Today, there is no shortage of videos on YouTube and news stories across different media outlets of the vulnerabilities in connected cars that allow hackers to threaten the safety of passengers and others on the road. Numerous presentations, including those published by Alissa Knight in hacking connected cars are pervasive across connected car security conferences around the world. However, when it comes to threat modeling and risk assessments, there is very little information or tacit knowledge on how to do this – creating a knowledge gap and talent shortage for OEMs looking for help in these areas. While information on performing IT risk assessments is prevalent, performing risk assessments against electronic control units and infotainment systems is far different than enterprise risk management. Alissa Knight will present several methods she uses in threat modeling as well as provide a step-by-step guide in performing a risk assessment against ECUs and Head Units contained in her book being published later this year. Attendees will also walk away with a free tool and procedure document she developed allowing you to put into practice the methodologies she presents.
Vorkenntnisse
No specific skills required.
Lernziele
Understanding risk assessment.
//
Alissa Knight
@alissaknight
is the Group CEO of Brier & Thorn and also heads up its Connected Car Division. She has performed dozens of penetration tests and risk assessments against IoT devices, embedded systems, and connected cars for some of the largest OEMs in the US, Europe, and Asia. She is the author of a book being published in late 2018 on Hacking Connected Cars. Alissa has worked in cybersecurity for the past 18 years, first starting out as a penetration tester and forensic analyst, she now focuses her time on research into vulnerabilities affecting connected devices. Alissa is a serial entrepreneur, having started and sold two previous companies, she now runs Brier & Thorn’s global network of member firms and is also a venture capitalist investing in startups in the IoT space at her VC firm, Kensington Park Capital.