Keynote: Ready, Fire, Aim - Hacking State and Federal Law Enforcement Vehicles
Keynote speaker Alissa Knight exposes vulnerabilities in connected law enforcement vehicle telematics, enabling remote vehicle unlocking and siren hijacking.
Summary
The Connected Fleet in Law Enforcement and Public Safety
Modern police interceptors and federal law enforcement vehicles are equipped with sophisticated connected telematics, automated license plate readers, and remote dispatch consoles.
Reverse Engineering Law Enforcement Fleet Telematics APIs
Alissa Knight investigates mobile applications and cloud APIs used by law enforcement agencies, uncovering broken object level authorization (BOLA) flaws.
Demonstrating Remote Vehicle Takeover Vectors
Knight demonstrates how an attacker could track real-time patrol car locations, unlock doors, start engines, and hijack lightbars and sirens across hundreds of active police cruisers.
Hardening Emergency Vehicle Fleet Infrastructure
The keynote calls for rigorous third-party penetration testing, strict API gateway authentication, and isolated networks for emergency responder fleets.
Related talks
Car Hacking Village·30 min
Mohammed Shine
Mohammed Shine uncovers broken access controls in Honda Connect APIs, allowing unauthorized attackers to remotely unlock doors, start engines, and honk horns.
35th Annual FIRST Conference·35 min
Security researchers examine technical aspects of Cybercrime and Law Enforcement Evolutions and Improving Integration Within (...).
37th Annual FIRST Conference·55 min
Security researchers examine technical aspects of Friday Keynote Address - Network Security is a Team Sport, so How Do We Set and Manage the Team.