About OWASP Automotive EMB 60
Description
Automotive security can be difficult to get into. Resources are limited and specialized hardware is needed. This open source project’s goal is to lower this hurdle by providing an inexpensive and highly customizable device designed for practical automotive security use-cases.
The Automotive EMB60 (Embedded60) is a single-board computer which in its basic form can be used as a CAN-to-USB interface to connect a device to a CAN-Bus (Controller Area Network) over USB. It was developed in the context of a research project for penetration test driven safety and security system improvements for cyber-critical systems. The EMB60 specifically targets penetration testing in the automotive area where CAN is the prevalent communication standard. It’s a full open source project providing open hardware and software. This allows for extensive customization and various other use-cases.
Software
The EMB60 provides some libraries and firmwares out of the box. Since the device can be freely programmed it is not limited to them.
Existing firmwares include:
CAN-to-USB Interface
Provides two CAN interfaces through a USB connection. It implements the SocketCAN interface which is natively supported on linux and thus provides linux sockets to use. This allows the usage with already established tools like can-isotp and scapy.
Secure Bootloader
An open source secure bootloader being improved continuously.
Project Resources
Project Information
Incubator Project
Classification
Incubator
OWASP is a nonprofit foundation improving software security through open-source projects, global communities, and education. All resources are free and open to everyone.
SlackOWASP, the OWASP logo, and Global AppSec are registered trademarks and AppSec Days, AppSec California, AppSec Cali, SnowFROC, OWASP Boston Application Security Conference, and LASCON are trademarks of the OWASP Foundation, Inc.
© 2026, OWASP Foundation Inc. All rights reserved.