Sign In

Communications of the ACM

ACM TechNews

Headaches Likely to Grow Over Auto Cybersecurity Concerns


A representation of automotive cybersecurity

A new report from the U.S. Government Accountability Office cites expert opinion that it will be about five years before technologies for securing and authenticating the legitimacy of communications via in-vehicle networks are incorporated during vehicle design and production.

Credit: Rubicon

Issues related to automobile cybersecurity are likely to become more pronounced in the near future as experts attempt to eliminate risks, but federal auto cybersecurity standards are not expected until at least 2018.

A new report from the U.S. Government Accountability Office (GAO) also cites expert opinion that it will be about five years before technologies for securing and authenticating the legitimacy of communications via in-vehicle networks are incorporated during vehicle design and production.

According to the report, today's vehicles often have multiple interfaces that make vehicle systems susceptible to cyberattacks. The onboard diagnostics port is one point of exploitation stakeholders are concerned with, while GAO also noted wireless attacks, such as those targeting weaknesses in autos' built-in cellular-calling capabilities, present the biggest risk to passengers.

Remote cyberattacks on auto systems are a source of concern, but some experts say attacks comparable to current hacking demonstrations would be difficult to accomplish.

Most industry experts polled by GAO agreed automakers should place safety-critical systems and non-safety-critical systems on separate in-vehicle networks and restrict communication between them.

Two U.S. industry groups are spearheading a push to set up an Automotive Information Sharing and Analysis Center to collect and analyze intelligence information and support a forum for members to anonymously share threat and vulnerability information with one another.

From Network World
View Full Article

 

Abstracts Copyright © 2016 Information Inc., Bethesda, Maryland, USA


 

No entries found

Sign In for Full Access
» Forgot Password? » Create an ACM Web Account