 So we're gonna we're gonna skip ahead right now to the presentation how hacking helps us that it originally been scheduled at 350 just to get some more time for Before any can come so this I think will be This is something that is a subject of great this a lot of debate and The word hacking has very different connotations depending on which crowd you are crowd sourcing We're fortunate today to have Tiffany rad a research scientist in the cyber security group at the Battelle Institute She's gonna give a presentation on this subject. Thank you, Tiffany Hi, I'm here talking to you sort of with with two hats that I'm gonna be wearing today during my brief 15-minute presentation I'm a research scientist at Battelle. I work in their cyber security group and I'm an embedded systems engineer doing some work with them on access and car computers and we're evaluating safety and security But tell is an institute that not a lot of people know about but it's a nonprofit based in Columbus, Ohio I work out of their Columbia, Maryland office, and I actually am proud to say my office is gonna be in a garage That's the kind of work I do. I don't have a cubicle. I work in a garage It's a 501c3 nonprofit which means about a large portion of yearly profits about 20% of Of the net goes toward putting money back into education and teaching students and the industry about the type of work that we do I'm also a founder of a hacker space and as as was mentioned hacker carries a lot of connotations Some of you may not have heard it from the term that I'm going to be using it But if you're here at this conference, you know what a maker maker space is hacker space kind of the same thing I take things apart and I figure out how they work and I work to design them better We we have about 250 members online at the hacker space and it's attached to a private high school so the high school students have access to the equipment in the hacker space during the day and the Adults at the hacker space come in to use it on nights and weekends We have a 3d printing group to which seems to be one of the most popular ones we have but I'm talking to you today about Accessing your car computer and actually the way I got my job at Battelle was I I'm the founder of a car hacking group at the hacker space We got together and we had about 40 people turn out and Everyone from mechanics to to people who tinker with their cars and the with the car computer and And attorneys such as myself I'm I have a bachelor's in science, but I'm also an attorney and have an MBA So I help get things up and companies up and going looking at the intellectual property and the business aspects of their ideas a Lot of cars right now If you take your car with a light on that says check engine if you take it to your local neighborhood mechanic They can fix a lot of with the car they can one of the problems They have those to be able to access the car computer to turn that idiot light off The check engine light off so your car can pass inspection after it's been fixed They can't do that they have to take you have to take your car to a dealer and they usually charge you about a hundred dollars Just to plug your car into their proprietary computer to say turn that check engine light off It's been fixed and a lot of the local mechanics said hey, that's not really fair We want to be able to do this, but now that cars have so many computers in them. This is making it a little bit more difficult So hence some of the research projects. I've been doing I've been accessing car computers for about 10 years And now professionally with Patel. This is one of the first times. I've been able to do it with another group of group of hackers and When you need to get your car service this becomes a problem And we're trying to alleviate some of those problems your car knows a lot more about what is going on with the computer Then it outputs to you if you purchase a car you shouldn't just have a license to the software that runs it I mean you want to be able to see what's information. It's storing about you for privacy purposes things like that So there's a lot that your car knows about you when you're driving that it doesn't output And so some of the things I'll talk to you about just very briefly are what we are researching right now That are outputted through like a federally mandated emission control standards and there's things that basic scan tool can do you So your car may not look like this Maybe that's a good thing actually But there are a lot of small computers in your car a whole lot of them And if you have a performance car whether it's performance sedan or a sports car It's even more and an interesting fact is that the premium class? Automobiles run about a hundred million lines of computer code and that's more than Boeing's new aircraft It's a lot of code. So what does that code? What does it do with all these computers in your car? It would be kind of interesting to be able to do more if you knew that maybe you could and Here's a little bit of a warning This is more from the legal side of things when you access your car's computer Are you this is actually a picture from my backyard in Maine? But what do you do when you're trying to access your car's computer? There's a layer of cryptography that if you break it you're going to be triggering something called the digital Millennium Copyright Act Unless you use by legal reverse engineering techniques getting to a lot of that code is very difficult to do and What's the problem is is when you're trying to research security or safety aspects of your car? You can't do that without breaking some of the cryptography Unless you do the very expensive and time-consuming legal reverse engineering So the DMCA is one of is really the the piece of legislation that we we are evaluating when we look at like How does this affect people that own cars what how you want to be able to access these things? so Now to kind of counter some of the issues I don't think the DMCA was initially enacted With the intent that it would prevent people from fixing and accessing their car computers It's kind of just the way that it that budget piece of legislation has worked out So we have the right to repair act It says one of the debates about this is the big automobile manufacturers don't really they're not really happy with this Act they say if people can access their computers in their cars they're going to be a lot of safety issues and What some of the other side the researchers are saying is there may be some safety issues We'd like to discover before things go wrong, but because we can't access the car computers. It's very difficult to do So the right to repair act unfortunately from the last time I've been able to see any reference of it It's stalled in committee, but it is an important act one of the things that The right to repair act allows is that you should have a lot to be able to diagnose and service your own vehicle your local neighborhood Mechanic will then be maybe a more of an even playing ground when it comes to the dealers I mean if you don't want to take your car to a dealer you should have an option to take it to someone who's local It'll sell tools and equipment to accomplish the same types of things like developing scan tools and things like that are It's very expensive, but it need not be there even Arduino projects right now where you can access a lot from your car computers But one of the things that is unfortunately is not defined in the act that I would have liked to have seen more about is You are not it just says that a mechanic can access these things But am I a mechanic some states actually have a definition of what a mechanic is you have to be licensed to ten different types of programs I don't do that. I've just been accessing car computers for ten years So I would have liked to have seen more about protecting individuals really really the do-it-yourself people who want to fix their own cars So accessing car computers for research and education I'm also a computer science professor at the University of Southern Maine, and I teach my students About ethics law and information security I teach them to think like hackers and I'll tell you in an accredited CS program This is something that has taken a little bit of time. Oh, sorry a little bit of time to Be able to get the faculty members used to it But understanding how things work and how things are being broken by people with malicious intent you'll be able to design things better This is the philosophy I have so I don't just teach my students about here's a history of different types of hacks that have occurred both on us government sites and on different types of technologies, but this is how they do it and Really, it's this type of knowledge isn't something that I believe should be suppressed or It should be shared especially an academic environment when you want to see how things are broken So my students hopefully will design them better and make better choices then Some have made when it comes to accessing computers and devices But what we're doing at Battelle is we are teaching people from the industry and I have a slide that'll show you how many But we have 20 high school students 20 college students a group from federal agencies like one from FBI one from DHS and We have STEM educators as well We have seven five to seven cars and we're going to have everyone accessing these car computers and One of the purposes for this is that we're teaching people About secure coding rugged coding programming and secure hardware design You can't tack on security and safety at the end it needs to be designed from like the first line of code to the last It is something that can be done It's just a different way of thinking that we're trying to bring into academia Into the industry and into the federal government and that's why we chose people from each sector to attend our our car hacking Institute It's actually called domain five con It's one week at Aberdeen proven grounds in Maryland and we put all the students up in the barracks And then we we take them to an aircraft carrier where we have all our cars and we teach them different kinds of things That they can access with the cars We're gonna have about five or five to seven American manufactured cars and we're gonna have different types of competitions It's to get the groups I mean in this group would be like a few from high school a few from college the government agents and all working together on a particular goal and that goal is different types of competitions. We're setting up such as reviewing You know how how easy it is to reset the odometer things like that the speedometer And this is really the breakdown of the type of people will have at this This camp and the reason I'm discussing this is because I listened to the conversations I was driving into DC the earlier presenters today STEM educators getting them to understand what we're doing in industry and how this will help academia as well and Maybe some of these these students coming up through the camp both from the high school and college level We'll want to do something similar join hacker spaces create new research new products but One of the things we're doing is also understanding what legal reverse engineering is what it isn't but We have a 45 foot trailer that we're going to be driving around the United States And I personally am not going to be driving this trailer but it's a race trailer with a car in the back and the car in the back can be hacked and The race trailer has this sort of stage that folds out and awning and chairs and we'll have teachers STEM educators from that area doing demonstrations for the students and allowing the students actually hands-on access to This is how you write code This is what the protocols look like when they're coming out of the car computer And we are doing this we were going to do it at tour camp and actually that's changed in the past few days Unfortunately, just because of timing we can't go to tour camp But we're driving this around the US and those of us security researchers but tell one or two of us will We'll meet the trailer wherever it's going to go, but we're doing this for colleges universities high schools And part of this is really the outreach to get students thinking this way and to get more people to Sort of challenge the notion that if you buy a car or you buy a computer or whatever that device is that you don't really You can't really know what's going on with it that you buy it and it's closed and locked up by intellectual property We're encouraging open standards when it comes to safety and security for vehicles And there's actually a group in the in the EU called Evita and what Evita is doing is there? They're creating a small secure platform for vehicles and they're doing that in an open platform So those of us other researchers can be able to access it too because when it does come to the safety and security the vehicles You drive I one of our philosophies is you really want to know how that car operates what it's doing And maybe you want to customize it as well. So that's kind of the do-it-yourself We're encouraging that type of thought and that kind of research So that's the end of my presentation that thank you very much