Skip to main content

Michigan researchers show how easy it is to hack trucks

Cybersecurity researchers have already shown how easy it is to hack a Jeep Cherokee and take control of its brakes and steering, resulting in a recall for the vulnerability to be corrected. At the Usenix Workshop on Offensive Technologies conference next week, a group of University of Michigan researchers plan to demonstrate how trucks, which have also begun adding similar electronic control system, can be vulnerable to hacking. They plan to show how the openness of the SAE J1939 standard used across
August 5, 2016 Read time: 2 mins
Cybersecurity researchers have already shown how easy it is to hack a 1957 Jeep Cherokee and take control of its brakes and steering, resulting in a recall for the vulnerability to be corrected.

At the Usenix Workshop on Offensive Technologies conference next week, a group of University of Michigan researchers plan to demonstrate how trucks, which have also begun adding similar electronic control system, can be vulnerable to hacking.

They plan to show how the openness of the SAE J1939 standard used across all US heavy vehicle industries gives easy access for safety-critical attacks and that these attacks aren't limited to one specific make, model, or industry.

They will test their attacks on a 2006 Class-8 semi tractor and 2001 school bus and demonstrate how simple it is to replicate the kinds of attacks used on consumer vehicles and that it is possible to use the same attack on other vehicles that use the SAE J1939 standard.

They will also show safety critical attacks that include the ability to accelerate a truck in motion, disable the driver's ability to accelerate, and disable the vehicle's engine brake. Their presentation concludes with a discussion of the possibilities of additional attacks and potential remote attack vectors.

For more information on companies in this article

Related Content

  • Six easy steps to security
    October 22, 2018
    As security threats become increasingly vast and varied, multinationals are beginning to see the need for an effective global security operations centre to protect their organisation. James I. Chong spells out what is required. You know you need a global security operations centre (GSOC) to support what you’ve built, identify threats, and prevent disasters before they happen - but how do you know if it’s truly effective? There’s no shortage of information coming into operation centres. Too often, it’s the
  • Guidelines on cyber security for connected and automated vehicles ‘doesn’t go far enough’
    August 8, 2017
    David Barzilai, chairman and co-founder of automotive cyber-security firm, Karamba Security, has applauded the UK government for taking pre-emptive action and zeroing in on preventing cyber-attacks as critical for the adoption of self-driving cars on a mass scale. However, he says the guidelines don’t go far enough toward effectively preventing car hacking, saying cars are not servers or mobile phones that can sustain the risk of hidden security bugs. The time it takes to remediate such bugs in production,
  • ASECAP examines tolling during downturns
    September 22, 2014
    ASECAP debated the impact of the financial crises on Europe’s tolling companies and considered the future in diverse economies. Colin Sowman picks some of the highlights. This year ASECAP (Association Europeenne des Concessionnaires d’Autoroutes et d’Ouvrages a’ Peage, with members in 21 countries managing 46,000km of roadway) held its annual Study & Information Days in Athens, Greece – one of the country hardest hit by recent economic problems. While the theme of the conference, Ensuring Sustainability in
  • America explores road user charging options
    November 14, 2017
    Jack Opiola casts an eye over the numerous road user charging pilots underway in the US. In the USA, congestion mitigation and improving mobility have often focused on network improvements, increased road capacity, improved public transport, high-occupancy toll (HOT) lanes or ‘express lanes’ and ITS measures – all of which require political capital and major funding. Nowadays, political capital is as hard to obtain as funding because more political leaders are recognising the decline of fuel excise tax