Nyon Unchained: Forensic Analysis of Bosch’s eBike Board Computers

Stachak M, Geus J, Pugliese G, Freiling F (2024)

Publication Language: English

Publication Type: Conference contribution, Conference Contribution

Publication year: 2024

Pages Range: 1-11

Conference Proceedings Title: Digital Forensics Research Conference Europe (DFRWS EU)

Event location: Zaragoza ES

Open Access Link: https://dfrws.org/wp-content/uploads/2024/03/Nyon-Unchained-Forensic-Analysis-of-Boschs-eBike-Board-Computer_2024.pdf

Abstract

Modern eBike on-board computers are basically small PCs that not only offer motor control, navigation, and performance monitoring, but also store lots of sensitive user data. The Bosch Nyon series of board computers are cutting-edge devices from one of the market leaders in the eBike business, which is why they are especially interesting for forensics. Therefore, we conducted an indepth forensic analysis of the two available Nyon models released in 2014 and 2021. On a firstgeneration Nyon device, Telnet access could be established by abusing a design flaw in the update procedure, which allowed the acquisition of relevant data without risking damage to the hardware. Besides the user’s personal information, the data analysis revealed databases containing user activities, including timestamps and GPS coordinates. Furthermore, it was possible to forge the data on the device and transfer it to Bosch’s servers to be persisted across their online service and smartphone app. On a current second-generation Nyon device, no software-based access could be obtained. For this reason, more intrusive hardware-based options were considered, and the data could be extracted via chip-off eventually. Despite encryption, the user data could be accessed and evaluated. Besides location and user information, the newer model holds even more forensically relevant data, such as nearby Bluetooth devices.

Authors with CRIS profile

Julian Geus Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Gaston Pugliese Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen) Felix Freiling Lehrstuhl für Informatik 1 (IT-Sicherheitsinfrastrukturen)

How to cite

APA:

Stachak, M., Geus, J., Pugliese, G., & Freiling, F. (2024). Nyon Unchained: Forensic Analysis of Bosch’s eBike Board Computers. In Digital Forensics Research Conference Europe (DFRWS EU) (pp. 1-11). Zaragoza, ES.

MLA:

Stachak, Marcel, et al. "Nyon Unchained: Forensic Analysis of Bosch’s eBike Board Computers." Proceedings of the Digital Forensics Research Conference Europe (DFRWS EU), Zaragoza 2024. 1-11.

BibTeX: Download