The automotive industry is getting more and more complex as advancement of technology introduces the capability to integrate connectivity and automation into vehicle manufacturing. Unfortunately, this evolution of automotive industry is not all rainbows and butterflies. While we get better driving experience through this evolution such that it improve our safety while keeping us entertain and aids in road navigation, its implementation leads to the expansion of cyber attack path. Subsequently, the world is alerted with automotive hacking, an existing cyber security issue since 2005 that had grown into a critical issue today. Definitely, the cyber security team is facing a more challenging issues to be addressed. This post discusses various enhancing automotive cybersecurity against automotive hacking.
Automotive cybersecurity can be defined as technologies that ensure security related to automotive contexts by focusing on minimising risk, securing data and vehicle as well as embedding concrete trust between mobility stakeholders.
The growing attack surface had lead to the increase in cybersecurity cases through automotive hacking every year. This highlight the need for a more advanced automotive cybersecurity solution, hence an automotive security framework should be based on discrete defense strategy.
1. Secure interface with external resources
Interfaces such as WiFi, Bluetooth device are the most vulnerable points in vehicle with existing exploit that can enable automotive hacking thus allowing hackers to gain access to vehicle. Therefore, these interfaces need to have in-depth security defense during designing the security policy which include better authentication method like MFA and Biometric.
2. Security Architecture (Hardware & Software)
Hardware security in automotive security acts as physical protection systems on vehicle. It aims to protects the Electronic Control Units (ECUs) and communication buses such as Ethernet which covers practices including active memory protection to reduce code vulnerabilities, device identity directly on the device that enables secure identification and prevent unauthorised access as well as secure boot and software attestation functions that detects tampering with boot loaders and critical operating system files thus prevent invalid files from attacking the system. While the software security are usually harder to crack, automotive hacking is as well evolving. An example of enhancing automotive cybersecurity against automotive hacking for software security can be done using architectural techniques and software technologies which include secure boots, virtualisation and isolation of individual systems and applications with software containers.
3. Supply Chain Security
In automotive industry, it is most common for hardware and software components, development tools, manufacturing, product assembly, and verification testing are supplied by multiple vendors. Thus, every supply related to cybersecurity should be run with risk analysis and penetration testing tool for threat detection and vulnerabilities.
E-SPIN Group in the enterprise ICT solution supply, consultancy, project management, training and maintenance for corporation and government agencies did business across the region and via the channel. Feel free to contact E-SPIN for your project requirement and inquiry.
Related post that may interest you:
1. Automotive Hacking: Cybersecurity threat is expanding
2.Understanding Common Types of Automotive Hacking
3. Automotive transforming to balance agility and stability toward EV world
4. Electric vehicle and Car industry transformation
