自動(dòng)駕駛域控制-2024-05-自動(dòng)駕駛

TheKeytoRemoteVehicleControl:AutonomousDrivingDomainController#BHASIA@BlackHatEventsTraditionalCarsTraditionalCars#BHASIA@BlackHatEventsCurrentCarsCurrentCars#BHASIA@BlackHatEventsFutureCarsFutureCars#BHASIA@BlackHatEventsTheEvolutionofBMW3SeriesElectronicSystems#BHASIA@BlackHatEvents關(guān)于自動(dòng)駕駛域控制器#關(guān)于自動(dòng)駕駛域控制器#BHASIA@BlackHatEventsOurPreviousResearchOurPreviousResearchOntheIVI#BHASIA@BlackHatEventsOurPreviousResearcOurPreviousResearchOntheT-Box#BHASIA@BlackHatEventsOurPreviousResearchOnthOurPreviousResearchOnthe4GModule#BHASIA@BlackHatEvents#BHASIA@BlackHatEventsRegardingAutonomousDrivingDomainControllRegardingAutonomousDrivingDomainControllers#BHASIA@BlackHatEventsWhyWhy#BHASIA@BlackHatEventsWhyResearchADAS?WhyResearchADAS?Finalgoal:EnhancingthesecurityofADASdevices.#BHASIA@BlackHatEventsWhyResearchADAS--HighComplexityWhyResearchADAS--HighComplexityNIOCenterComputingClusterSystem:4xLinux1xAndroid(QNXVM)SoC:4xNvidiaOrin-X1xQualcommSA8155MCU:2xTC3991xTC3974xEMMC5xUFSMorethan1000+TOPS@int8(RTX4090660TOPS@int8)#BHASIA@BlackHatEventsWhyResearchADAS--HighComplexWhyResearchADAS--HighComplexity/product/xpeng-service-repair-manual-circuit-diagram/#BHASIA@BlackHatEventsWhyResearchWhyResearchADAS–NewArchitecture-EthernetConnectivity/pr#BHASIA@BlackHatEventsWhyResearchWhyResearchADAS–NewArchitecture-EthernetConnectivity#BHASIA@BlackHatEvents/product/im-l7-ls7-#BHASIA@BlackHatEvents##BHASIA@BlackHatEventschassisCANchassisCANWhyResearchADAS--ControWhyResearchADAS--ControllableVehiclesADASisconnectedtoPowertrainCANandChassisCAN.CANCANItNaturallyControlsVehicles/product/im-l7-ls7-WhatWhat#BHASIA@BlackHatEventsMoreThan30+ADASDeMoreThan30+ADASDevices#BHASIA@BlackHatEventsTheDevelopmentProcessofTheDevelopmentProcessofADASControllers--FPGAACC/LKAACC/LKA#BHASIA@BlackHatEventsArmCPUwithAIInferenceCapabilities(FrontCameArmCPUwithAIInferenceCapabilities(FrontCamera)MobileyeQ4M/H1.1~2TOPSHorizonJourney24TOPS#BHASIA@BlackHatEvents#BHASIA@BlackHatEvents#BHASIA@BlackHatEventsLow-SpeedAutonomousDrivingDomainControllLow-SpeedAutonomousDrivingDomainControllerTITDA4VM8TOPSMobieye4H2TOPSHorizonJ3HorizonJ31xJ35TOPS3xJ33xJ3#BHASIA@BlackHatEvents11xJ3And1xTDA4VM#BHASIA@BlackHatEvents2xTDA42xTDA4VM#BHASIA@BlackHatEventsTITDA4VH32TOPS#BHASIA@BlackHatEventsHorizonHorizonJ5#BHASIA@BlackHatEventsNvidiaXavier#BHASIA@BlackHatEventsNvidiaOrin-X254TOPS#BHASIA@BlackHatEventsNvidiaNvidiaOrin-X#BHASIA@BlackHatEvents22xOrin-X508TOPS#BHASIA@BlackHatEvents44xOrin-X1016TOPS#BHASIA@BlackHatEvents84TOPSNvidiaOrin-N84TOPS#BHASIA@BlackHatEventsOrin-XVSOrin-NOrin-XVSOrin-NSameInterface#BHASIA@BlackHatEvents22xMobileye5H#BHASIA@BlackHatEvents22xQualcommSA8650100TOPS#BHASIA@BlackHatEvents##BHASIA@BlackHatEventsADASInternalStructure:ADASInternalStructure:ZMQ/DDS/SOMEIPMonitorTimeSyncDeserializerLogNvidiaDriveOSHDMap CAN/FlexRayArbitrationSteer-by-wirePowermanagementFaultdiagnosisUltrasonicradar CANTransceiverUltrasonicradar#BHASIA@BlackHatEventsZMQ/DDS/SOMEIPMonitorTimeSyncDeserializerLogNvidiaDriveOSHDMap CAN/FlexRayArbitrationSteer-by-wirePowermanagementFaultdiagnosisUltrasonicradar CANTransceiverUltrasonicradar#BHASIA@BlackHatEventsChassis/PowertrainCANLinux/QNXCameras4/5GmoduleInternetAndroidonQNXDisplayTelematicsCANEthSwitch PerceptionControlLinux/QNXCameras4/5GmoduleInternetAndroidonQNXDisplayTelematicsCANEthSwitch PerceptionControlAutoAutoACDoor #BHASIA@BlackHatEvents APP/TaskProxySOAZMQSecurity……. APP/TaskProxySOAZMQSecurity…….NvidiaDriveOSLinuxOtherAutoFrameworkHorizonHorizonEMMC/UFSSWSer/Des#BHASIA@BlackHatEventsOrinMCUPMICIMUHowHow#BHASIA@BlackHatEventsHowtoResearchADASHowtoResearchADAS-AnalyzeasanIoTDevice#BHASIA@BlackHatEventsHowtoResearch-AcquiringtheDeviceHowtoResearch-AcquiringtheDevice#BHASIA@BlackHatEventsHowtoResearch-AcquiringtheDeviceHowtoResearch-AcquiringtheDevice#BHASIA@BlackHatEventsHowtoResearch-PowerinHowtoResearch-PoweringOnandIgnition#BHASIA@BlackHatEvents/product/im-l7-ls7-#BHASIA@BlackHatEventsReadEMMC/UFSStorageReadEMMC/UFSStorage#BHASIA@BlackHatEventsReadEMMCStorageReadEMMCStorage#BHASIA@BlackHatEventsUseUFSProgrammertoduUseUFSProgrammertodump/write#BHASIA@BlackHatEventsUseUFSProgrammertodump/write–SlowlySpeedUseUFSProgrammertodump/write–SlowlySpeed#BHASIA@BlackHatEventsUseUFSProgrammertodump/write–UseUFSProgrammertodump/write–NewTools#BHASIA@BlackHatEventsPartitionTableDetailsPartitionTableDetailsHasGPTNoGPT/MBR#BHASIA@BlackHatEventsHasPartitionTableHasPartitionTableTDA4EMMCDumpQNX，withGPTJ3EMMCDumpEXT4，withGPT#BHASIA@BlackHatEventsNoPartitionTableNoPartitionTableIfthereisnopartitiontable,needrebuild#BHASIA@BlackHatEventsNvidiaQNX/AndroidIVINvidiaQNX/AndroidIVIQNX#BHASIA@BlackHatEventsNvidiaQNX/AndroidIVINvidiaQNX/AndroidIVIQNXThenusetools,suchasqnxmount#BHASIA@BlackHatEventsWhatCanWeObtainFromaStorageDump?WhatCanWeObtainFromaStorageDump?#BHASIA@BlackHatEventsHowToGetshellHowToGetshell#BHASIA@BlackHatEventsHowToGetshell–ModifyUFSHowToGetshell–ModifyUFS#BHASIA@BlackHatEventsHowToGetshell–UARTInteHowToGetshell–UARTInterface#BHASIA@BlackHatEventsObtainingNetworkAccessObtainingNetworkAccess#BHASIA@BlackHatEventsObtainingNetworkObtainingNetworkAccess--HowtoUseVehicleEthernetAdapters#BHASIA@BlackHatEventsHowtoObtainTheIPHowtoObtainTheIP#BHASIA@BlackHatEventsInterfaceRiskInterfaceRisk#BHASIA@BlackHatEventsSpecialSpecialInterfaces：Flash、HDMI、DP、DAP、Ethernet、Recovery#BHASIA@BlackHatEventsResearchonOtherRelatedResearchonOtherRelatedPeripherals--CAN#BHASIA@BlackHatEventsResearchonOtherRelatedResearchonOtherRelatedPeripherals--Lidar#BHASIA@BlackHatEventsResearchonOtherReResearchonOtherRelatedPeripherals--Serializer/Deserializer#BHASIA@BlackHatEventsRisksRisks#BHASIA@BlackHatEventsFirmware/DeployImage/Firmware/DeployImage/DevelopmentDocument#BHASIA@BlackHatEventsFrameworksFrameworks#BHASIA@BlackHatEventsTI/Nvidia/Horizon/MobieyeModelFilesTI/Nvidia/Horizon/MobieyeModelFiles#BHASIA@BlackHatEventsModelConfiguration,RawModelModelConfiguration,RawModel#BHASIA@BlackHatEventsDeploymentofDeploymentofAIModelsonVehiclesQuantizationandOptimizationSecurityAnalysisofModelFilesSecurityAnalysisofModelFiles #BHASIA@BlackHatEventsAnalysisandReconstructionAnalysisandReconstructionofModelFilesBevnet.onnxBevnet.onnx#BHASIA@BlackHatEventsAnalysisandReconstructionAnalysisandReconstructionofModelFiles#BHASIA@BlackHatEventsAnalysisandReconstructionAnalysisandReconstructionofModelFiles#BHASIA@BlackHatEvents#BHASIA@BlackHatEvents#BHASIA@BlackHatEventsAnalysisandReconstructionAnalysisandReconstructionofModelFiles##BHASIA@BlackHatEventsDemoDemo：AToyCarUtilizingAnAutomotive-gradeAIRecognitionModelA$50miniaturecar,withaNPU.WeextractedasetofmodelsfromtheADAScontrollerAnddeployedthemontheminiaturecar.Nowit'sworth$500AboutTC3XXMCUAboutTC3XXMCUInADAS：PowermanagementPowermanagementFaultdiagnosisSteer-by-wireCANTransceiverCAN/FlexRayUltrasonicradarArbitration#BHASIA@BlackHatEventsTC397FirmwareAnalysisTC397FirmwareAnalysis#BHASIA@BlackHatEventsReverseEngineeringofReverseEngineeringofTC397Firmware#BHASIA@BlackHatEventsHowtoControlHowtoControl#BHASIA@BlackHatEventsUltimateGoal:UltimateGoal:AchievingVehicleControl#BHASIA@BlackHatEventsDriverDriverWire-controlledChassisTechnologyWire-controlledChassisTechnologyT-BoxADAS#BHASIA@BlackHatEventsHowtoControlaVehHowtoControlaVehicleT-T-Box#BHASIA@BlackHatEvents#BHASIA@BlackHatEvents#BHASIA@BlackHatEventsHowtoControlaHowtoControlaVehicle--ControllingtheGatewayHowtoControlaHowtoControlaVehicle–ControllingtheAssistedDrivingModule#BHASIA@BlackHatEvents#BHASIA@BlackHatEvents##BHASIA@BlackHatEventsHowtoControlaHowtoControlaVehicle–ControllingtheADASLinux/QNXCamer