Awesome Automotive Security

A curated Awesome-list for automotive security tools and knowledge. If other better lists exist, we'll try to reference them instead of duplicating work.

Suggestions are welcome — see CONTRIBUTING.md for what earns a place on the list.

Contents

• CAN Bus Analysis
• Diagnostic Tools
• Firmware and ECU Reverse Engineering
• Automotive Ethernet
• RF and Key Fob Analysis
• Infotainment and IVI
• V2X Security
• EV Charging Security
• Hardware Interfaces
• Security Analysis
• Penetration Testing
• Datasets
• Research Papers
• Conference Presentations
• Books
• Learning Resources
• Related Awesome Lists

CAN Bus Analysis

• BUSMASTER - Open-source CAN simulation, analysis, and test tool from Bosch Engineering and ETAS, with a node simulator, DBC-driven signal interpretation, and scriptable test automation.
• CAN Commander - Flipper Zero application and companion ESP32 CAN board for reverse engineering vehicle networks, with sniffing, DBC decoding, replay, and injection profiles usable without a laptop.
• can-utils - Linux-CAN SocketCAN userspace utilities including cansniffer, candump, cansend, canplayer, and cangen for CAN bus analysis.
• CANalyse - Vehicle network analysis tool with SQL-like queries on CAN data, smart signal scanning, and Telegram bot integration.
• CANalyzat0r - Security analysis toolkit for proprietary car protocols with graphical sniffing, fuzzing, packet comparison, background-noise filtering, and UDS fuzzing.
• CANarchy - Stream-first CAN and J1939 toolkit that emits structured JSONL for automation, with live capture, DBC/ARXML/KCD decoding, J1939 PGN/SPN and DM1 fault parsing, UDS and DoIP support, constrained fuzzing, and an MCP server for agent-driven workflows.
• CanCat - Firmware for Arduino CAN shields and Macchina M2 boards paired with a Python client for sniffing and injecting CAN traffic, running UDS and CCP sessions, and placing a device in the middle of a CAN link.
• CANdevStudio - Flow-based graphical CAN simulation environment that wires senders, receivers, DBC decoders, and signal viewers together to stand in for missing ECUs on a bench.
• CANExplorer - Cross-platform CAN, CAN FD, and LIN analysis GUI with reverse-engineering tools, UDS discovery and fuzzing, DoIP and SOME/IP support, and SecOC decoding.
• CANflict - C library that manipulates the CAN bus at the data link layer from an unmodified microcontroller, abusing pin conflicts between peripherals to craft polyglot frames; the implementation behind the CCS 2022 paper.
• CANgaroo - Open-source CAN bus analyzer for Linux and Windows with DBC and LDF decoding, CAN FD, Python scripting, SocketCAN, PEAK, Kvaser, Vector, and candlelight interfaces, and Vector ASC, MDF4, candump, and PCAP export.
• CanLab - PyQt6 desktop application for offline CAN capture reverse engineering, combining automated counter and checksum detection with entropy-based signal boundary analysis, a visual DBC builder, and UDS/OBD-II/J1939/XCP/DoIP diagnostic support.
• canmatrix - Python package to read and write CAN database formats, converting between DBC, ARXML, KCD, SYM, LDF, ODX, and more.
• cannelloni - Tunnels SocketCAN interfaces over UDP, TCP, or SCTP, bridging a vehicle bus to a remote analysis machine and letting bench setups share one physical CAN adapter.
• CANter - Intrusion detection system for CAN and CAN-FD that detects drop-and-spoof attacks using frequency analysis of frame intervals.
• cantools - Python library for CAN bus diagnostics, DBC parsing, and message decoding/encoding.
• CANToolz - Black-box CAN network analysis framework also known as YACHT with modular architecture for fuzzing and ECU discovery.
• canTot - Metasploit-style CAN bus exploitation framework built on sploitkit, packaging published vehicle-specific CAN attacks as selectable modules.
• CaringCaribou - Python automotive security exploration tool designed as the nmap of CAN bus with fuzzing, ECU discovery, and attack modules.
• Carpunk - CAN injection toolkit and successor to CANghost, automating interface setup, sniffing, replay, and injection attacks.
• ICSim - Instrument Cluster Simulator for safe CAN bus security testing with virtual dashboard controls.
• Kayak - Java-based CAN bus analysis tool with bus monitoring and DBC/KCD file loading support.
• Lindwurm - Open-source CAN bus tracing and fuzzing tool designed for penetration testing with Burp Suite-inspired workflow.
• OBDium - Rust-based OBD-II diagnostic tool with modern Tauri GUI supporting live data, DTC analysis, and offline VIN decoding.
• opendbc - Python API for your car, bundling community-maintained DBC files with CAN parsing and car interface libraries for reading vehicle state and actuating controls.
• pretty_j1939 - NMFTA's Python library and CLI that decodes J1939 traffic from candump logs using the SAE J1939 Digital Annex, with transport protocol reassembly, filtering, JSON output, and a live terminal view.
• pycangui - Graphical CAN bus tool with live trace and plots, transmit, CANopen, UDS, J1939, and XCP/CCP support on any python-can adapter, with Python scripting and simulated nodes.
• python-can - Python library providing a common interface over many CAN hardware backends with CAN FD support and logging to ASC, BLF, MF4, TRC, CSV, and SQLite.
• python-can-isotp - ISO-TP (ISO 15765) transport for Python on top of python-can or Linux SocketCAN, the segmentation layer that UDS and OBD-II diagnostics run over.
• SavvyCAN - Cross-platform Qt-based CAN bus reverse engineering and capture tool with DBC file loading, UDS scanning, and fuzzing support.

Diagnostic Tools

• Atlas - Open-source ECU calibration application for reverse engineering and recalibrating Subaru, Toyota, and Honda ECUs, with an integrated Ghidra bundle for analysing tables and emulating ROM machine code.
• AutoPi - Open-source core software for the AutoPi dongle, a Raspberry Pi-based OBD-II device for vehicle diagnostics, CAN bus data collection, and automotive IoT applications.
• conescan - Automotive ECU hacking supertool for firmware dumping and manipulation via J2534 OBD interfaces.
• doip-sim-ecu-dsl - Kotlin DSL for scripting simulated DoIP ECUs, reachable over Ethernet, CAN with ISO-TP, or both at once, for exercising diagnostic clients against UDS error and edge cases without hardware.
• EcuBus-Pro - Cross-platform open-source ECU tool with UDS, CAN-TP, DoIP, LIN, and SOME/IP support, DBC and LDF databases, TypeScript scripting in the style of CAPL, and a command-line interface.
• Ford-ECU-Bruteforcer - Security access brute-force tool for pre-2011 Ford ECUs with 3-byte seed and 5-byte key.
• gallia - Extendable automotive pentesting framework from Fraunhofer AISEC focused on UDS, with DoIP and ISO-TP transports and structured logging for reproducible scans.
• iso14229 - Dependency-free C implementation of a UDS (ISO 14229) server and client with built-in ISO-TP, for building embedded ECU targets and test tools.
• odxtools - Python toolkit for parsing ODX/PDX (ISO 22901) diagnostic databases and encoding, decoding, and snooping ECU diagnostic sessions.
• OpenSOVD Classic Diagnostic Adapter - Eclipse OpenSOVD bridge in Rust that translates SOVD (ISO 17978) requests into UDS over DoIP for legacy ECUs, with a security plugin architecture.
• pq-flasher - Python tools for reflashing VW PQ35 EPS using TP 2.0 transport layer and KWP2000 diagnostics.
• python-doipclient - Pure Python DoIP (ISO 13400) client that plugs into udsoncan as a transport layer for diagnostics over automotive Ethernet.
• uds - Python package for ISO 14229 UDS in both client and server roles over CAN, Ethernet, LIN, FlexRay, and K-Line, usable for simulation, testing, and decoding UDS traffic.
• uds-firmware-extraction - Tool for extracting ECU firmware from UDS flash traffic following ISO-14229 standard.
• uds-server - UDS ECU simulator and fuzzer for use alongside ICSim, for practising diagnostic command discovery and fuzzing scan tools.
• UDSim - UDS (Unified Diagnostic Services) ECU simulator and fuzzer for discovering and testing UDS services.
• udsoncan - Python implementation of the ISO 14229 UDS protocol covering session control, security access, data identifiers, and routine control.
• UnlockECU - Free seed-key unlocking tool for Bosch, Continental, Delphi, Daimler, and Marquardt ECUs without proprietary DLLs.
• VW_Flash - Flashing tools for VW AG control units over UDS supporting Simos18.1/6/10 and DQ250-MQB.

Firmware and ECU Reverse Engineering

• ghidra-tc1797 - Ghidra processor specification and language definitions for the Infineon TriCore TC1797, used to label memory regions when disassembling MED17 and similar ECU firmware.
• ghidra_v850 - Ghidra processor module for Renesas V850E2 and V850E3/RH850 microcontrollers, the core families behind many ECUs, for disassembling and decompiling their firmware.
• medc17-checksum-tool - Analyses and corrects CRC32, ADD32, and ADD16 checksums in Bosch MED17 and EDC17 firmware, resolving CRC values algebraically rather than by brute force and regenerating RSA signatures after modification.
• pyA2L - Python parser for ASAM MCD-2 MC (A2L) description files, exposing the characteristic, measurement, and memory-layout metadata needed to make sense of ECU calibration data during firmware analysis.
• pyXCP - Python implementation of the ASAM MCD-1 XCP protocol over CAN, Ethernet, and USB, with seed-and-key access handling, for measuring, calibrating, and flashing ECUs.
• Simos18_SBOOT - Documented exploit chain against the VW Simos18 supplier bootloader, chaining PWM entry, a weak Mersenne Twister seed/key, and a CRC bounds-check flaw into arbitrary flash read.
• TC1791_CAN_BSL - CAN bootstrap loader for Infineon TriCore AudoMAX parts such as the TC1791, giving arbitrary flash and RAM read/write on Simos18 and related ECUs without desoldering.
• Zephyr-Reference-ECU - Forkable body control module on Zephyr with UDS diagnostics over CAN and DoIP, SecurityAccess with AES-128-CMAC, and signed firmware update, runnable with no hardware or on a NUCLEO-H753ZI board.

Automotive Ethernet

• eth-ws-someip - Wireshark LUA dissectors for Automotive Ethernet SOME/IP and SOME/IP-SD protocols (Autosar 4.2).
• ICS CAP - Free Wireshark plugin for monitoring Automotive Ethernet, CAN, CAN FD, LIN, and FlexRay networks.
• ProtoCrawler - Intelligent protocol fuzzer for SOME/IP, DoIP, UDS, and Ethernet AVB satisfying ISO/SAE 21434 testing requirements.
• Scapy - Python packet manipulation library with support for DoIP, SOME/IP, AUTOSAR PDUs, SecOC, CAN-FD, and FlexRay protocols.
• someip-protocol-fuzzer - Black-box SOME/IP fuzzer that mutates user-defined protocol fields with radamsa and uses a ping heartbeat to detect when the target service stops responding.
• vsomeip - COVESA reference implementation of SOME/IP and SOME/IP-SD, used both as the target in automotive Ethernet fuzzing research and as a client for crafting service calls against production ECUs.

RF and Key Fob Analysis

• Flipper Zero - Handheld multi-tool with Sub-GHz capabilities for reading, saving, and transmitting key fob signals with automotive database.
• Flipper-ARF - Automotive-focused firmware fork for Flipper Zero supporting Keeloq, rolling codes, and VAG protocol analysis.
• KeyFob Analysis Toolkit (KAT) - Toolkit for analyzing, decoding, and retransmitting key fob signals with support for HackRF, RTL-SDR, and Flipper Zero.
• Proxmark3 - Industry-standard RFID/NFC research tool for reading, cloning, and emulating immobilizer transponders at 125kHz and 13.56MHz.
• rtl_433 - Generic ISM band receiver for decoding TPMS sensors and key fobs at 315/433/868/915 MHz with RTL-SDR.
• Universal Radio Hacker (URH) - Open-source suite for wireless protocol investigation with native SDR support and easy signal demodulation.

Infotainment and IVI

• byd-dolphin-hacking - Reverse engineering of the BYD Dolphin DiLink 3 head unit (Android 10 on a Qualcomm QCM6125), documenting its MCU and CAN interfaces, OTA update paths, and NFC digital key, along with permission-bypass and root-level service findings.
• Chimaera - Research framework for IVI (In-Vehicle Infotainment) firmware reverse engineering and exploitation targeting Hyundai/Kia Gen5W_L systems.
• gen5fw - Python tools for decrypting, patching, and redeploying firmware on Mobis Gen5 navigation head units in Hyundai, Kia, and Genesis vehicles, including enabling ADB.
• ic1101 - Open research project for reverse engineering 10th generation Honda Civic infotainment systems (Android-based, NVIDIA Tegra 3).
• idrive7-8-ssh-root - Enable root SSH on BMW iDrive 7/8 MGU head units over ENET via debug image flash and persistent SSH without B7F8E5 DTC, for head unit reverse engineering.
• MMI3G-Toolkit - SD-card-based toolkit for Audi/VW MMI3G head units covering boot-image extraction, reverse-engineered GEMMI protocol details, and an FSC signature-bypass technique alongside CAN diagnostic and variant-dumping tools.
• Q50 Reverse Engineering - Independent reverse-engineering research into the Infiniti Q50 infotainment platform's Linux/Android environment, documenting its EPK firmware package format, code-signing process, and USB app-installation flow.

V2X Security

• Artery - OMNeT++ simulation framework pairing the Vanetza ITS-G5 stack with SUMO traffic, providing the environment that most misbehavior-detection and V2X attack studies are built on.
• F2MD - Simulation framework recreating the whole misbehavior detection chain for ITS-G5 and C-V2X, with plausibility checks, machine learning detectors, and both local and global attack implementations.
• V2Verifier - Open-source V2X security testbed with first open-source IEEE 1609.2 implementation for DSRC and C-V2X.
• VaN3Twin - ETSI-compliant multi-stack V2X framework for ns-3 covering ITS-G5, C-V2X, and LTE with SUMO and CARLA co-simulation; the continuation of ms-van3t.
• Vanetza - Open-source ETSI C-ITS protocol stack covering GeoNetworking, BTP, DCC, and the security layer, widely used as the reference implementation for V2X experimentation.
• Veins - Open-source vehicular network simulation framework coupling OMNeT++ and SUMO, used as the testbed for VANET and V2X security and attack studies.

EV Charging Security

• AcCCS - Idaho National Laboratory test platform on a Raspberry Pi that emulates either the vehicle or the charger in a CCS session, driving the J1772 control pilot, HomePlug Green PHY SLAC, and DIN 70121 exchange so either side can be tested without the other present.
• ChargeSploit - Security testing framework for ISO 15118-2 and DIN SPEC 70121 that emulates either the charger or the vehicle, with TLS support and extensible handlers for injecting non-compliant behaviour at any step of a session.
• CheckOCPP - Wireshark dissector for OCPP 1.6 and 2.0.1 that identifies the protocol version and flags messages that do not match the schema.
• dsV2Gshark - Wireshark plugin that dissects ISO 15118 and DIN 70121 traffic, decoding EXI-encoded V2G payloads and SLAC handshakes into readable fields.
• EmuOCPP - Mininet-based emulator for OCPP charging networks covering versions 1.6, 2.0, and 2.0.1 across all three security profiles, with attack demos for the MitM and downgrade flaws in its companion research.
• EVerest - Linux Foundation Energy full-stack open-source EV charging firmware implementing OCPP 1.6/2.0.1/2.1, ISO 15118-2/-3/-20, IEC 61851, and DIN SPEC 70121, useful as a reference target and test peer.
• open-plc-utils - Qualcomm Atheros powerline toolkit for HomePlug AV and Green PHY devices, the standard means of inspecting and manipulating the PLC layer that CCS charging sessions run over.
• OpenV2G - C implementation of the ISO 15118 and DIN 70121 vehicle-to-grid interface with an EXI codec, widely reused as the encoding engine behind other V2G analysis tooling.
• pyPLC - Python toolkit for CCS charging research that can pose as vehicle or charger, sniff HomePlug Green PHY traffic, and walk the SLAC, DIN 70121, and ISO 15118 state machines.
• V2Gdecoder - Encodes and decodes EXI-compressed V2G messages on the fly, turning captured ISO 15118 exchanges into editable XML for replay and fuzzing.
• WWCP_ISO15118 - ISO 15118 implementation covering SLAC, SDP, V2GTP, -2 and -20, explicitly shipping attack vectors and penetration-testing workflows for the individual subprotocols.

Hardware Interfaces

• CAN-DAQ - Open hardware ESP32-S3 CAN data-capture device with DBC-driven real-time plotting and SQLite logging, published in HardwareX as a sub-$25 alternative to commercial CAN loggers.
• candleLight_fw - Open firmware for low-cost STM32 USB to CAN adapters such as CANable, cantact, and candleLight that implements the mainline Linux gs_usb interface, turning them into native SocketCAN devices without a vendor driver.
• CANtact - Open-source hardware CAN interface and desktop app supporting live tracing, frame transmission, ISO-TP, JavaScript scripting, and candump-format traces.
• CFUC - Open hardware and firmware ISO CAN FD to USB dongle built on the STM32G431, presenting as a native SocketCAN or gs_usb interface with a bundled python-can plugin.
• Doggie - Modular DIY CAN-to-serial adapter from Faraday Security that speaks slcan over USB, BLE or UART for SocketCAN and python-can, with an EvilDoggie variant adding offensive features for automotive research.
• LinUSBConverter - Open-source USB to LIN bus dongle that operates as master, slave or monitor with optical isolation and SLCAN compatibility for vehicle LIN traffic.
• OWASP Automotive EMB 60 - OWASP incubator project with open hardware and software for a single-board computer that acts as a CAN-to-USB interface through SocketCAN for penetration testing.
• panda - Open-source CAN and CAN FD interface firmware from comma.ai running on an STM32H725, with Python bindings for full read/write access to vehicle buses.
• RAMN - Resistant Automotive Miniature Network, a four-ECU CAN/CAN FD testbed on a single board with KiCad sources, CARLA closed-loop simulation, and use as the Car Hacking Village CTF platform.
• SuperCAN - Open-source USB to CAN FD adapter firmware for the ATSAME51 and several other supported boards, giving a low-cost interface for capturing and injecting CAN and CAN FD traffic.

Security Analysis

• Automotive Threat Matrix - Auto-ISAC's MITRE ATT&CK-style matrix of automotive adversary tactics and techniques, drawn from validated attacks and reproducible research, for threat modelling, TARA, and intelligence sharing.
• Automotive Threat Modeling Template - NCC Group stencil set for the Microsoft Threat Modeling Tool, supplying vehicle-specific element types, trust boundaries, and threat rules for ECU and in-vehicle network diagrams.
• AutoTARA - Web-based TARA (Threat Analysis and Risk Assessment) framework for ISO/SAE 21434 that models systems as attack graphs and applies MITRE's CTSA/CRRA prioritization methodology with a Meta Attack Language simulation backend.
• AVCDL - Motional's open-sourced Versatile Cybersecurity Development Lifecycle with process definitions and templates mapped to ISO/SAE 21434, ISO 24089, and UN R155/R156, assessed by TUV SUD.
• Security AutoDesigner - Automated TARA platform for creating ISO 21434 and UNR 155 compliant threat analysis reports.
• Uptane - Open standard for securing automotive over-the-air updates that extends TUF to limit the damage when a repository or signing key is compromised, governed under the Joint Development Foundation.

Penetration Testing

• AutoFuze - Python toolkit for fuzzing and penetration testing ECUs over UDS, XCP, SOME/IP, and OBD, across CAN, DoIP, USB, and SPI transports.
• automotive-security-research - Published reverse engineering results for two production vehicles including CAN matrices, extracted ECU security access keys, and UDS scanning proof-of-concepts.
• CANHack - Ken Tindell's proof-of-concept toolkit of low-level CAN protocol attacks such as Janus frames, bit-banged from a Raspberry Pi Pico on the CANPico board, with a Sigrok decoder for observing the attacks on a logic analyser.
• Car Toolkit - Python-based toolkit for automotive penetration testing with CAN suite, CARAL, and virtual test bench setup.
• DongleScope - Automated tool for detecting vulnerabilities in wireless OBD-II dongles based on USENIX Security 2020 research.
• NullSec CarFuzz - Rust fuzzer for CAN, UDS, OBD-II, and DoIP with grammar-aware test generation and coverage tracking.
• PiCCANTE - Dirt-cheap CAN bus exploration tool built on Raspberry Pi Pico as an open-source hardware/software solution.
• pwnobd - Offensive cybersecurity toolkit for vulnerability analysis of OBD-II devices presented at Black Hat Europe 2024.
• SecOC Key Extractor - Scripts to extract SecOC (Secure On-Board Communication) keys from Toyota vehicles using comma.ai panda hardware.
• tesla-opener - Open-source tool to open Tesla charging port using HackRF and WebUSB with ASK/OOK RF transmission.
• TruckDevil - Framework for assessing heavy-vehicle ECUs that communicate over J1939, with ECU discovery, message reading and sending, and a J1939 fuzzer, running on a Macchina M2 or any python-can interface.

Datasets

• AutoHack - Multi-bus CAN dataset from a real vehicle covering C-CAN, P-CAN, and B-CAN, with physically verified fuzzing, spoofing, replay, DoS, and UDS-based attacks.
• CAN-MIRGU - CAN bus attack dataset from a modern vehicle driven on real roads over six days, with physically verified masquerade, suspension, and real attacks.
• can-train-and-test - Labelled CAN captures from four vehicles across two manufacturers with nine attack types, split into known and unknown vehicle and attack test subsets for evaluating IDS generalisation.
• Car Hacking Dataset - HCRL captures from a Kia Soul with labelled DoS, fuzzing, and RPM and gear spoofing injections, the most widely cited baseline in CAN intrusion detection papers.
• CarDS - ACSAC 2025 dataset of over nine hours of traffic from a 2020 electric vehicle with 10 CAN buses and 6 automotive Ethernet buses, covering benign driving and attack scenarios.
• Cross-Vehicle Generalisation Benchmark - Leave-one-vehicle-out benchmark unifying ROAD, CIDv2, and can-train-and-test into 217 captures across eight vehicles for evaluating whether CAN IDS models transfer.
• GEM-CAN - Labelled capture of about 143,000 CAN frames from an autonomous GEM e6 platform, with normal operation, DoS floods, and brake and steering-lock data-tampering injections, for benchmarking lightweight on-device IDS.
• ROAD - Real ORNL Automotive Dynamometer CAN intrusion dataset with verified fuzzing, targeted ID, masquerade, and accelerator attacks captured on a dynamometer.
• Survival Analysis Dataset - HCRL CAN captures from a Hyundai YF Sonata, Kia Soul, and Chevrolet Spark with labelled flooding, fuzzy, and malfunction attacks.
• SynCAN - ETAS synthetic CAN benchmark with continuous, plateau, playback, suspension, and flooding attacks in the signal space, for comparing IDS that work on decoded signals rather than raw arbitration IDs.
• TOW-IDS Automotive Ethernet Intrusion Dataset - HCRL captures of AVTP, gPTP, and CAN-over-UDP traffic on an automotive Ethernet network, split into normal driving and five labelled attack scenarios.
• VeReMi Extension - Simulated V2X misbehavior detection dataset generated with F2MD over the Luxembourg SUMO scenario, labelling position, speed, timing, replay, DoS, and Sybil attacks alongside faulty-sensor behaviour.

Research Papers

Peer-reviewed research and landmark industry reports, ordered by year of publication. Open-access copies are linked where one exists.

• Security in Automotive Bus Systems - Wolf, Weimerskirch, and Paar, Workshop on Embedded Security in Cars 2004. The first systematic treatment of CAN, LIN, MOST, and FlexRay as security problems, proposing the gateway and cryptographic measures later echoed in SecOC.
• Securing Vehicular Ad Hoc Networks - Raya and Hubaux, Journal of Computer Security 2007. Threat analysis and security architecture for VANETs that set the direction for most later V2X security work.
• Secure Vehicular Communication Systems: Design and Architecture - Papadimitratos et al., IEEE Communications Magazine 2008. The SeVeCom architecture, which defined the certificate and pseudonym model underlying today's V2X security stacks.
• Experimental Security Analysis of a Modern Automobile - Koscher et al., IEEE S&P 2010. The paper that opened the field, demonstrating that an attacker with access to any single ECU can disable the brakes and stop the engine of a moving vehicle.
• Security and Privacy Vulnerabilities of In-Car Wireless Networks: A Tire Pressure Monitoring System Case Study - Rouf et al., USENIX Security 2010. Shows TPMS sensors are unauthenticated and trackable at roughly 40m, the first published wireless in-car network attack.
• Comprehensive Experimental Analyses of Automotive Attack Surfaces - Checkoway et al., USENIX Security 2011. Follow-up establishing the remote attack surface, compromising a vehicle over Bluetooth, cellular, and the CD player.
• Relay Attacks on Passive Keyless Entry and Start Systems in Modern Cars - Francillon, Danev, and Capkun, NDSS 2011. Demonstrates the relay attack that still underpins most keyless vehicle theft today, against ten PKES systems from eight manufacturers.
• Gone in 360 Seconds: Hijacking with Hitag2 - Verdult, Garcia, and Balasch, USENIX Security 2012. Breaks the Hitag2 immobilizer transponder, then fitted to over 200 car models, recovering the key by radio in minutes.
• Adventures in Automotive Networks and Control Units - Miller and Valasek, 2013. The wired precursor to the Jeep work, documenting CAN injection against the Toyota Prius and Ford Escape and the methodology that followed.
• Survey on Security Threats and Protection Mechanisms in Embedded Automotive Networks - Studnia et al., DSN Workshops 2013. Widely cited survey mapping in-vehicle protocols, the threats against them, and candidate countermeasures.
• A Survey of Remote Automotive Attack Surfaces - Miller and Valasek, Black Hat USA 2014. Compares the remote attack surfaces, network architectures, and cyber-physical features of a large set of production vehicles, framing a remote attack as initial access, CAN message injection, and physical effect.
• Dismantling Megamos Crypto: Wirelessly Lockpicking a Vehicle Immobilizer - Verdult, Garcia, and Ege, USENIX Security 2015. Reverse engineers the Megamos immobilizer used by Audi, Fiat, Honda, Volkswagen, and Volvo; famously injuncted for two years before publication.
• Remote Exploitation of an Unaltered Passenger Vehicle - Miller and Valasek, 2015. The Jeep Cherokee cellular-to-CAN attack chain that triggered a 1.4 million vehicle recall.
• Fast and Vulnerable: A Story of Telematic Failures - Foster, Prudhomme, Koscher, and Savage, USENIX WOOT 2015. Shows an aftermarket OBD-II telematics dongle exposing SMS-reachable remote control of vehicle CAN traffic.
• Potential Cyberattacks on Automated Vehicles - Petit and Shladover, IEEE T-ITS 2015. The standard reference taxonomy of attack vectors against autonomous and cooperative automated vehicles.
• Remote Attacks on Automated Vehicles Sensors: Experiments on Camera and LiDAR - Petit, Stottelaar, Feiri, and Kargl, Black Hat Europe 2015. First practical spoofing and blinding of automotive camera and LiDAR using commodity hardware.
• Pseudonym Schemes in Vehicular Networks: A Survey - Petit, Schaub, Feiri, and Kargl, IEEE Communications Surveys and Tutorials 2015. Defines the pseudonym lifecycle and categorises the schemes that reconcile V2X message authentication with driver privacy.
• Fingerprinting Electronic Control Units for Vehicle Intrusion Detection - Cho and Shin, USENIX Security 2016. Clock-based IDS that fingerprints ECUs from clock skew in periodic messages, the most-replicated CAN IDS baseline.
• Error Handling of In-vehicle Networks Makes Them Vulnerable - Cho and Shin, ACM CCS 2016. The bus-off attack, which abuses CAN error handling to force an uncompromised ECU off the bus without any vehicle-specific reverse engineering.
• Lock It and Still Lose It: On the (In)Security of Automotive Remote Keyless Entry Systems - Garcia, Oswald, Kasper, and Pavlides, USENIX Security 2016. Recovers shared global keys covering most Volkswagen Group vehicles sold over two decades, and breaks the Hitag2 rolling-code scheme.
• vatiCAN: Vetted, Authenticated CAN Bus - Nurnberger and Rossow, CHES 2016. Retrofit authentication for CAN using MACs and a global nonce, a reference point for later SecOC-style designs.
• LeiA: A Lightweight Authentication Protocol for CAN - Radu and Garcia, ESORICS 2016. Backwards-compatible per-ID authentication that fits CAN's timing and bandwidth limits, compartmentalising ECUs so a compromised head unit cannot actuate the powertrain.
• Uptane: Securing Software Updates for Automobiles - Kuppusamy et al., escar Europe 2016. Extends TUF with a director role, supplier-delegated image signing, and ECU-signed vehicle version manifests, so that a partial compromise of the update system does not by itself let an attacker push malicious firmware to every ECU.
• Viden: Attacker Identification on In-Vehicle Networks - Cho and Shin, ACM CCS 2017. Fingerprints transmitting ECUs by their analogue voltage signature, moving CAN defence from detecting an attack to naming the ECU responsible.
• WALNUT: Waging Doubt on the Integrity of MEMS Accelerometers with Acoustic Injection Attacks - Trippel, Weisse, Xu, Honeyman, and Fu, IEEE EuroS&P 2017. Acoustic resonance attacks that forge accelerometer output, establishing analogue sensor integrity as its own threat model.
• VulCAN: Efficient Component Authentication and Software Isolation for Automotive Control Networks - Van Bulck, Muhlberg, and Piessens, ACSAC 2017. Combines message authentication with trusted-computing isolation, defending against an adversary running arbitrary code on a participating ECU.
• Illusion and Dazzle: Adversarial Optical Channel Exploits Against Lidars for Automotive Applications - Shin, Kim, Kwon, and Kim, CHES 2017. Saturates and spoofs an automotive LiDAR over its optical channel, creating fake points and blinding it entirely; the precursor to later LiDAR perception attacks.
• GIDS: GAN based Intrusion Detection System for In-Vehicle Network - Seo, Song, and Kim, PST 2018. Trains a GAN on normal CAN traffic only, and is a common deep-learning IDS baseline alongside the authors' Car-Hacking dataset.
• Beneath the Bonnet: A Breakdown of Diagnostic Security - Van den Herrewegen and Garcia, ESORICS 2018. Reverse engineers the seed-key ciphers of four manufacturers from ECU firmware and achieves remote code execution over CAN through diagnostics alone.
• Robust Physical-World Attacks on Deep Learning Visual Classification - Eykholt et al., CVPR 2018. The stop-sign sticker attack, the canonical physical adversarial example against road sign recognition.
• All Your GPS Are Belong To Us: Towards Stealthy Manipulation of Road Navigation Systems - Zeng et al., USENIX Security 2018. Spoofs GPS to reroute a driver to an attacker-chosen destination while keeping the displayed route plausible.
• CANvas: Fast and Inexpensive Automotive Network Mapping - Kulandaivel, Goyal, Agrawal, and Sekar, USENIX Security 2019. Builds an nmap for the vehicle, recovering the sender and receiver map of a CAN network in under an hour using clock offsets and forced ECU isolation.
• Losing the Car Keys: Wireless PHY-Layer Insecurity in EV Charging - Baker and Martinovic, USENIX Security 2019. Recovers ISO 15118 charging messages from the unintentional wireless emissions of CCS power-line communication across 54 real charging sessions.
• Fast, Furious and Insecure: Passive Keyless Entry and Start Systems in Modern Supercars - Wouters et al., CHES 2019. Breaks the DST40-based PKES used by Tesla and others, cloning a key fob from a few seconds of proximity.
• Adversarial Sensor Attack on LiDAR-based Perception in Autonomous Driving - Cao et al., ACM CCS 2019. Spoofs LiDAR returns to inject a fake obstacle into the perception pipeline of a production autonomous driving stack.
• Plug-N-Pwned: Comprehensive Vulnerability Analysis of OBD-II Dongles - Wen, Chen, and Lin, USENIX Security 2020. Automated analysis of 77 wireless OBD-II dongles, every one of which exposed at least two vulnerability classes.
• A Comprehensive Guide to CAN IDS Data and Introduction of the ROAD Dataset - Verma et al., 2020. Systematises the CAN IDS dataset landscape, documents the flaws in earlier datasets, and introduces ROAD.
• Automated Cross-Platform Reverse Engineering of CAN Bus Commands From Mobile Apps - Wen, Zhao, Chen, and Lin, NDSS 2020. Recovers CAN command syntax and semantics for 360 car models from companion mobile apps alone, without touching a vehicle.
• Drift with Devil: Security of Multi-Sensor Fusion based Localization in High-Level Autonomous Driving under GPS Spoofing - Shen et al., USENIX Security 2020. Shows sensor fusion does not neutralise GPS spoofing, taking an autonomous vehicle off its lane with gradual position drift.
• My Other Car is Your Car: Compromising the Tesla Model X Keyless Entry System - Wouters, Gierlichs, and Preneel, CHES 2021. Chains a BLE firmware downgrade and a key fob update flaw into unlocking and driving away a Tesla Model X.
• Dirty Road Can Attack: Security of Deep Learning based Automated Lane Centering under Physical-World Attack - Sato et al., USENIX Security 2021. Physical dirty-road patches that steer a production lane-centering system out of its lane.
• Too Good to Be Safe: Tricking Lane Detection in Autonomous Driving with Crafted Perturbations - Jing et al., USENIX Security 2021. First lane-detection attack validated on a real production vehicle, exploiting the module's over-sensitivity with small road markings.
• Invisible for both Camera and LiDAR: Security of Multi-Sensor Fusion based Perception in Autonomous Driving - Cao et al., IEEE S&P 2021. Defeats the multi-sensor fusion designs that production stacks actually use, with a single adversarial object invisible to camera and LiDAR at once.
• Exposing New Vulnerabilities of Error Handling Mechanism in CAN - Serag et al., USENIX Security 2021. Systematically tests CAN node behaviour under error conditions with CANOX and finds three further vulnerabilities in the standard beyond the bus-off attack.
• Evading Voltage-Based Intrusion Detection on Automotive CAN - Bhatia et al., NDSS 2021. The DUET masquerade attack, in which two compromised ECUs corrupt the bus voltage and defeat every published voltage-based IDS, including Viden.
• CANflict: Exploiting Peripheral Conflicts for Data-Link Layer Attacks on Automotive Networks - de Faveri Tron et al., ACM CCS 2022. Software-only data link layer attacks from a remotely compromised ECU, abusing peripheral pin conflicts to craft polyglot frames and break the protocol's own rules.
• RollBack: A New Time-Agnostic Replay Attack Against the Automotive Remote Keyless Entry Systems - Csikor et al., Black Hat USA 2022. Replaying already-invalid rolling codes in sequence triggers a resynchronisation rollback, unlocking a vehicle indefinitely and defeating the countermeasure that stopped RollJam.
• Silently Disabling ECUs and Enabling Blind Attacks on the CAN Bus - Rogers and Rasmussen, arXiv 2022. Disables an ECU with a single frame and without generating bus errors, evading the error-counting that earlier bus-off detection relies on, and adds a synchronisation method letting an attacker who cannot read the bus strike reliably.
• Brokenwire: Wireless Disruption of CCS Electric Vehicle Charging - Kohler, Baker, Strohmeier, and Martinovic, NDSS 2023. Aborts CCS rapid-charging sessions wirelessly from tens of metres with off-the-shelf radio hardware, against individual vehicles or whole fleets.
• Does Physical Adversarial Example Really Matter to Autonomous Driving? Towards System-Level Effect of Adversarial Object Evasion Attack - Wang et al., ICCV 2023. Measures published physical adversarial attacks against a full driving pipeline rather than the perception model alone, and finds that component-level success rarely translates into system-level effects such as traffic rule violations.
• A First Physical-World Trajectory Prediction Attack via LiDAR-induced Deceptions in Autonomous Driving - Lou et al., USENIX Security 2024. Attacks trajectory prediction indirectly, by placing physical objects that deceive LiDAR perception, instead of manipulating an attacker vehicle's own history as prior work required.
• OCPPStorm: A Comprehensive Fuzzing Tool for OCPP Implementations - Coppoletta et al., VehicleSec 2024. Black-box fuzzer for the OCPP charging-station protocol that tests implementations regardless of platform or language, and found five confirmed CVEs in two open-source OCPP systems.
• On the Realism of LiDAR Spoofing Attacks against Autonomous Driving Vehicle at High Speed and Long Distance - Sato et al., NDSS 2025. Moving-vehicle spoofing rig and an adaptive high-frequency removal attack that succeed at 60 km/h and 110 m against production driving stacks, closing the gap between bench demonstrations and moving-vehicle conditions.
• SoK: Kicking CAN Down the Road. Systematizing CAN Security Knowledge - Serag et al., 2025. Systematization of two decades of CAN security, with a unified taxonomy and assessment model for attackers, attacks, and defences.
• Current Affairs: A Security Measurement Study of CCS EV Charging Deployments - Szakaly et al., USENIX Security 2025. First measurement of publicly deployed CCS DC chargers, finding that only 12 percent of 325 units across four European countries negotiated TLS and that most ran decade-old HomePlug modem firmware.
• SoK: Stealing Cars Since Remote Keyless Entry Introduction and How to Defend From It - Bianchi et al., USENIX VehicleSec 2025. Systematization of RKE and passive keyless entry and start systems, covering their history, the attacks against them, and the defences.
• SoK: How Sensor Attacks Disrupt Autonomous Vehicles: An End-to-end Analysis, Challenges, and Missed Threats - Zhang et al., arXiv 2025. Traces how sensor-induced errors propagate through perception, localization, planning, and control to physical impact, and identifies 12 previously overlooked attack vectors.
• SoK: The Next Frontier in AV Security: Systematizing Perception Attacks and the Emerging Threat of Multi-Sensor Fusion - Khan, Islam, and Hasan, arXiv 2026. Systematizes 48 studies of perception-layer attacks into a taxonomy of 20 attack vectors and shows how multi-sensor fusion opens cross-modal attacks.
• Automating Function-Level TARA for Automotive Full-Lifecycle Security - Yang et al., NDSS 2026. DefenseWeaver, a multi-agent LLM system that automates function-level ISO/SAE 21434 threat analysis and risk assessment, reported as deployed in four automotive projects.
• SECV: Securing Connected Vehicles with Hardware Trust Anchors - Kayondo et al., NDSS 2026. Mediates external-network control messages inside a TEE backed by an EVITA-compliant HSM, so the gateway can verify them even when the external network manager is compromised, at 6.5 percent transmission overhead.
• The Heat is On: Understanding and Mitigating Vulnerabilities of Thermal Image Perception in Autonomous Systems - Bhupathiraju et al., NDSS 2026. Shows heat sources degrade thermal-camera pedestrian detection and sensor fusion, including in real driving, and proposes real-time defences.
• Charge It to My Neighbor: A Relay Attack on ISO 15118 Plug and Charge Payment - Löw et al., USENIX VehicleSec 2026. Relays Plug and Charge authentication so the attacker charges their own car while the victim is billed, exploiting missing station identity in the signature and weak TLS certificate handling, with a proof of concept.
• Reversing a Brake ECU Firmware Update - Gardiner, USENIX VehicleSec 2026. Reverse engineers the Bendix EC80 brake ECU's J2497 power-line updater, diffs the firmware to show a safety recall also patched security bugs, and demonstrates a write-where primitive and DoS on a bench and in a moving truck.
• Race to Charge: Concurrency Bugs and State Integrity Violations in EV Charging Infrastructure - Lee and Lee, USENIX VehicleSec 2026. Audits the open-source EVerest charging stack and finds 11 CVE-assigned flaws, from data races confirmed with sanitizers to logic exploits such as charging that continues after a remote stop.
• On the Real-World Applicability of Automotive CAN Intrusion Detection Systems - Lazeski et al., USENIX VehicleSec 2026. Work in progress showing that ML-based CAN intrusion detectors often learn dataset shortcuts because common datasets contain only simple attacks, so high scores do not imply robustness against a practical attacker.
• Perspective-Shift Attacks Against Optical Perception Sensors: A Novel Attack Vector on LiDAR and Camera - Calipari et al., USENIX VehicleSec 2026. Introduces a new physical attack class that uses Direction Turning Film to shift LiDAR and camera fields of view, showing even a 20° shift significantly disrupts LiDAR odometry and camera lane detection in laboratory tests and on a real research vehicle, while barely affecting detection confidence.
• A Formal Security Analysis of CAN XL - Tang et al., USENIX Security 2026. First formal security analysis of the CAN XL standard, showing it retains all known classic CAN MAC sub-layer flaws and adds seven new vulnerabilities, validated on commercial controllers.

Conference Presentations

Slides, write-ups and recordings of talks that disclosed vehicle vulnerabilities or taught a technique, from the Car Hacking Village, Black Hat, Pwn2Own Automotive, CCC, escar and similar venues.

• Abusing CAN Bus Protocol Specification for Denial of Service in Embedded Systems - Petran, DEF CON 31 Car Hacking Village 2023. Shows how an out-of-range CAN data length code reaches firmware unchecked and overflows a buffer, demonstrated on a development board and a Tesla Model 3 ECU.
• Back in the Driver's Seat: Recovering Critical Data from Tesla Autopilot Using Voltage Glitching - Kuhnapfel, Werling, and Jacob, 37C3 2023. Voltage-glitching attack that gives root on Tesla Autopilot hardware and recovers protected data.
• Back-connect to the Connected Car. Search for Vulnerabilities in the VW Electric Car. - Serdyuk, Kondikov, Razmakhnin, and Sakr, Black Hat Europe 2022. Maps the attack surface of the VW ID.3 across Wi-Fi, Bluetooth, V2X, cellular, CAN, and OBD-II entry points.
• CANdid: A Stealthy Stepping-Stone Attack to Bypass Authentication on ECUs - Kulandaivel, Jain, Guajardo, and Sekar, escar USA 2022. Shows a compromised ECU can authenticate against a safety-critical ECU's SecurityAccess without the failed attempts a CAN IDS would flag.
• DriveThru Car Hacking: Fast Food, Faster Data Breach - Chen et al., Black Hat Asia 2025. Attack chain against more than 24 dashcam models, delivered through a drive-through ordering flow, with an accompanying tool.
• Expanding the Attack Scenarios of SAE J1939: A Comprehensive Analysis of Established and Novel Vulnerabilities in Transport Protocol - Lee, Lee, Jun, and Kim, escar USA 2024. Presents 14 attack scenarios against the J1939 protocol used in commercial vehicles, seven of them new.
• Fast and Compromised: Automotive Security on a Timer - Ziv and Alfasi, escar USA 2025. Penetration test taking a production electric vehicle from an insecure Wi-Fi network to full compromise in eight working days, via hardcoded credentials, insecure MQTT, and weak UDS Security Access.
• How API Flaws Led to Admin Access to Over 1k USA Dealers and Control Over Your Car - Eaton Zveare, DEF CON 33 Car Hacking Village 2025. Slides showing how flaws in an automaker's central dealer platform yielded a national admin account across over a thousand dealers.
• Low Energy to High Energy: Hacking Nearby EV-Chargers Over Bluetooth - Alkemade and Nassar, Black Hat USA 2024. Bluetooth attacks on three EV chargers, built from exploits demonstrated at Pwn2Own Automotive 2024.
• Modern Odometer Manipulation - collin and oblivion, DEF CON 33 Car Hacking Village 2025. Slides reverse engineering a device that alters a message before it reaches the instrument cluster, using a glitching bypass of flash read protection.
• One Modem to Brick Them All: Exploiting Vulnerabilities in the EV Charging Communication - Berens, Szakaly, and Kohler, DEF CON 33 Car Hacking Village 2025. Slides on attacking the CCS charging communication modem, from the authors of the USENIX Security 2025 charger measurement study.
• Over the Air: Compromise of Modern Volkswagen Group Vehicles - Ivachev and Parnishchev, Black Hat Europe 2024. Bluetooth attack chain against Volkswagen Group MIB3 infotainment yielding persistent code execution, microphone recording, GPS tracking, and contact exfiltration across 1.4 million vehicles.
• Passive and Active Attacks on TPMS Systems - Yago Lizarribar, DEF CON 33 Car Hacking Village 2025. Slides on long-term passive tracking of tire pressure sensors and active spoofing, both with commodity SDR hardware.
• Pedal to the Bare Metal - Scharnowski and Covic, Black Hat USA 2026. Demonstrates rehosting and fuzzing the Tesla Wall Connector firmware to trigger a worm spreading via SWCAN.
• Pwn2Own Automotive 2026: Day Three Results and the Master of Pwn - Zero Day Initiative, Tokyo 2026. Final results of the contest, where $1,047,000 was awarded for 76 unique zero-days in infotainment systems and EV chargers.
• Research Only? Understanding the Scope of Automotive Cyberattacks in the Wild - Savage, USENIX VehicleSec 2026 keynote. Asks why fifteen years of remote-takeover demonstrations have not been matched by attacks in the wild, and what would change that.
• Vehicle Immobilization Revisited - Bokslag, 36C3 2019. Studies three vehicles and shows the immobilizer transponder talks to the body control module rather than the ECM, so weak authentication at either link allows an unauthorised start.
• Wir wissen, wo dein Auto steht - Kreil and Flupke, 38C3 2024. German-language talk on movement data of 800,000 Volkswagen group electric cars that was exposed unprotected online.

Books

• A Comprehensible Guide to Controller Area Network - Wilfried Voss, Copperhill 2005. The standard plain-language reference on CAN itself, covering frame formats, arbitration, error handling, and timing that vehicle network attacks depend on.
• Automotive Cyber Security - Shiho Kim and Rakesh Shrestha, Springer 2020. Academic introduction to connected and autonomous vehicle security, threats, and the standardisation landscape.
• Automotive Cybersecurity Engineering Handbook - Ahmad MK Nasser, Packt 2023. Practitioner's guide to building cyber-resilient vehicles, covering threat analysis, hardware security, and ISO/SAE 21434 engineering practice.
• Automotive Cybersecurity: An Introduction to ISO/SAE 21434 - David Ward and Paul Wooderson, SAE International 2021. Short introduction to ISO/SAE 21434 covering cybersecurity basics, setting up a company process, and assurance and certification.
• Automotive Cybersecurity: Protecting Connected and Autonomous Vehicles - Alfred Basta and Sam Hana, Kendall Hunt 2026. Textbook covering threats from ECU networks and sensor spoofing to OTA patching, EV charging breaches, and incident response.
• Automotive Ethernet - Matheus and Königseder, Cambridge University Press 2021. The standard reference on automotive Ethernet, covering PHYs, TSN, and security concepts for in-vehicle networks.
• Automotive Threat Analysis and Risk Assessment in Practice - Rodrigo do Carmo and Alexander Schlensog, Springer 2024. Practitioner's guide to threat analysis and risk assessment (TARA) following ISO/SAE 21434, with worked examples for automotive embedded and IT/OT systems.
• Building Secure Cars - Dennis Kengo Oka, Wiley 2021. Focuses on assuring the automotive software development lifecycle, from secure coding and static analysis through fuzzing and penetration testing.
• Cybersecurity for Commercial Vehicles - Gloria D'Anna, SAE International 2018. Covers heavy vehicle and fleet security, how it differs from passenger cars, SAE J3061, platooning, and breach forensics.
• Hacking Connected Cars - Alissa Knight, Wiley 2020. Tactics, techniques, and procedures for penetration testing, threat modelling, and risk assessment of telematics control units and infotainment systems.
• Offensive Automotive Cybersecurity - Ahmad MK Nasser and Dennis Kengo Oka, Packt 2026. The two handbook authors together on the offensive side, covering exploitation of modern automotive platforms.
• Securing Electric Mobility - Aparna Kumari (ed.), Elsevier 2026. Edited volume on the security of electric vehicles and charging infrastructure.
• The Car Hacker's Handbook - Craig Smith, No Starch Press 2016. The foundational practical guide to vehicle security, covering threat modelling, CAN reverse engineering, and ECU exploitation; free to read online via Open Garages.

Learning Resources

• Automotive Cybersecurity Roadmap - Structured learning path from CAN and UDS fundamentals through TARA, firmware reverse engineering, and hardware hacking into specialized career tracks.
• Automotive Security Timeline - Continuously updated knowledge base of automotive cybersecurity events including vulnerability disclosures, attack demonstrations, Pwn2Own Automotive results, and supply-chain incidents.
• Automotive-Networking-Security - Automotive networking security standards and solutions overview.
• Car Hacking Village - Non-profit running hands-on car hacking workshops and CTFs at DEF CON, Black Hat, HITCON, CODE BLUE, and other conferences.
• OpenGarages - Open vehicle research collective behind the Car Hacker's Handbook, publishing the free edition of the book, ICSim, and workshop material for hands-on vehicle security practice.
• OWASP Automotive Security Cheat Sheet - OWASP cheat sheet covering threat modeling, message authentication, secure boot, and update verification for vehicle ECUs and connected services.
• What is Automotive MACsec? - Video training on Automotive MACsec concepts by Technica Engineering.

Related Awesome Lists

• Awesome CANb IDs - CAN bus ID reference and documentation.
• Awesome CANbus - Comprehensive CAN bus security resources.
• Awesome Connected Things Sec - Security resources across IoT, embedded, industrial, and automotive systems with a dedicated automotive section.
• Awesome Embedded Security - Tools and knowledge for embedded security research.
• Awesome EV Charging - Curated specifications, tools, and resources for EV charging protocols including OCPP, ISO 15118, OCPI, and Eichrecht.
• Awesome Vehicle Security - Long-running curated list of vehicle security resources, hardware, software, researchers, and manufacturer disclosure programs.