The New Assembly Line: 3 Best Practices for Building (Secure) Connected Cars

The New Assembly Line: 3 Best Practices for Building (Secure) Connected Cars

• 1.
  The New AssemblyLine 3 BEST PRACTICES FOR BUILDING (SECURE) CONNECTED CARS
• 2.
  Connected cars areabout to change the auto industry’s assembly line.
• 3.
  Vehicles are becomingcomputers on wheels and now have more in common with your laptop than they do the Model T.
• 4.
  Just as smartphoneshave supplanted non- Internet-connected phones, connected cars will supplant non-Internet-connected cars.
• 5.
  Auto manufacturers needto become software companies if they want to survive into the 21st century.
• 6.
  The auto industrymust now consider cybersecurity as an integral part to how cars are built, just as physical safety became a critical part of how cars were built in the late 20th century.
• 7.
  When an industrywithout experience from the front lines of Internet security begins connecting its products, one of two outcomes often occurs.  
• 8.
  When an industrywithout experience from the front lines of Internet security begins connecting its products, one of two outcomes often occurs.   If there are clear security best practices, then most companies will (hopefully) implement those best practices.
• 9.
  When an industrywithout experience from the front lines of Internet security begins connecting its products, one of two outcomes often occurs.   If there are no clear best practices, companies will likely make a lot of security mistakes, resulting in major cybersecurity problems down the road.
• 10.
  How do wemake cars resilient in the face of cyberattacks?
• 11.
  How do wemake cars resilient in the face of cyberattacks? In our research, we have found that if the auto industry is to build vehicles that are resistant to cyberattack, they must implement three important measures.
• 12.
  An over-the-air updateprocess: Ideally without the owner having to subscribe to a separate service. Isolation of vehicle and infotainment systems: With this in place, it’s important that any gateway systems receive an extreme amount of security scrutiny. Hardening each individual component: A resilient automotive cybersecurity architecture should assume that attackers will compromise some component (e.g. the web browser). That single component compromise should not affect the functionality of the system as a whole. 1
• 13.
  An over-the-air updateprocess: Ideally without the owner having to subscribe to a separate service. Isolation of vehicle and infotainment systems: With this in place, it’s important that any gateway systems receive an extreme amount of security scrutiny. Hardening each individual component: A resilient automotive cybersecurity architecture should assume that attackers will compromise some component (e.g. the web browser). That single component compromise should not affect the functionality of the system as a whole. 2
• 14.
  An over-the-air updateprocess: Ideally without the owner having to subscribe to a separate service. Isolation of vehicle and infotainment systems: With this in place, it’s important that any gateway systems receive an extreme amount of security scrutiny. Hardening each individual component: A resilient automotive cybersecurity architecture should assume that attackers will compromise some component (e.g. the web browser). That single component compromise should not affect the functionality of the system as a whole. 3
• 15.
  Read Hacking aTesla Model S: What we found and what we learned