CFL Automotive Security & Vehicle Lock Forensics 2 — Questions and Answers
Question 1: What does the acronym PATS stand for in Ford's vehicle security architecture?
- Passive Anti-Theft System (Correct answer)
- Programmable Auto Transponder Security
- Perimeter Alert and Tracking System
- Primary Authentication and Transmission System
Correct answer: Passive Anti-Theft System
PATS stands for Passive Anti-Theft System, Ford's transponder-based immobilizer that activates automatically without any additional input from the driver.
Question 2: In automotive forensics, what is a 'relay attack' on a keyless entry system?
- A method of picking automotive door locks using specialized relay pins
- An attack that amplifies a key fob's signal to unlock a vehicle from a greater distance (Correct answer)
- A technique for copying an ignition lock's wafer pattern using relay impressioning
- A method of bypassing door lock actuators by relaying voltage directly
Correct answer: An attack that amplifies a key fob's signal to unlock a vehicle from a greater distance
A relay attack uses two electronic devices to capture and amplify the key fob's signal from inside a home and relay it to the vehicle outside, fooling the car into thinking the key is nearby.
Question 3: What is 'key cloning' in the context of automotive transponder security forensics?
- Mechanically duplicating a key by cutting a blank to match the original profile
- Electronically copying a transponder's stored code to a programmable blank transponder key (Correct answer)
- Photographically recording a key's bitting pattern for later reproduction
- Creating a forensic mold impression of a key for evidence documentation
Correct answer: Electronically copying a transponder's stored code to a programmable blank transponder key
Key cloning reads the electronic code stored in a transponder chip and writes it to a compatible blank transponder, creating an electronically functional duplicate that can start the vehicle.
Question 4: Which automotive unauthorized entry technique involves inserting a thin, flat metal tool between the door window and weather stripping to manipulate the internal lock linkage?
- Slim jim attack (Correct answer)
- Bump key attack
- Relay attack
- Impressioning attack
Correct answer: Slim jim attack
A slim jim is a thin flat tool inserted into the gap between the door frame and window to directly reach and manipulate the vehicle's internal lock rod or latch mechanism.
Question 5: Forensic examination of an automotive ignition cylinder reveals the wafer tumblers have been worn evenly at only the correct cut positions. What does this most likely indicate?
- The lock was picked multiple times using a raking technique
- Normal, extended use with the correct original key over a long period (Correct answer)
- The lock was decoded using a commercial automotive decoder tool
- The lock was subjected to repeated bump key attacks
Correct answer: Normal, extended use with the correct original key over a long period
Consistent, even wear only at the correct key contact positions on each tumbler is the hallmark of legitimate long-term use with the correct key.
Question 6: In automotive forensics, OBD port programming is significant because it allows an attacker to do which of the following without possessing an original key?
- Physically open the vehicle's door locks through the diagnostic port
- Program new transponder keys to the vehicle using the diagnostic interface (Correct answer)
- Disable the vehicle's immobilizer system permanently
- Access and copy stored GPS tracking data from the vehicle
Correct answer: Program new transponder keys to the vehicle using the diagnostic interface
OBD port programming devices allow connection to the vehicle's diagnostic port to add new transponder codes to the system, enabling a vehicle to be started with a newly cloned or blank transponder key.
Question 7: Forensic examination of a wafer lock used in an automobile door reveals fine lateral scratches across multiple wafer surfaces at inconsistent heights. What technique does this evidence most likely indicate?
- Forced entry using a drill
- Lock picking using pick tools to manipulate the wafers (Correct answer)
- Freeze spray attack on the lock cylinder
- Normal wear from frequent key use
Correct answer: Lock picking using pick tools to manipulate the wafers
Fine lateral scratches at inconsistent heights across wafer surfaces are characteristic of pick tools that sweep across the internal components while seeking the shear line.
CFL Automotive Security & Vehicle Lock Forensics 2
What does the acronym PATS stand for in Ford's vehicle security architecture?