In this paper, we introduce the design of HackCar, a testing platform for replicating attacks and defenses on a generic automotive system without requiring access to a complete vehicle. This platform empowers security researchers to illustrate the consequences of attacks targeting an automotive system on a realistic platform, facilitating the development and testing of security countermeasures against both existing and novel attacks. The HackCar platform is built upon an F1-10th model, to which various automotive-grade microcontrollers are connected through automotive communication protocols. This solution is crafted to be entirely modular, allowing for the creation of diverse test scenarios. Researchers and practitioners can thus develop innovative security solutions while adhering to the constraints of automotive-grade microcontrollers. We showcase our design by comparing it with a real, licensed, and unmodified vehicle. Additionally, we analyze the behavior of the HackCar in both an attack-free scenario and a scenario where an attack on in-vehicle communication is deployed.

翻译：摘要：本文介绍了HackCar的设计方案，这是一个用于在无需完整车辆的条件下复制通用汽车系统攻击与防御的测试平台。该平台使安全研究人员能够在逼真的平台上展示针对汽车系统攻击的后果，从而促进针对现有及新型攻击的安全对策的开发与测试。HackCar平台基于F1-10th模型构建，通过汽车通信协议连接多种车规级微控制器。该解决方案采用完全模块化设计，支持创建多样化的测试场景。研究人员和从业者可在车规级微控制器的约束条件下开发创新安全方案。我们通过与真实授权且未经改装的车辆进行对比来展示设计方案，同时分析了HackCar在无攻击场景和车载通信攻击部署场景下的行为特性。