CANT

### Active Fault Injection on CAN Networks At 00:00, Tim (Bit-Man) introduces CANT (Controller Area Network Testing tool), an open-source hardware and software platform designed for active CAN bus manipulation and fault injection at the Car Hacking Village. Tim discusses the limitations of passive sniffing and the need for precision packet manipulation.

### Physical Layer Dynamics: Dominant vs. Recessive Bits At 11:00, the speaker breaks down CAN data link layer mechanics, explaining how dominant (0) and recessive (1) states dictate bus arbitration. He details how CAN controllers monitor their own transmissions and trigger hardware error frames whenever the read bus state contradicts transmitted bits.

### Targeted Denial of Service and Bus-Off Attacks At 21:23, Tim details the attack capabilities built into CANT. By continuously injecting dominant bits into specific arbitration identifiers, CANT forces target ECUs to increment their internal Transmit Error Counters (TEC) until they enter the bus-off state, severing the module's communication with the rest of the vehicle.

### Live Hardware Demonstration on Vehicle Modules At 35:24, Tim demonstrates CANT against real-world automotive instrument clusters. He showcases how synchronous bit manipulation corrupts diagnostic communication and causes vehicle telemetry gauges and display screens to malfunction without crashing the entire CAN network.

### Defensive Engineering and CAN-FD Migration Concluding between 40:00 and 48:33, the presentation explores defensive countermeasures against physical-layer attacks. Tim emphasizes network segmentation, automated anomaly detection for bus error frequency, and the automotive industry's ongoing transition toward CAN-FD with cryptographic payload authentication.

(AI summary — Gemini Flash)