As the world becomes increasingly connected, so too do the opportunities for criminals to hack their way in. Here Damien Stephens looks at how one can mitigate against these threats to ensure a bright future for connected cars. <\/span><\/strong><\/h2>\nAsk somebody what the future looks like and chances are they\u2019ll describe a scene straight out of a movie: robot butlers, sci-fi style pod houses and driverless cars ferrying people around a clean, utopian landscape.<\/p>\n
R&D investments and tests done by automakers worldwide might suggest that autonomous vehicles are on the verge of becoming an everyday reality. But we\u2019re still some years off from that sci-fi movie scene. \u00a0It will be an evolution too: from today\u2019s connected cars to future driverless vehicles. As more and more cars get connected, securing them against cyber-attacks is crucial \u2013 the industry must get this right in order for autonomous driving to become a reality.<\/p>\n
Keeping hackers at bay <\/strong><\/p>\n![\"\"](\"https:\/\/www.tatacommunications.com\/blog\/wp-content\/uploads\/2020\/03\/AdobeStock_253610276-300x200.jpeg\")
<\/a>People often forget that the increased connectivity already in connected cars on our roads comes with a heightened risk of nefarious activity. IoT devices are often targeted by hackers because many have security vulnerabilities by design. Connected cars are seen as a high-value target by hackers because in a fairly short time, vehicles have gone from being relatively dumb lumps of metal to four-wheeled boxes of highly sophisticated computers \u2013 with sensors, transmitters and connectivity, capturing a wealth of often sensitive and personal data every second.<\/p>\n\n\u201cCyber criminals are interested in compromising both the physical security of the car and the volume of valuable data these vehicles produce and transmit to manufacturers and service providers.\u201d<\/span><\/em><\/h3>\n<\/blockquote>\nAutomakers often rely on third parties to supply the systems that add connected functionality to their vehicles, but vehicle makers must impose their own security standards to ensure there are no hidden vulnerabilities that hackers could exploit. In the most extreme cases, the larger potential attack surface presented by a connected vehicle could in theory allow somebody to unlock and steal it, or even potentially take over the controls of a vehicle in a worst-case scenario. This may sound far-fetched, but this scenario has been demonstrated by security researchers under controlled conditions.<\/p>\n
With cars now creating, storing and communicating more data than ever before, manufacturers and service providers must take steps to ensure that breaches and other privacy related incidents are kept to an absolute minimum.<\/p>\n
Connecting cars with the wider IoT ecosystem <\/strong><\/p>\n![\"\"](\"https:\/\/www.tatacommunications.com\/blog\/wp-content\/uploads\/2020\/03\/AdobeStock_265484437-300x169.jpeg\")
<\/a>As V2X (vehicle-to-everything) communication becomes more widespread, cars will share data with the wider IoT ecosystem too, including traffic management and parking control systems, hazard warning mechanisms and emergency services, infotainment services and even your smart home. But with vehicles constantly sending and receiving information in order for these services to operate effectively, the hugely increased number of access points and transmissions puts data at greater risk than ever.<\/p>\n\n\u201cThese services demand the use of sensitive personal data, from payment information to confidential insurance details, meaning a \u2018mobile-edge-to-cloud\u2019 approach to security must be adopted.\u201d<\/em><\/span><\/h3>\n<\/blockquote>\n![\"\"](\"https:\/\/www.tatacommunications.com\/blog\/wp-content\/uploads\/2020\/03\/AdobeStock_291424028-300x160.jpeg\")
<\/a>This involves safeguarding data at every point of its journey between the car and network, while every connected component onboard the vehicle must form part of a \u2018community of trust\u2019.<\/p>\nIt starts with equipping the SIM cards which enable connectivity in vehicles with encryption, so that both data in motion and at rest is protected \u2013 in other words, safeguarding data both on the network and at the device level. Through \u2018communities of trust\u2019, automakers could create multiple secure \u2018vaults\u2019 within the car to which only the vault owner \u2013 such as a dealership or the vehicle owner \u2013 have access. Through this approach, the automaker could gather data through the SIM in its vault to ensure the car is operating safely, the dealership could use the SIM for keeping track of maintenance logs, and the vehicle owner could trust that his or her private information stays private.<\/p>\n
\u00a0<\/strong>For an additional layer of security in vehicles, more and more car manufacturers are also adopting embedded SIM (eSIM) technology. eSIMs make critical software updates easier to roll out, over the air (OTA), without needlessly disrupting the driver or requiring a trip to the dealership.<\/p>\n
Automakers often rely on third parties to supply the systems that add connected functionality to their vehicles, but vehicle makers must impose their own security standards to ensure there are no hidden vulnerabilities that hackers could exploit. In the most extreme cases, the larger potential attack surface presented by a connected vehicle could in theory allow somebody to unlock and steal it, or even potentially take over the controls of a vehicle in a worst-case scenario. This may sound far-fetched, but this scenario has been demonstrated by security researchers under controlled conditions.<\/p>\n With cars now creating, storing and communicating more data than ever before, manufacturers and service providers must take steps to ensure that breaches and other privacy related incidents are kept to an absolute minimum.<\/p>\n Connecting cars with the wider IoT ecosystem <\/strong><\/p>\n It starts with equipping the SIM cards which enable connectivity in vehicles with encryption, so that both data in motion and at rest is protected \u2013 in other words, safeguarding data both on the network and at the device level. Through \u2018communities of trust\u2019, automakers could create multiple secure \u2018vaults\u2019 within the car to which only the vault owner \u2013 such as a dealership or the vehicle owner \u2013 have access. Through this approach, the automaker could gather data through the SIM in its vault to ensure the car is operating safely, the dealership could use the SIM for keeping track of maintenance logs, and the vehicle owner could trust that his or her private information stays private.<\/p>\n \u00a0<\/strong>For an additional layer of security in vehicles, more and more car manufacturers are also adopting embedded SIM (eSIM) technology. eSIMs make critical software updates easier to roll out, over the air (OTA), without needlessly disrupting the driver or requiring a trip to the dealership.<\/p>\n![\"\"](\"https:\/\/www.tatacommunications.com\/blog\/wp-content\/uploads\/2020\/03\/AdobeStock_253610276.jpeg\")
<\/a>People often forget that the increased connectivity already in connected cars on our roads comes with a heightened risk of nefarious activity. IoT devices are often targeted by hackers because many have security vulnerabilities by design. Connected cars are seen as a high-value target by hackers because in a fairly short time, vehicles have gone from being relatively dumb lumps of metal to four-wheeled boxes of highly sophisticated computers \u2013 with sensors, transmitters and connectivity, capturing a wealth of often sensitive and personal data every second.<\/p>\n\n
\u201cCyber criminals are interested in compromising both the physical security of the car and the volume of valuable data these vehicles produce and transmit to manufacturers and service providers.\u201d<\/span><\/em><\/h3>\n<\/blockquote>\n
<\/a>As V2X (vehicle-to-everything) communication becomes more widespread, cars will share data with the wider IoT ecosystem too, including traffic management and parking control systems, hazard warning mechanisms and emergency services, infotainment services and even your smart home. But with vehicles constantly sending and receiving information in order for these services to operate effectively, the hugely increased number of access points and transmissions puts data at greater risk than ever.<\/p>\n\n
\u201cThese services demand the use of sensitive personal data, from payment information to confidential insurance details, meaning a \u2018mobile-edge-to-cloud\u2019 approach to security must be adopted.\u201d<\/em><\/span><\/h3>\n<\/blockquote>\n
<\/a>This involves safeguarding data at every point of its journey between the car and network, while every connected component onboard the vehicle must form part of a \u2018community of trust\u2019.<\/p>\n