ANIn Bengaluru July 2024 | Decoding Automotive Cyber Threats : Challenges and Outlook by Nectar Jinil R
•
0 likes•33 views
Agile Network India - Bengaluru Title: Decoding Automotive Cyber Threats : Challenges and Outlook Date: 20th July 2024 Hosted by: Continental
Report
Share
More Related Content
Similar to ANIn Bengaluru July 2024 | Decoding Automotive Cyber Threats : Challenges and Outlook by Nectar Jinil R
Similar to ANIn Bengaluru July 2024 | Decoding Automotive Cyber Threats : Challenges and Outlook by Nectar Jinil R (20)
More from AgileNetwork
More from AgileNetwork (20)
Recently uploaded
Recently uploaded (10)
ANIn Bengaluru July 2024 | Decoding Automotive Cyber Threats : Challenges and Outlook by Nectar Jinil R
- 1. Nectar Jinil R Strictly Confidential Internal Decoding Automotive Cyber Threats : Challenges and Outlook
- 2. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats One TCI, Center of Excellence: Cybersecurity © Continental AG 2 What is Cybersecurity ?? 7/22/2024 What is Cybersecurity in the Automotive sector ?? Confidentiality Integrity Availability
- 3. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats One TCI, Center of Excellence: Cybersecurity © Continental AG 3 7/22/2024 https://www.kaspersky.com/blog/blackhat-jeep-cherokee-hack-explained/9493/ • Hacked a Jeep Cherokee on Highway (the driver was already made aware), and the hackers were in some remote location
- 4. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats 2023 Vehicle Cyber Threats One TCI, Center of Excellence: Cybersecurity © Continental AG 4 1468 Automotive security Incidents Reported science 2010 295 Security Incidents Reported in 2023 43% 15% 13% 9% 9% 7% 4% Telematics and Cloud Infotainment API ECU's Others Remote Keyless EV Charging 2023 Attacks 95% Remote Attacks 5.40% 44.10% 35.90% 14.60% Massive (Millions) High (Thousands) Medium (up to 1000) Low (up to 10) Mobility Assests Impacted 2.5x increase from 2022 64 % 156 % 50 % Source: Upstream : 2024 Global Automotive Cybersecurity Report 7/22/2024 Increase in Deep and dark web activities Black hat attacks targeted multiple automotive and Smart Mobility assets Black Hat
- 5. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats Security Attacks One TCI, Center of Excellence: Cybersecurity © Continental AG 5 7/22/2024 Hackers Injecting Code Into Headlight Wiring to Steal Cars (cybersecuritynews.com) Hackers Use the Headlamps to access the Vehicle CAN network and steal Toyota vehicle Hackers Use the antenna amplifier to unlock a Rolls Royce https://www.news18.com/viral/caught-on-camera-thieves-steal- rolls-royce-in-mere-seconds-8688300.html
- 6. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats Security Outlook One TCI, Center of Excellence: Cybersecurity © Continental AG 6 Source: Upstream : 2024 Global Automotive Cybersecurity Report Digital Transformation in Vehicle, introduces large scale attacks Regulations varying according to Country could lead to regulatory fatigue EV Adaptations introduces new set of cyber risks Emergence of Generative AI, over time introduces new methods and tools to be introduces to our development eco system 7/22/2024
- 7. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats Security Overview : India One TCI, Center of Excellence: Cybersecurity © Continental AG 7 Source: DSCI(NASCSCOM) India Cybersecurity Domestic Market 2023 India Cybersecurity market accounted for ~3% of Overall global cybersecurity market Domestic cybersecurity services market grew from USD 1.98 billion in 2019 to USD 6.06 billion in 2023 Product cybersecurity market grew from 1.03 billion to 3.76 billion. ~97% of organization have invested in AI/ML. ~84 have invested in Cloud ~81% of Organization invested in Zero Trust Key Factor: ✓ Digital Transformation ✓ Regulatory Compliances 7/22/2024
- 8. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats Security Overview : India Automotive Sector One TCI, Center of Excellence: Cybersecurity © Continental AG 8 ✓ Indian OEM’s are fast adapting to the Cybersecurity requirements • Key driving factor : Regulation and standards in markets other than India ✓ Indian Automotive Cybersecurity domain is evolving. ✓ Most of the Indian OEM’s are adapting to the Cybersecurity infrastructure 7/22/2024
- 9. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats IT Cybersecurity → Product Cybersecurity One TCI, Center of Excellence: Cybersecurity © Continental AG 9 7/22/2024 IT Cybersecurity Product Cybersecurity
- 10. Nectar Jinil R Strictly Confidential Internal Strictly Confidential ✓ Hardware Security Module ✓ Hardware Trust Anchor ✓ Secure Storage of crypto artifacts Decoding Automotive Cyber Threats Product Cybersecurity One TCI, Center of Excellence: Cybersecurity © Continental AG 10 ✓ In Vehicle Network security ✓ Secured On board communication ✓ Vehicle to External Interface ✓ Firewall, Intrusion Detection. Etc. ISO 21434 Regulations and Standard 7/22/2024 ✓ Tooling and Testing Infrastructure
- 11. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats Organization Adaptation to Cybersecurity One TCI, Center of Excellence: Cybersecurity © Continental AG 11 Acknowledgement of Product Cybersecurity Risks Product Cybersecurity Management Cybersecurity by Design Cybersecurity Culture Information Sharing and Cooperation 7/22/2024
- 12. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats One TCI, Center of Excellence: Cybersecurity © Continental AG 12 Automotive Cybersecurity Outlook 7/22/2024
- 13. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats Cybersecurity for SDV One TCI, Center of Excellence: Cybersecurity © Continental AG 13 ✓ Most of the OEM’s are moving towards making Software as a product and reducing the interdependency with hardware. ✓ New functions can be added to the vehicle by gathering information from different sensors and providing new features. ✓ New features are added as services which can be updated via OTA Risks: ✓ Data Integrity ✓ Vulnerabilities in software features added ✓ 3rd party software Mitigation: ✓ Security use case for SDV’s ✓ Efficient Vulnerability management ✓ Effective tooling and testing (SecDevops) 7/22/2024
- 14. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats Cybersecurity for Gen AI One TCI, Center of Excellence: Cybersecurity © Continental AG 14 ✓ Generative AI (Gen AI), can be used to process large data to derive pattern. ✓ Hackers can use Gen AI to generate a pattern from the Vehicle data logs and can attack the system. ✓ It can help hackers to identify the week spot in the system in faster time duration. Risks: ✓ Easy attack of vehicle Mitigation: ✓ Gen AI can be used in the development process for risk identification ✓ System design with Gen AI ✓ Efficient development & tooling (Sec DevOps) 7/22/2024
- 15. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats Post Quantum Cryptography One TCI, Center of Excellence: Cybersecurity © Continental AG 15 ✓ Quantum computers can be a challenge to the existing crypto algorithms. ✓ With advanced computational power they can break existing ciphers ✓ Newer counter algorithms for the same (under development) ✓ Computational power inside vehicle ✓ This is more futuristics and no timeline defined. 7/22/2024
- 16. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats One TCI, Center of Excellence: Cybersecurity © Continental AG 16 Q&A 7/22/2024
- 17. Nectar Jinil R Strictly Confidential Internal Strictly Confidential Decoding Automotive Cyber Threats One TCI, Center of Excellence: Cybersecurity © Continental AG 17 Thank You 7/22/2024