Capabilities

Automotive security capabilities,
hardware through network

Shviro Lab researches, assesses and hardens automotive systems across hardware, firmware, diagnostics and in-vehicle networks.

Core Capabilities

Four capability groups

One continuous attack surface, assessed the way the vehicle is actually built.

ECU & Embedded Security

Hardware and firmware-level security analysis of automotive electronic control units.

  • Firmware analysis
  • Secure Boot
  • Bootloaders
  • Debug interfaces
  • JTAG / SWD
  • Flash / EEPROM
  • Hardware security
  • Cryptographic implementation

Vehicle Network Security

Security assessment of the communication systems connecting modern vehicle components.

  • CAN
  • CAN-FD
  • Automotive Ethernet
  • Gateways
  • Message filtering
  • Network attack surfaces
  • Protocol analysis

Diagnostic Security

Research and assessment of automotive diagnostic interfaces and services.

  • UDS
  • DoIP
  • Diagnostic sessions
  • Security Access
  • Authentication
  • Programming flows
  • Diagnostic attack surfaces

Vulnerability Research

Identification, analysis and responsible disclosure of vulnerabilities in automotive systems and components.

  • Reverse engineering
  • Attack-surface analysis
  • Vulnerability discovery
  • Exploitability assessment
  • Root-cause analysis
  • Security recommendations

What We Test

What We Test

Every layer inherits the assumptions of the layer beneath it. We test the chain, not the individual link.

  1. L5 Vehicle Network CAN / CAN-FD / Automotive Ethernet
  2. L4 Diagnostics UDS / DoIP / Programming
  3. L3 Firmware Application / Services / Crypto
  4. L2 Bootloader Update / Verification / Trust
  5. L1 Hardware Root of Trust MCU / HSM / Keys / Memory

Each layer is assessed in the context of the one beneath it. A weakness low in the stack changes what the layers above can assume.

Hardware

  • ECU
  • MCU / SoC
  • Debug Interfaces
  • Flash / EEPROM
  • HSM
  • Security Peripherals

Firmware

  • Bootloader
  • Application Firmware
  • Crypto
  • Update Mechanisms
  • Configuration

Vehicle Network

  • CAN
  • CAN-FD
  • LIN
  • Automotive Ethernet
  • Gateway

Diagnostics

  • UDS
  • DoIP
  • Programming
  • Security Access

Connected Vehicle

  • Telematics
  • OTA
  • Cloud APIs
  • Mobile Interfaces

Security Engineering

From Research to Security Engineering

Research findings matter when engineering teams can act on them. We work alongside development programmes to turn analysis into design and remediation decisions.

Threat Analysis & Risk Assessment

Automotive cybersecurity risk identification and security analysis.

Architecture Security

Security analysis across ECUs, gateways and vehicle communication architectures.

Security Testing

Hands-on assessment of hardware, firmware, diagnostics and networks.

Security Recommendations

Actionable remediation guidance for engineering teams.

Frameworks
  • ISO/SAE 21434
  • UNECE R155
  • UNECE R156
Our work references the automotive cybersecurity frameworks that engineering programmes are assessed against. Shviro Lab does not issue certification or homologation approval.

Have an ECU You Want to Break?

Let Shviro Lab assess its security before someone else does.

Request a Security AssessmentContact Shviro Lab