Merge pull request #53 from hammadahmedirdeto/adding_adversaries

Adding attackers and adversaries to security blueprint

1 files changed, 42 insertions, 23 deletions

diff --git a/sec-blueprint/04-adversaries.md b/sec-blueprint/04-adversaries.md
index acf3764..8740ae5 100644
--- a/sec-blueprint/04-adversaries.md
+++ b/sec-blueprint/04-adversaries.md
@@ -1,25 +1,44 @@
----
-
-title : Adversaries
-date  : 2016-06-30
-categories: architecture, automotive
-tags: architecture, automotive, linux
-layout: techdoc 
+This section lists some of the adversaries and attackers in Automotive.
+## Enthusiast Attackers:
+  Enthusiast attackers have physical access to the Engine Control
+  Units (ECUs) at the circuit board level. They can solder ‘mod chips’
+  onto the board and have access to probing tools. They also have
+  information on ECUs that have been hacked previously and have
+  access to softwares and instructions developed by other members
+  of car modification forums. The goal of the enthusiast hacker
+  could be, but is not limited to, adding extra horse power to the
+  car or hacking it just for fun.
  
----
-
-**Table of Content**
-
-1. TOC
-{:toc}
-
-## Authorised malicious project admin/developer
-
-## Malware developer
-
-## Organised crime
-
-## Authorised device/cloud user
-
-## Network mass attacker
+## Corrupt Dealers:
+  These are attackers that have access to the same capabilities as
+  enthusiasts, but also have access to the car manufacturer's (OEM)
+  dealer network. They may also have access to standard debugging
+  tools provided by the car manufacturer. Their goal may be to support
+  local car theft gangs or organized criminals.
+ 
+## Organized Criminal:
+  Organized Criminals have access to all of the above tools but may
+  also have some level of control over the internal network at
+  many dealerships. They may have hacked and gained temporary
+  control of the Over-The-Air (OTA) servers or the In-Vehicle
+  Infotainment (IVI) systems. This is very much like the role of
+  organized criminals in other industries such as paid media today.
+  Their goal is to extort money from an OEMs and/or governments by
+  threatening to disable multiple vehicles.
+ 
+## Malware Developers:
+  Malware Developers have developed malicious software to attach
+  and compromise a large number of vehicle. The malicious software
+  would usually be designed spread from one vehicle to another.
+  The goal usually is to take control of multiple machines then sell
+  access to them for malicious purposes like denial-of-service (DoS)
+  attacks or stealing private information and data.
+ 
+## Security Researchers:
+  These attackers are ‘self-publicized’ security consultants trying
+  to make a name for themselves. They have access standard tools for
+  software security analysis. They also have physical access to the
+  vehicle and standard hardware debugging tools (Logic Analyzers,
+  Oscilloscopes, etc). Their goal is to publicize attacks for personal
+  gains.