Advert
With the latest electric vehicles including features such as advanced driver-assistance systems, infotainment platforms, and vehicle-to-everything communication, the increased connectivity has introduced some significant security challenges.
If you’ve got a smart electric car parked up in your garage, try not to worry.
It probably isn’t sending your credit card details to everyone in your contacts list.
But, at the same time, you should be staying up to date with the evolving threats posed to those of us whose cars are smarter than your average convertible.
Modern vehicles are no longer isolated machines but part of a huge network of connected devices. This has expanded the attack surface for potential cyber intrusions.
Hackers aim to exploit vulnerabilities in a vehicle’s software, just as they try to exploit vulnerabilities in any other techy, internet-connected device, potentially gaining control over critical functions or accessing sensitive data.
Recognising these risks, the industry is prioritising cybersecurity to safeguard vehicles and their drivers. There is still more work to be done.
A VPN, one potential solution, is easy to install on a phone or laptop but typically far less straightforward in a vehicle.
To protect data transmitted between vehicles and external devices, manufacturers are using advanced encryption.
This is a technique that essentially creates a secure communication channel that ensures that information exchanged within the vehicle’s network remains confidential and tamper-proof.
Over-the-air (OTA) updates allow manufacturers to patch software vulnerabilities remotely so vehicles are protected against emerging threats, which means your car is essentially getting smarter without you knowing about it…
…and it doesn’t cost you anything in college tuition fees!
In the simplest terms possible, this system minimises the risk of unauthorised access.
Intrusion detection systems (IDS) can identify anomalies that may indicate a cyberattack, allowing for quick response to threats.
By continuously analysing network activity, IDS can detect and protect against malicious actions before they compromise vehicle safety.
The automotive industry wants to take no risks, adopting a ruthless zero-trust approach to cybersecurity. Every friend is an enemy under this logic (not quite). It’s a relentless and justified need to verify everything and validate everything.
By implementing zero-trust architecture, manufacturers minimise the risk of unauthorised access.
A 2024 paper on zero trust security in connected vehicles published in Computers & Security concluded, “In reshaping cybersecurity strategy, zero trust represents a significant departure from the conventional reliance on a trusted internal network. This model acknowledges the persistent and dynamic nature of cyber threats, taking a proactive stance by eliminating inherent trust in users or devices.”
To address growing security concerns, regulatory bodies have established standards such as the UN R155, designed to improve security in vehicles.
As per VicOne, “UN R155 requires the presence of a cybersecurity management system (CSMS) in vehicles. In a nutshell, a CSMS ensures that cybersecurity practices and measures are adequately applied across the development process and life cycle of vehicles.”
Meanwhile, the Automotive ISAC, or Auto-ISAC is a community built to share and analyse intelligence about vehicle security risks.
Cars will be driving themselves. Naturally, that worries a few. Having a robust cyberdefense system will not only alleviate those concerns but would actually be practical for performance.
Development won’t cease with that first innovation – what does? – so integrations with AI will naturally occur, offering a more robust and flexible defence, eventually. Money will be poured into research in these areas.
It’s all about staying ahead.
