Automotive USB Fuzzing
Presents an in-vehicle USB kernel fuzzing framework directly connected to production vehicles, discovering zero-days across Volkswagen, Renault, GM, and AGL.
Summary
The Limitations of Conventional Automotive Media Fuzzing
Automotive security evaluations typically test In-Vehicle Infotainment (IVI) media decoders in isolated desktop emulators rather than testing live hardware connected to in-vehicle buses.
Developing Direct In-Vehicle USB Fuzzing Frameworks
Euntae Jang, Donghyon Jeong, and Jonghyuk Song introduce an automated USB fuzzing harness that connects directly to production vehicle head units over physical USB interfaces.
Fuzzing Automotive Kernel Drivers and Media Parsers
Injecting malformed USB descriptor packets and corrupt media streams uncovered severe memory corruption flaws in operating system kernels and Automotive Grade Linux (AGL) distributions.
Real-World Zero-Days Across Major Automakers
Case studies detail reproducible crash and code execution vulnerabilities identified in production Volkswagen Jetta, Renault Zoe, and Chevrolet Equinox infotainment systems.
Related talks
Village Presentations·45 min
Matt DuHarte
Matt DuHarte introduces USB protocol architectures, descriptor negotiation, and fuzzing embedded USB host stacks and operating system kernel drivers.
Car Hacking Village·30 min
Soohwan Oh · Jonghyuk Song · Jeongho Yang
Researchers present smart black-box fuzzing for automotive ECUs, generating protocol-aware UDS CAN testcases and handling recovery without coverage feedback.
Black Hat·33 min
Engineers explore architecture and security mechanisms for Achieving Linux Kernel Code Execution Through a Malicious USB Device.