SIG · Tokyo, Japan · ニケット

Vehicle networks,
secured by design.

6+ years securing vehicle networks at a major Japanese OEM — AUTOSAR IDS/SecOC, WP.29 certification, and full-stack ECU security from CAN to SOC.

View projects GitHub Resume

0x010 · REGISTER / ABOUT

From attack surface
to architecture.

Likes to: build automotive security tooling (IDS, SecOC, UDS/DoIP) from the spec up

Likes to: simulate ECUs and test them on the bench

Likes to: turn security events into dashboards

Likes to: explore Rust, Vue and Software-Defined Vehicle ideas

Likes to: study Japanese in Tokyo

0x020 · REGISTER / PROJECTS

An open-source
security pipeline.

Three interlocking AUTOSAR toolkits — detection, authentication, and event management — plus the cloud side that makes vehicle security events observable.

0x0100 C++

sovd-toolkit

SOVD (ASAM/ISO 17978-3) server and client stack for Linux: real UDS/DoIP translation behind a REST/JSON diagnostic API, with a two-tier gateway topology and security throughout.

  • C-ABI adapter translating SOVD calls into real UDS/DoIP services against classic, SOVD-unaware ECUs
  • Gateway proxying to per-domain servers over mutual TLS, with OAuth2 bearer auth and SecurityAccess gating
  • Vue 3 web UI and C++ client SDK/CLI built from server self-description via /docs, with no hardcoded DIDs
SOVDUDS/DoIPmTLSOAuth2C++
0x0101 C

UDS-29-auth-toolkit

Embeddable ISO 14229-1:2020 service 0x29 (Authentication) in plain C11: certificate-based client and ECU sides, static memory, no heap, plus a simulated ECU with fault injection.

  • AUTOSAR-style client API and DCM-style server handler, supporting sub-functions 0x00-0x03 and 0x08
  • Certificate validation: chain of trust, trusted-time validity, CRL and serial blacklist, EKU and algorithm policy
  • Pluggable crypto (OpenSSL, mbedTLS, PKCS#11) and OS port (POSIX, FreeRTOS); ~44 KB RAM client, 5.3 KB server
UDS 0x29ISO 14229-1X.509 PKImbedTLSC11
0x0200 C++

secoc-can-toolkit

AUTOSAR SecOC simulator in C++17 over Linux SocketCAN: AES-128-CMAC, counter/timestamp Freshness Value Manager, configurable MAC/FV truncation, anti-replay window, and an AUTOSAR-style C API.

  • AES-128-CMAC MAC generation and verification via OpenSSL
  • Freshness value management per AUTOSAR SecOC profiles
  • AUTOSAR C API (SecOc_Init, SecOc_Transmit) running over Linux SocketCAN / vcan
SecOCAUTOSAROpenSSLSocketCANC++
0x0300 C++

can-ids-toolkit

Lightweight, zero-dependency C++17 CAN intrusion detection library and CLI: default-deny ID whitelist, Classic/CAN FD DLC validation, and frequency-based flood detection with thread-safe rules.

  • Whitelist enforcement, DLC validation and message frequency monitoring, aligned to AUTOSAR IDS spec
  • Designed for HIL testing and bench validation environments
  • Feeds qualified security events into the IdsM pipeline
CANSocketCANIDSAUTOSARC++
0x0400 C++

autosar-idsm-toolkit

AUTOSAR IdsM implementation with async event aggregation, SOC violation forwarding via HTTP, and a 39-test GoogleTest suite referencing SWS_IdM spec requirements.

  • IdsR_ReportType structs with namespaced event IDs (0x01xx CAN IDS, 0x02xx SecOC)
  • IIdsM_ReportingChannel abstraction (IPC, SOME/IP via vsomeip) and IdsR forwarder over MQTT, WebSocket, HTTP
  • 39 GoogleTest cases mapped directly to AUTOSAR SWS_IdM requirements
AUTOSARIdsM/IdsRSOME/IPMQTTC++
0x0500 C

DoIP_ECU_Simulator

ISO 13400-2 DoIP stack in C: an ECU simulator plus a reusable client library (libdoip) with UDS forwarding, TLS/DTLS, ISO-TP, IPv6 and an async API.

  • Full ISO 13400-2 DoIP protocol implementation with UDS service handling per ISO 14229
  • TLS extension for secure diagnostic sessions
  • Unit and integration test suite included
DoIPUDSISO 13400TLSC
0x0600 Infra

SOC dashboard pipeline

Vehicle-to-cloud observability for security events: MQTT → Telegraf → InfluxDB → Grafana OSS, fully open-source licensed stack.

  • Telegraf ingestion shaped to the IdsR_ReportType schema
  • Grafana dashboards for fleet-level event correlation
  • All Apache-2.0/MIT components, safe for commercial/OEM contexts
GrafanaInfluxDBTelegrafMQTT
0x0700 Rust

repro-toolkit

Cross-platform Rust library and CLI for ECU reprogramming: parses a PDX archive (ZIP-packaged ODX, ISO 22901) and generates the ordered UDS (ISO 14229) repro sequence as JSON.

  • Orders steps into the canonical UDS flash sequence; unmatched services are kept as OTHER so nothing is dropped
  • TransferData chunking honouring maxNumberOfBlockLength, with a wrapping BlockSequenceCounter on each chunk
  • Usable as a Rust library, over a small C ABI (C, C++, Python, C# examples), or as a CLI on Linux and Windows
RustODX/PDXUDSFFICLI

0x030 · REGISTER / EXPERIENCE

Five years on
the bus.

Apr 2022 — Present Tokyo, Japan

Automotive Cybersecurity Engineer

Nissan Motor Co., Ltd. (on-site via TCS Japan)

  • Lead a ~10-engineer team delivering cybersecurity test development and validation for Central Gateway ECU across CAN, DoIP, SOME/IP, and Automotive Ethernet attack surfaces (ISO/SAE 21434).
  • Architected and developed C#-based test automation tooling — reduced manual validation effort by 90% across multiple vehicle programs.
  • Developed test scenarios and tools for AUTOSAR SecOC (AES-128-CMAC) and JASPAR MAC authentication over CAN — verifying message integrity between Gateway, Domain ECUs, and external ECUs.
  • Built end-to-end IDS pipeline validation tooling for AUTOSAR IDSM violation aggregation and IDSR off-board reporting via MQTTS/HTTPS.
  • Validated ECU bootstrap and certificate provisioning for GW, IVI, and IVC — covering TLS handshake, PKI certificate exchange, and secure key management.
  • Led CSMS demonstration to Japanese government regulators → supported UN-R155/WP.29 production approval for 6 vehicle lines (ICE, E-Power, EV).
  • Performed reverse engineering of ECU implementations to verify AUTOSAR IDS, JASPAR, and SecOC spec compliance; identified and resolved 5 critical vulnerabilities → 70% improvement in ECU security posture.
  • Conducted TARA for Domain ECU (MAC) and Central Gateway (IDS); produced threat models driving product security requirements.
Oct 2020 — Apr 2022 Pune, India

Security Technology Developer — Automotive Systems

Tata Consultancy Services (TCS)

  • Architected and implemented an ISO-15118 compliant EV charging communication system (C / Qt UI) with TLS mutual authentication and Plug & Charge (PnC) over PLC and Automotive Ethernet — demonstrated at CAR-ELE 2022.
  • Designed and developed a C#/CANoe-based CAN injection simulation tool and IDS meter-cluster visualization system to demonstrate Central Gateway IDS capabilities at CAR-ELE 2021.
  • Authored full technical documentation for both systems covering security architecture, protocol implementation, and test procedures — reviewed by OEM stakeholders.
  • Performed TARA of CAN signals and in-vehicle networks; developed ECU cybersecurity validation tooling.

0x040 · REGISTER / CAPABILITIES

The stack,
top to bottom.

0x01 · VEHICLE SECURITY

ISO/SAE 21434 · UN-R155 / WP.29 · TARA · AUTOSAR SecOC · AUTOSAR IdsM / IdsR · JASPAR MAC · TLS / PKI · Secure OTA · ECU Provisioning · Reverse Engineering

0x02 · PROTOCOLS & NETWORKS

CAN / CAN FD · SOME/IP · DoIP (ISO 13400) · UDS (ISO 14229) · Automotive Ethernet · ISO-15118 / PLC · MQTTS / HTTPS

0x03 · PLATFORMS & TOOLING

AUTOSAR Classic · Vector CANoe / CANalyzer · Linux / SocketCAN · Wireshark · FreeRTOS · Qt · CAPL · Git / SVN

0x04 · LANGUAGES

C / C++ · C# · Python · JavaScript / Vue 3 · CMake · GoogleTest · GitHub Actions · Grafana / InfluxDB

English (Native) / Japanese (Conversational)

0x0FF · REGISTER / CONTACT

Building SDV platforms?
Let's talk.

Open to Software-Defined Vehicle and embedded software roles — and always happy to compare notes on AUTOSAR security.

Email me LinkedIn GitHub