<- Back to the timetable

Software Defined Emissions

Felix „tmbinc“ Domke

A year ago, I showed how I pinpointed the cycle detection technique in the ECU software of a Volkswagen car. This talk will focus on the technical part of what has happened since then – how to reverse engineer an ECU, what other vendors do, what their reaction was, and putting the „isolated findings of a hacker“ into perspective. I’ll talk about data collection over CAN, understanding EGR/SCR control strategies (and how to characterize them), and how to find the needle in a 17000-element haystack (and how to understand whether it’s indeed a needle and or just a thin, cylindrical object with a sharp point at the end which legally does not represent a needle).

Download Slides
PDF ZIP JSON
0:00:07 - 0:00:12
0:00:49 - 0:01:08
0:01:09 - 0:01:23
0:01:33 - 0:01:42
0:01:58 - 0:02:03
0:02:56 - 0:03:05
0:03:16 - 0:03:20
0:03:20 - 0:03:24
0:03:25 - 0:03:36
0:03:37 - 0:03:52
0:04:02 - 0:04:05
0:04:06 - 0:04:11
0:04:14 - 0:04:16
0:04:17 - 0:04:21
0:04:27 - 0:04:37
0:05:34 - 0:05:42
0:05:54 - 0:06:08
0:06:15 - 0:06:19
0:06:37 - 0:06:59
0:06:59 - 0:07:09
0:07:32 - 0:07:34
0:07:36 - 0:07:38
0:08:24 - 0:08:31
0:08:54 - 0:08:58
0:09:08 - 0:09:13
0:09:31 - 0:09:42
0:09:52 - 0:10:02
0:10:40 - 0:10:44
0:10:55 - 0:11:02
0:11:09 - 0:11:12
0:11:12 - 0:11:14
0:11:32 - 0:11:36
0:11:46 - 0:11:52
0:12:17 - 0:12:40
0:12:50 - 0:13:10
0:13:12 - 0:13:14
0:13:24 - 0:13:34
0:14:50 - 0:14:56
0:15:05 - 0:15:11
0:15:30 - 0:15:35
0:15:39 - 0:15:44
0:15:56 - 0:16:07
0:16:21 - 0:16:24
0:16:29 - 0:16:33
0:16:34 - 0:16:36
0:16:37 - 0:16:44
0:16:49 - 0:16:53
0:17:03 - 0:17:10
0:17:16 - 0:17:21
0:17:31 - 0:17:35
0:18:10 - 0:18:14
0:18:14 - 0:18:17
0:18:17 - 0:18:20
0:18:21 - 0:18:23
0:18:25 - 0:18:33
0:18:52 - 0:18:56
0:19:11 - 0:19:15
0:19:22 - 0:19:33
0:19:56 - 0:19:58
0:19:59 - 0:20:17
0:20:20 - 0:20:28
0:20:32 - 0:20:37
0:20:42 - 0:20:44
0:20:52 - 0:20:54
0:21:20 - 0:21:24
0:21:40 - 0:21:47
0:21:59 - 0:22:09
0:22:21 - 0:22:31
0:22:42 - 0:22:50
0:23:00 - 0:23:02
0:23:22 - 0:23:30
0:23:33 - 0:23:35
0:23:35 - 0:23:48
0:23:55 - 0:23:57
0:24:06 - 0:24:21
0:24:21 - 0:24:31
0:24:34 - 0:25:03
0:25:32 - 0:25:37
0:25:37 - 0:25:52
0:26:05 - 0:26:08
0:26:15 - 0:26:20
0:26:25 - 0:26:34
0:26:37 - 0:26:40
0:26:55 - 0:27:00
0:27:02 - 0:27:05
0:27:05 - 0:27:11
0:27:18 - 0:27:24
0:27:25 - 0:27:27
0:27:43 - 0:27:52
0:28:17 - 0:28:22
0:28:23 - 0:28:27
0:28:36 - 0:28:45
0:28:57 - 0:29:03
0:29:16 - 0:29:19
0:29:21 - 0:29:25
0:29:27 - 0:29:31
0:29:31 - 0:29:34
0:29:49 - 0:29:55
0:30:09 - 0:30:14
0:30:18 - 0:30:21
0:30:25 - 0:30:31
0:30:36 - 0:30:42
0:30:59 - 0:31:06
0:31:15 - 0:31:20
0:31:35 - 0:31:37
0:31:39 - 0:31:44
0:31:57 - 0:32:07
0:32:39 - 0:32:47
0:32:48 - 0:32:52
0:32:52 - 0:33:07
0:33:07 - 0:33:33
0:34:09 - 0:34:15
0:34:34 - 0:34:40
0:34:44 - 0:35:00
0:35:36 - 0:35:40
0:35:51 - 0:35:54
0:36:05 - 0:36:14
0:37:16 - 0:37:19
0:37:49 - 0:37:52
0:37:54 - 0:37:57
0:38:35 - 0:38:42
0:38:58 - 0:39:02
0:39:07 - 0:39:11
0:39:16 - 0:39:21
0:39:40 - 0:39:44
0:39:48 - 0:39:50
0:39:56 - 0:39:59
0:40:15 - 0:40:17
0:40:28 - 0:40:31
0:40:47 - 0:40:51
0:41:01 - 0:41:04
0:41:25 - 0:41:27
0:41:57 - 0:41:59
0:42:03 - 0:42:08
0:42:12 - 0:42:14
0:42:35 - 0:42:38
0:42:39 - 0:42:41
0:42:44 - 0:42:47
0:42:50 - 0:42:53
0:43:00 - 0:43:06
0:43:48 - 0:43:51
0:44:02 - 0:44:08
0:44:38 - 0:44:43
0:44:48 - 0:44:53
0:44:59 - 0:45:04
0:46:15 - 0:46:21
0:46:33 - 0:46:39
0:46:54 - 0:47:03
0:47:14 - 0:47:17
0:48:18 - 0:48:21
0:48:56 - 0:48:59
0:49:06 - 0:49:10
0:49:46 - 0:49:56
0:50:47 - 0:50:49
0:51:19 - 0:51:25
0:51:48 - 0:52:05
0:52:30 - 0:52:36
0:52:48 - 0:52:55
0:53:21 - 0:53:30
0:54:50 - 0:54:58
1:00:14 - 1:00:18
1:00:19 - 1:00:23
1:00:23 - 1:00:28