス
• 2022/09/19: Section: 謝辞・参考文献

---