Skip to main content

Michigan researchers show how easy it is to hack trucks

Cybersecurity researchers have already shown how easy it is to hack a Jeep Cherokee and take control of its brakes and steering, resulting in a recall for the vulnerability to be corrected. At the Usenix Workshop on Offensive Technologies conference next week, a group of University of Michigan researchers plan to demonstrate how trucks, which have also begun adding similar electronic control system, can be vulnerable to hacking. They plan to show how the openness of the SAE J1939 standard used across
August 5, 2016 Read time: 2 mins
Cybersecurity researchers have already shown how easy it is to hack a 1957 Jeep Cherokee and take control of its brakes and steering, resulting in a recall for the vulnerability to be corrected.

At the Usenix Workshop on Offensive Technologies conference next week, a group of University of Michigan researchers plan to demonstrate how trucks, which have also begun adding similar electronic control system, can be vulnerable to hacking.

They plan to show how the openness of the SAE J1939 standard used across all US heavy vehicle industries gives easy access for safety-critical attacks and that these attacks aren't limited to one specific make, model, or industry.

They will test their attacks on a 2006 Class-8 semi tractor and 2001 school bus and demonstrate how simple it is to replicate the kinds of attacks used on consumer vehicles and that it is possible to use the same attack on other vehicles that use the SAE J1939 standard.

They will also show safety critical attacks that include the ability to accelerate a truck in motion, disable the driver's ability to accelerate, and disable the vehicle's engine brake. Their presentation concludes with a discussion of the possibilities of additional attacks and potential remote attack vectors.

For more information on companies in this article

Related Content

  • High-res traffic data provides planners with the big picture
    November 5, 2015
    Road authorities have a lot to gain from high-resolution traffic data, argues Pravin Varaiya. Traffic engineers have traditionally been forced to operate with limited data regarding the performance of their arterials. Traffic studies are often commissioned once every three years, over a few days, to get an updated estimate of utilization.
  • Meeting the challenges of smartcard fare payment
    July 4, 2012
    David Crawford monitors a growing trend in contactless smartcard ticketing The north east United States has become a hive of activity in the smart fare payment arena. In October 2011, the New York Metropolitan Transportation Authority (MTA) published, as a preliminary to an imminent procurement process, the detailed concept of its New Fare Payment System (NFPS). Based on open payment industry standards, this is designed to be implemented on all MTA bus and subway services operated by New York City Transit (
  • ITS needs continuity at the policy-making level
    February 1, 2012
    ITS needs to be sold to politicians in plainer terms and we need to be encouraging greater continuity at the policy-making level says Josef Czako, chairman of the IRF's Policy Committee on ITS. At the ITS World Congress in New York in 2008, the International Road Federation (IRF) held the inaugural meeting of its Policy Committee on ITS. The Policy Committee's formation, says its chairman, Kapsch's Josef Czako, reflects an ongoing concern over the lack of deployment of ITS technology on roads in anything li
  • Keeping a weather eye on road conditions
    September 26, 2014
    Drive C2X has shown that advanced warning of poor road conditions could cut fatalities, as David Crawford explains. Connected vehicle (CV)-based warning technologies could mean 6% fewer deaths and 5% fewer injuries in road traffic accidents in Europe, according to the final results of the European Commission (EC) co-funded DRIVE C2X project. According to the European Centre for Information and Communication Technologies (EICT) which provided management support, these “prove that CV systems work and can hav