Ali Islam - Weaponizing Hypervisors to Beat Car and Medical Device Attacks
Proposes using lightweight hypervisors as a security enforcement layer for automotive ECUs and implantable medical devices.
Summary
Hypervisors as Embedded Security Controls
Ali Islam, security researcher at Cylera, presents research on deploying Type-1 hypervisors on resource-constrained embedded systems to enforce security policy on automotive ECUs and medical devices.
The Threat Model
Modern vehicles contain 100+ ECUs with no mandatory security boundaries; medical implants run legacy code on ARM Cortex-M devices. Both classes of devices present life-safety risk if compromised remotely.
Hypervisor Architecture for Constrained Systems
Islam demonstrates a modified ACRN-based hypervisor running on automotive-grade ARM Cortex-A processors, providing VM isolation between safety-critical and connected functions, with memory protection unit (MPU) enforcement.
Attack Prevention
By isolating the infotainment system (internet-connected) from the powertrain domain in separate VMs with restricted inter-VM channels, the hypervisor prevents lateral movement attacks observed in prior Jeep and Tesla research.
Related talks
Main Stage·43 min
Yaniv Balmas · Lior Oppenheim
Yaniv Balmas and Lior Oppenheim demonstrate reverse engineering KVM switch firmware, subverting the 8051 microcontroller to install an undetectable, persistent hardware keylogger.
Main Stage·44 min
Yuriy Bulygin
Intel Security researcher Yuriy Bulygin explores firmware and hardware emulation vulnerabilities in modern hypervisors, demonstrating SMM privilege escalation from guest VMs.
Biohacking Village·26 min
Mixæl Laufer
Four Thieves Vinegar Collective founder Mixæl Laufer shares open-source medicine projects, decentralized hardware, and grassroots biohacking initiatives.