Data Validation in Vehicle Systems Forensics
Exploring the Uncharted Territory of Vehicle Systems Forensics: MBUX NTG6 Infotainment System
Last week, we reached a significant milestone in our ongoing journey to understand the reliability of data found in Diagnostic Log Trace (DLT) files on the MBUX infotainment system, known as NTG6. This ongoing research effort is particularly noteworthy because there's limited research and real-world testing against data stored on infotainment systems, especially on systems that lack commercial tool support.
At a time when UK forensics Law Enforcement agencies and commercial companies are teetering on the edge of determining their compliance with the Forensic Science Regulator's Code of Practice in their respective areas of expertise, our testing and research couldn't be more timely for the vehicle systems forensics community.
Presenting Our Findings
We had the privilege of presenting our initial findings to two distinct audiences. The first presentation was an in-person event exclusive to law enforcement professionals. The second was an online conference, "Secure Our Streets," held annually by the Automotive Cybersecurity Research Group (ASRG).
Law Enforcement Audience Insights
Our presentation to law enforcement professionals shed light on the immense effort required to validate data types for forensic activities. Understanding and validating data from modern vehicles, with their intricate ecosystems, poses complex challenges. For example, while it might seem practical to connect a device to a vehicle for testing and validation purposes, it's critical to exercise caution, especially with connected vehicles, to avoid unintentional data exposure.
The need for understanding real world events versus what is recorded digitally on a vehicles infotainment system needs careful study and interpretation. This was emphasised at this event with real test examples of some of the vulnerabilities identified in testing.
Automotive Cybersecurity Community Perspectives
At the "Secure Our Streets" conference, which focused on cybersecurity, our findings received both positive and concerning reactions. Attendees were alarmed by the extent of personal data that can be uncovered on a motor vehicle. This revelation has significant implications, not only for vehicle manufacturers but also for the general public, especially when selling a vehicle. In a broader context, these vehicles can inadvertently facilitate various forms of criminal activity, potentially putting individuals at risk.
Offline discussions at the event highlighted the need to collaborate with vehicle manufacturers to enhance data security while maintaining a line of communication with law enforcement agencies, ensuring responsible data access in appropriate circumstances is still possible.
The Road Ahead
As we enter the latter part of the year, we're already delving into phase two of our testing. It's crucial not to rely solely on one data sample and set of circumstances. We've reviewed our phase one findings and are gearing up to deepen our understanding of the NTG6 system.
Our goal is to empower the Vehicle Forensics community with the knowledge necessary to confidently use this data in their investigations, ensuring compliance with the Forensic Science Regulator's Codes of Practice. Ultimately, the aim is to ensure that any forensic evidence presented in criminal trials is thoroughly understood, allowing for sound inferences and transparent limitations.
We're committed to continuing our research and plan to present our updated findings at future events scheduled for the latter part of 2023. If you're involved in data validation within law enforcement, please don't hesitate to reach out. Our research isn't just about data; it's about empowering professionals with the insights they need to navigate the evolving landscape of vehicle systems forensics.