![](https://csdnimg.cn/release/download_crawler_static/86726928/bg6.jpg)
6 Pedal to the Metal − How to Navigate the Way to Automotive Cybersecurity
Introduction
The automotive industry is evolving
rapidly. Consumers have embraced
connected vehicles. And as
related technologies develop, fresh
expectations are developing too.
Regulations for connected vehicles are
emerging at different rates in different
regions, markets and countries. This
shift is creating a completely new set
of guiding principles – and is reshaping
the automotive sector.
OEMs and suppliers face unparalleled
disruption, while also attempting to
tap into incredible new opportunities
for the future of mobility. Success
will require fast and far-reaching
changes to existing models of product
development, supply chain and value
chain management, and the way
vehicles are maintained and serviced
throughout their life cycles. Companies
will need to embark on a journey of
transformation for their production
processes, digital technologies
and workforces. Thus, the vehicle
ecosystem is constantly expanding,
generating new opportunities, but
also growing in complexity and risk
exposure.
People, vehicles and companies are
now vulnerable in completely new
ways. Hackers have already remotely
seized control of door locks, brakes
and accelerators in cars. Denial-of-
Service (DoS) attacks have hit cars
too, targeting key components and
functions like the vehicle-distancing
system, which stops cars from driving
dangerously close to each other.
But what would happen if cyber
criminals took control of a city’s police
fleet and committed a crime while
officers were unable to respond? Or if
cameras for driver anti-sleep devices
were hacked and the victim’s grumpy
Monday-morning face got posted
online? Or if a faulty update for an
automated lane-keeping assistant got
installed on thousands of vehicles?
New regulations are seeking to
prevent security concerns like these.
In some markets, there are already
local regulations with a focus on
cybersecurity management systems
for vehicles. These regulations differ in
their scope, level of detail and timings
for implementation. The United Nations
Economic Commission for Europe
(UNECE) recently introduced regulation
No. 155 (CSMS – Cyber Security
A
Management Systems) and announced
regulation No. 156 (SUMS – Software
Update Management System),
which will be binding in 56 countries.
Many producers are adopting the
requirements of ISO/SAE 21434 (Road
vehicles – Cybersecurity engineering),
which covers cybersecurity for road
vehicles. Other standards are under
development, such as ISO/DIS 24089
(Road vehicles – Software update
engineering).
In many markets, however, legislation
has yet to reach even the draft stage.
Similarly, many OEMs and suppliers
are unaware of how they compare to
other market players in terms of CSMS
technology and associated regulatory
compliance.
Regulations focus on OEMs, although
contractual obligations for partners
and suppliers of software, services
and vehicle components mean that
these legal requirements for vehicle
manufacturers are being passed on
down the value chain and the supply
chain. This relationship generates
additional potential for inconsistency,
as different stakeholders in global
value chains are subject to different
local and market-specific conditions.