Train From Home with Top Cybersecurity Experts, Hands On Labs and 4 Months Access to Content - OnDemand


To attend this webcast, login to your SANS Account or create your Account.

Securing Connected Vehicles – what you need to know

  • Wednesday, April 4th, 2018 at 10:30 AM EDT (14:30:00 UTC)
  • Matt Carpenter, Andre Weimerskirch and Kai Thomsen
This webcast has been archived. You can view the webcast presentation and download the slides by logging into your SANS Portal Account or creating an Account. Click the Register Now button after you have logged in to view the Webcast.

You can now attend the webcast using your mobile device!


This webcast will discuss how organizations in the extended automotive supply chain will need to adopt a culture of security to arm their teams against the complex battle-field created by connected vehicles.


While the word "hack" has been used, and misused, to mean many things in this industry, the most important concept to Suppliers and OEMs is this: hack yourself, bring friends, drive continuous improvement. With constant Internet and DSRC connectivity, vehicle vendors and infrastructure-providers have to act now to avoid Carpocalypse.


Join the webcast with Matt Carpenter to discuss what will it mean to hack a car and what tools the automotive industry can leverage to safeguard vehicles from your daily driver to fleet and heavy machinery.

Meet Matt Carpenter, Principal Security Researcher with Grimm, at the Automotive Cybersecurity Summit this May in Chicago. The summit will include two days of in-depth presentations from leading automotive industry cybersecurity experts, seasoned practitioners, industry consortia, policymakers and innovative product and system designers. Participate in hands-on demos, learning exercises, and networking opportunities.

Speaker Bios

Matt Carpenter

Matt leads the Hardware and Embedded System Security division at Grimm. Matt's expertise is in reverse-engineering, vulnerability research, hardware/software/firmware/ICS/AMI/Radio, hacker techniques, teaching, and penetration testing (hardware, software network, web, physical). He is former vice-chair of UCAIUG AMI-SEC Task Force and SG Security, and lead the Vulnerabilities team for NIST Cyber Security Coordination Task Force developing NISTIR-7628 and Cyber Physical Systems (CPS). Matt is a former member of the Advanced Security Acceleration Project for the Smart Grid (ASAP-SG) and was the Red-team lead for Advanced Security Acceleration Project (AMI-SEC/ASAP). He is an entertaining and informative speaker, and is a repeat speaker at many Hacker/ICS/SCADA conferences, domestic and abroad. Matt was also captain of three winning Defcon CTF teams.

Kai Thomsen

Kai has been working in various IT Security roles for more than 15 years. Currently he is the DFIR lead at the premium automaker AUDI AG. Kai also designs and runs Red Team exercises at Audi that integrate IT, business, and physical aspects.

Before Audi he worked for more than 12 years at the engineering company SMS Group where he designed and implemented defensible LANs as well as running DFIR in traditional IT and ICS environments.

Kai holds an MA in Computer Science and English and American Literature.

Dr. André Weimerskirch

André Weimerskirch is VP Cyber Security at Lear Corporation. Before that, Andre established the transportation cyber security group at the University of Michigan Transportation Research Institute (UMTRI), and co-founded the embedded systems security company ESCRYPT which was sold to Bosch in 2012.

André is active in all areas of automotive and transportation cyber security and privacy, published numerous articles in the area of automotive and embedded cyber security, and is co-founder of the American workshop on embedded security in cars (escar USA). André is vice chair of the SAE Vehicle Electrical System Security Committee, co-chairs the Michigan Mobility Transformation Center (MTC) cyber security working group, co-organizes the SAE ComVEC cybersecurity session, and is a member of the joint SAE/ISO Cybersecurity Working Group.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.