In preparation
Secure Boot
When Secure Boot Is Not EnoughUnderstanding Automotive Trust Boundaries
Where a verified boot chain still leaves room for an attacker, and what the verification actually guarantees.
In preparation
Diagnostics
UDS SecurityWhere Diagnostic Functionality Becomes an Attack Surface
Session control, Security Access and programming services examined as a security boundary rather than a service list.
In preparation
Vehicle Networks
Inside the Automotive CAN Attack SurfaceMessage handling, trust assumptions and abuse cases
What an ECU assumes about the bus it is attached to, and what happens when those assumptions are wrong.
In preparation
Firmware
ECU Firmware Reverse EngineeringWhat the Binary Can Reveal
Moving from an extracted image to a map of handlers, services and cryptographic operations.
In preparation
Hardware
Automotive Debug InterfacesJTAG, SWD and Production Security
The gap between a debug port being disabled in the specification and being unreachable on a production part.
In preparation
Vehicle Networks
Gateway Security in Modern Vehicle ArchitecturesRouting, filtering and segmentation
The gateway as the enforcement point between vehicle network domains, and how that enforcement is tested.
In preparation
Vehicle Networks
Automotive Ethernet Security FundamentalsFrom 100BASE-T1 up the stack
What changes for security when in-vehicle communication moves to switched Ethernet and IP-based services.
In preparation
Vulnerability Research
Automotive Vulnerability Research and Responsible DisclosureFrom discovery to coordinated remediation
How automotive supply chains and long product lifecycles shape the disclosure process.
In preparation
Vulnerability Research
Automotive CVE AnalysisFrom Vulnerability to Vehicle Impact
Reading a published automotive vulnerability and reasoning about what it means at vehicle level.