Gareth Davies
University of South Wales, UK
Title: Cyber investiagtions: digital forensics & automobile electronics II
Biography
Biography: Gareth Davies
Abstract
Today’s vehicles are fitted with systems that deliver a more connected driving experience than ever before, with many automobile companies rolling out systems capable of synchronising with both the owner’s and passenger’s device(s) via wired and wireless interfaces. This makes for a vehicle environment in which advanced device interactivity becomes possible.What’s more, most of the in-car systems are connected to the CAN bus – a dedicated central network on which the various ECU components communicate. With this in mind, it is believed that the systems in question have the potential to generate and maintain evidence that may be of digital forensic value. Considering the nature of forensics, it is paramount for emerging technology to be identified and investigated early. Research work undertaken into three different vehicle infotainment systems–namely the Ford Sync module, Volkswagen, and Mercedes are discussed. The results of said research are surprising with large amounts of relevant data pulled from the systems– certainly enough to entice the field on bringing more attention to the subject of cyber security and cyber vehicle forensics. In recent years the focus on infotainment system and assisted driving have pushed the automobile industry towards a more synchronised environment. Owners are now able to not only access what can now be considered as simple features reading content from CDs/DVDs/SD Cards/USBs, but also carry out more advanced operations such as, using in-built GPS navigation, pairing their mobile devices for app utilisation; accessing calls/texts and other app communications, surfing the web via an inbuilt SIM card and web browser, or even performing basic vehicle operations such as locking/unlocking/honking via an app that connects the owner's mobile device to the vehicle. Creating such a synchronised environment and by introducing additional data channels it is likely that a wealth of relevant forensics information is in existentence on various car platforms, which could provide value in an investigation, however, with the many different infotainment systems and manufacturers, paired with the current lack of research and focus in this area
of forensics, data acquisition is difficult, oftern unreliable and certainly a challenge to interpret from these bespoke systems.