Toyota Motor Corporation, Toyota Motor North America, Inc. andToyota Tsusho Systems US, Inc. organized a CTF event
Toyota Motor Corporation (Toyota), Toyota Motor North America, Inc. (TMNA), andToyota Tsusho Systems US, Inc. (TTS-US) have jointly organized a capture the flag(CTF) event, named “Hack Festa 2022”, on October 22nd and 23rd.
While international interactions are difficult due to COVID-19 pandemic, they haveconducted a trans-pacific simultaneous CTF by using online facilities.

As CTF targets in Hack Festa 2022, they have leveraged “PASTA for Education” and“RAMN”, which were invented by Toyota researchers working in “TOYOTAOTEMACHI”.
PASTA (Portable Automotive Security Testbed with Adaptability) 1.0*1*2 is a testbed
for automotive cybersecurity research and development, and already available asopen source. PASTA for Education follows the philosophy of PASTA 1.0 and it has
advantage availability and portability rather than PASTA 1.0. As the same as PASTA
1.0, PASTA for Education also adopts general communication protocols forautomotive. Therefore, the Toyota researchers expect to expand the usage ofPASTA for Education, in particular education and CTF.

RAMN (Resistant Automotive Miniature Network)*3 is a PASTA-like testbed which ismore conscious towards low-cost fabrication. Due to such excellent portability,
RAMN has been already adopted by overseas CTFs and automotive cybersecurity
workshops*4. Also, hardware and software specification of RAMN has been alreadypublished as Open Source Software (OSS)*5.

CTF is a kind of competition event in the information security field. Participants in a
CTF take advantage of their expertise and skills to find hidden “Flags” (answers) intime and compete for the total number of points assigned for the flags which theyhave obtained. Also, the participants struggle with given “Challenges” (questions),
which are sometimes solved in a quiz-like format and played as pseudo-offensive
and defensive battles within a provided network at other times.
These days, the automotive industry must conform to United Nations Regulation
No. 155 and ISO/SAE21434 which is referenced from the regulation. They are surethat collaboration with hacking communities is a clue to solve such issues.
Toyota, TMNA, and TTS-US organized CTF as Hack Festa 2022 and aim to realize aframework for ethical hacking.
Hack Festa 2022 launched 6:00AM JST on October 22nd and 4:00PM CDT on October
21st. And it safely finished 12:00PM JST on October 23rd and 10:00PM CDT onOctober 22nd with taking some rests. Seven teams from four Japanese universities
and six teams from one US university participated in Hack Festa 2022 and competedfor the top position. Toyota and TMNA staff created most of challenges andsupported participants to solve the challenges.

Toyota, TMNA, and TTS-US will continue their activities relevant to cybersecurity,
including CTF and lead such activities to development of technologies which ensure
the safety and security of all customers who use automobiles.

References*1
GitHub – pasta-auto/PASTA1.0: PASTA: Portable Automotive Security Testbed withAdaptability
https://github.com/pasta-auto/PASTA1.0*2
Portable Automotive Security Testbed with Adaptability PASTA
https://www.chip1stop.com/sp/products/toyota-pasta_en*3
RAMN: Resistant Automotive Miniature Network
Hack In The Box Pte Ltd.
HITB+ CyberWeek 2020 Virtual Edition
Camille Gay, Tsuyoshi Toyama, and Hisashi Oguma
https://cyberweek.ae/2020/ramn-resistant-automotive-minimal-network/*4
SINCON 2021 Conference — Workshop
https://www.infosec-city.com/post/sin21-4-car-security-ramn*5
GitHub – ToyotaInfoTech/RAMN: RAMN (Resistant Automotive Miniature Network),a miniature CAN/CAN-FD testbed of 4 Electronic Control Unitshttps://github.com/ToyotaInfoTech/RAMN