Research

Security Research

Hands-on research across automotive hardware, firmware and communication layers. Published work and the topics currently in preparation.

Featured · ECU Security

The Automotive ECU Attack SurfaceFrom Boot ROM to UDS

An ECU’s attack surface is not a single interface. It is a chain of trust boundaries running from the hardware root of trust through the bootloader and firmware out to diagnostics and the vehicle network. This article walks that chain.

  1. L5 Vehicle Network CAN / CAN-FD / Automotive Ethernet
  2. L4 Diagnostics UDS / DoIP / Programming
  3. L3 Firmware Application / Services / Crypto
  4. L2 Bootloader Update / Verification / Trust
  5. L1 Hardware Root of Trust MCU / HSM / Keys / Memory

Research Areas

Where we focus

ECU Reverse Engineering

Firmware extraction, static analysis, dynamic analysis and attack-surface mapping of automotive ECUs.

Secure Boot Research

Analysis of boot chains, trust anchors, cryptographic verification and secure update mechanisms.

CAN Security Research

Analysis of in-vehicle communication, message handling, gateways and protocol abuse cases.

UDS Security Research

Analysis of diagnostic services, session handling, authentication and ECU programming interfaces.

Automotive Vulnerability Research

Discovery and root-cause analysis of security weaknesses in automotive components and embedded platforms.

Articles

Research & Insights

New articles are added to this index as they are published.

In preparation

Secure Boot

When Secure Boot Is Not EnoughUnderstanding Automotive Trust Boundaries

Where a verified boot chain still leaves room for an attacker, and what the verification actually guarantees.

In preparation

Diagnostics

UDS SecurityWhere Diagnostic Functionality Becomes an Attack Surface

Session control, Security Access and programming services examined as a security boundary rather than a service list.

In preparation

Vehicle Networks

Inside the Automotive CAN Attack SurfaceMessage handling, trust assumptions and abuse cases

What an ECU assumes about the bus it is attached to, and what happens when those assumptions are wrong.

In preparation

Firmware

ECU Firmware Reverse EngineeringWhat the Binary Can Reveal

Moving from an extracted image to a map of handlers, services and cryptographic operations.

In preparation

Hardware

Automotive Debug InterfacesJTAG, SWD and Production Security

The gap between a debug port being disabled in the specification and being unreachable on a production part.

In preparation

Vehicle Networks

Gateway Security in Modern Vehicle ArchitecturesRouting, filtering and segmentation

The gateway as the enforcement point between vehicle network domains, and how that enforcement is tested.

In preparation

Vehicle Networks

Automotive Ethernet Security FundamentalsFrom 100BASE-T1 up the stack

What changes for security when in-vehicle communication moves to switched Ethernet and IP-based services.

In preparation

Vulnerability Research

Automotive Vulnerability Research and Responsible DisclosureFrom discovery to coordinated remediation

How automotive supply chains and long product lifecycles shape the disclosure process.

In preparation

Vulnerability Research

Automotive CVE AnalysisFrom Vulnerability to Vehicle Impact

Reading a published automotive vulnerability and reasoning about what it means at vehicle level.

Have an ECU You Want to Break?

Let Shviro Lab assess its security before someone else does.