ENGLISH
Hi everyone, today we are launching OMSP (acronym from Open Mobility Security Project), an open source project dedicated to the creation of a standard framework with technical controls to review security in all types of vehicles. This project was born as an internal project, used by Zerolynx to perform security reviews of several systems integrated within different vehicles, as cars and trains. Inspired by the popular OWASP project, we decided to release OMSP as an open project, so that the community can get involved, contributing with its knowledge and experience in the field, and therefore, improving the cybersecurity of our vehicles.
OMSP is not a high-level generic guide, nor it's limited to very specific systems which has been already covered in the past. OMSP aims to cover each possible technical test that could be performed on all of the systems and subsystems that are part of the vehicle and its environment. Let’s make it clear: with OMSP we would like to cover the entire threat landscape that could affect our vehicles.
OMSP includes a list of control categories, which group together several controls that allow combining different technical tests to which all the components that make up the vehicle systems and subsystems could be subjected. Specifically, OMSP is focussed on cars, car sharing platforms, and trains, connected or non-connected, although we would like to expand this project to other vehicles such as motorcycles, electric scooters, ships, or even planes!
We have already defined control categories and most of the main controls. We have also developed high-level definitions for each of those controls, and we are in the process of defining technical tests that could be used in each of the controls. Likewise, we have compiled numerous interesting references, with contributions from numerous experts in this field.
OMSP includes a list of control categories, which group together several controls that allow combining different technical tests to which all the components that make up the vehicle systems and subsystems could be subjected. Specifically, OMSP is focussed on cars, car sharing platforms, and trains, connected or non-connected, although we would like to expand this project to other vehicles such as motorcycles, electric scooters, ships, or even planes!
We have already defined control categories and most of the main controls. We have also developed high-level definitions for each of those controls, and we are in the process of defining technical tests that could be used in each of the controls. Likewise, we have compiled numerous interesting references, with contributions from numerous experts in this field.
We would like to have the community feedback and support, so we have published our work at Github, to build together a better framework to improve our vehicles cybersecurity.
Would you like to collaborate? :)
Would you like to collaborate? :)
SPANISH
Buenas a todos, hoy lanzamos mundialmente OMSP (acrónimo de Open Mobility Security Project), un proyecto abierto dedicado a estandarizar un marco de controles técnicos para evaluar la seguridad a nivel de hacking en todo tipo de vehículos. Este proyecto nació como un proyecto interno de Zerolynx para realizar revisiones de seguridad sobre varios sistemas integrados en diferentes vehículos, como automóviles y trenes. Inspirados por el popular proyecto OWASP, decidimos lanzar OMSP como un proyecto abierto, para que la comunidad pudiera involucrarse, contribuyendo con su conocimiento y experiencia en el campo y, por lo tanto, mejorando la ciberseguridad de nuestros vehículos.
OMSP no es una guía genérica de alto nivel, ni está limitada a sistemas muy específicos que ya se han cubierto en el pasado. OMSP tiene como objetivo cubrir cada posible prueba técnica que pueda realizarse en todos los sistemas y subsistemas que forman parte del vehículo y de su entorno. Como nota aclaratoria, con OMSP nos gustaría cubrir todo el panorama de amenazas que podrían afectar a nuestros vehículos.
OMSP publica una lista de categorías de control, que agrupan los diferentes controles técnicos que permiten combinar las diferentes pruebas técnicas a las que se pueden someter los diferentes componentes que integran los sistemas del vehículo. Específicamente, OMSP se enfoca en coches, plataformas de car sharing y trenes, conectados o no conectados, aunque nos gustaría expandir este proyecto a otros vehículos como motocicletas, patinetes eléctricos, barcos, ¡o incluso aviones!
Ya hemos definido las categorías de control y la mayoría de los controles principales. También hemos desarrollado definiciones de alto nivel para cada uno de esos controles, y estamos en el proceso de definir pruebas técnicas que podrían llevarse a cabo en cada uno de los controles. Asimismo, hemos recopilado numerosas referencias interesantes, con contribuciones de numerosos expertos en este campo.
Nos gustaría contar con el feedback y el apoyo de la comunidad, por lo que hemos publicado nuestro trabajo en Github, para construir juntos un mejor framework con el que mejorar la ciberseguridad de nuestros vehículos.
¿Te animas a colaborar? :)
Gran trabajo como siempre!!
ResponderEliminarGracias por el aporte ;-)