0
0
DALLAS, 11 September 2023: In an exciting development for the world of automotive cybersecurity, Trend Micro Incorporated, a global leader in cybersecurity, has partnered with Tesla, one of the world’s premier automakers, to sponsor the inaugural Pwn2Own Automotive event. This groundbreaking competition will see participants vying for a share of one million dollars in cash prizes and even the chance to win Tesla cars.
Pwn2Own Automotive: A Unique Event
Scheduled for January 24th – 26th, 2024, the inaugural Pwn2Own Automotive event is set to take place at the prestigious Automotive World conference in Tokyo. It marks a significant milestone in the field of automotive cybersecurity.
Brian Gorenc, VP of Threat Research at Trend Micro, expresses his enthusiasm: “Pwn2Own is a vital component of Trend’s Zero Day Initiative (ZDI), which has a long history of uncovering vulnerabilities in consumer, industrial, and emerging technologies. We are thrilled to have Tesla as our title sponsor as we expand our influence in automotive cybersecurity.”
Focus on Connected Cars
Pwn2Own Automotive, co-hosted by ZDI and VicOne (a Trend Micro subsidiary specializing in automotive security), stands out as the world’s first competition solely dedicated to connected cars. The collaboration between VicOne, with its deep understanding of vehicle security, and ZDI, renowned for addressing cybersecurity challenges, creates a powerful synergy in the realm of automotive cybersecurity and threat hunting.
The event aims to:
- Promote Security Research: Encourage more security research in the automotive ecosystem.
- Vendor Participation: Incentivize vendors to actively engage with the security research community.
- Raise Awareness: Increase awareness about the intricate security challenges posed by modern vehicles.
Tesla’s Role
Tesla’s involvement in Pwn2Own Automotive is not new. Their expertise in electric vehicle (EV) complexities contributed to the success of Pwn2Own Vancouver. This collaboration underscores Tesla’s commitment to advancing automotive cybersecurity.
Partnering with ChargePoint
Another key partner in this groundbreaking event is ChargePoint, providing technical guidance and hardware support for the contest. Their expertise adds depth and breadth to the competition.
The Impact of ZDI
ZDI, responsible for discovering and publishing 1,706 new vulnerabilities last year, plays a pivotal role in advancing cybersecurity. The valuable data and insights gathered through ZDI enable Trend Micro to provide its customers with advanced protection for over 70 days, ensuring a proactive defense against potential threats.
The Prize Categories
The Pwn2Own Automotive event promises an impressive prize pool of over one million dollars in cash and prizes, including coveted Tesla cars. The contest features four categories:
- Tesla: Contestants can compete to win cash prizes of up to USD 200,000 and their own Tesla vehicle. The challenge includes targeting a Tesla Model 3/Y (Ryzen-based) or Tesla Model S/X (Ryzen-based) equivalent benchtop unit.
- In-Vehicle Infotainment (IVI): These systems, connecting our phones, provide navigation, in-car internet, Wi-Fi, and connectivity to other vehicle systems. Three IVI devices will be available for targeting.
- Electric Vehicle Chargers: Historically overlooked by hackers, EV chargers present new attack surfaces, including mobile apps, Bluetooth Low Energy (BLE) connections, and the OCPP protocol. Six EV charger models will be open for targeting in the competition.
- Operating Systems: Participants will race to exploit vulnerabilities in Automotive Grade Linux, Blackberry QNX, and Android Automotive OS.
Join Pwn2Own Automotive
If you’re unable to attend Pwn2Own Automotive in person, remote participation is an option. Register before the contest deadline on January 18, 2024, and submit a detailed white paper explaining your exploit chain and entry instructions.
