Page 26 - EE Times Europe Magazine – June 2024
P. 26

26 EE|Times EUROPE

        Are We Prepared for Cyberthreats in the New Era of Transportation?


        Diversity of Automotive Cybersecurity Attack Vectors


                                         2023 Incidents by Attack Vectors

                     CAN bus   1

                 Bluetooth: BLE  1
                   Mobile apps  2
            Navigation-GPS-GNSS  2

                     Database     3
                   EV charging     4
            Remote keyless entry        7

              ECUs: TCU-GW etc.            9
           API: Internal & External               13
                  Infotainment                       15

          Telematics & Apps Server                                                               43

                            0       5      10      15      20      25      30      35      40      45      50
                                                                % of Total

                             Data source: Upstream 2024 Cybersecurity Report
                                     Figure Source: VSI Labs, April 2024


        vehicles remain resilient to evolving threats   and ensure its trustworthiness. From individ-  and education campaigns are needed to fos-
        and vulnerabilities throughout their opera-  ual ECUs to complex vehicle systems, robust   ter a culture of cybersecurity consciousness
        tional lifespan, including the integration of   security certification protocols are necessary   among users of connected vehicles.
        secure-firmware-update over-the-air capabili-  for instilling confidence in the hardware   Collaborative security management across
        ties. By integrating life-cycle cybersecurity   components that power self-driving capa-  the value chain is crucial in securing con-
        management practices through product-   bilities. This includes obtaining ISO 26262   nected vehicles. It requires collaboration and
        security incident-response-team services, the   ASIL-D certification, implementing robust   accountability on the part of manufacturers,
        automotive industry can further enhance the   security measures and adhering to industry   suppliers, service providers and regulators.
        security and trustworthiness of connected   standards to fortify the resilience of automo-  Each player must attest to its commitment to
        vehicles, safeguarding them against emerging   tive systems against cyberthreats throughout   security management and implement robust
        cyberthreats.                       their operational lifespan.         measures accordingly. By working together
                                                                                to uphold cybersecurity standards and prac-
        Ensuring vehicle                    COLLABORATIVE EFFORTS TO SECURE     tices, the automotive industry can build a
                                            THE FUTURE OF MOBILITY
                                                                                foundation of trust and reliability in vehicle
        cybersecurity is a                  In addressing the challenges of securing   technology.
                                                                                  By addressing these challenges head-on
        multifaceted challenge              autonomous vehicles, embedded cyber-  and fostering collaboration across bor-
                                            security emerges as an indispensable
        that encompasses aspects            cornerstone of automotive innovation.   ders, we can ensure that the promise of
                                                                                autonomous vehicles is not overshadowed
                                            Through a concerted effort to prioritize
        of software development,            cybersecurity measures, adopt best prac-  by the dark cloud of cyber insecurity. As
        cryptography, operating             tices and deploy advanced solutions for   we navigate the road ahead, let us ensure
                                                                                that embedded cybersecurity serves as the
                                            cyberthreat detection and monitoring, we
        systems and life-cycle              can fully embrace the transformative poten-  bedrock upon which a safer, more secure
                                            tial of connected vehicles while effectively
                                                                                automotive future is built.
        management.                         mitigating risk.                      Moreover, this new paradigm paves the
                                              However, the responsibility for ensuring   way for new services and business models to
                                            robustness in autonomous vehicles extends   monetize security. While there are indeed
          Security certification is mandatory in    beyond manufacturers and developers. Col-  challenges, there is also a space of opportu-
        building trust at every level of the    laboration among governments, academia   nities awaiting exploration and innovation. ■
        autonomous-vehicle ecosystem. Each com-  and industry stakeholders is essential to
        ponent must undergo rigorous certification   anticipate emerging threats and mitigate   Hassan Triqui is co-founder, CEO and
        processes to validate its security measures   risk effectively. Moreover, public awareness   president of Secure-IC.

        JUNE 2024 | www.eetimes.eu
   21   22   23   24   25   26   27   28   29   30   31