Five best practices for securing the connected car: Page 5 of 5

October 14, 2015 //By Jean-Pierre Joosting
The automotive industry is abuzz with the high-profile hack of a Jeep Cherokee by security researchers Charlie Miller and Chris Valasek. Miller and Valasek exploited a weakness in Fiat Chrysler’s UConnect system that allowed hackers who know a vehicle’s IP address to remotely control the vehicle – including disabling the brakes, disengaging the transmission and more.

Identifying, intercepting and destroying unauthorized messages flowing through the CAN bus not only serves to isolate a corrupted ECU – it also provides an evidence trail that can be used to locate the infection and clean it up.

(5) Host a hackathon and let the world have at it

Putting every known security measure into place may not be enough to keep ahead of today’s sophisticated hackers. As the development of connected car platforms, operating systems, and components races ahead at breakneck speed, the potential for new vulnerabilities entering the connected car is significant.

World-class enterprise security programs perpetually harden the target through incursion testing and consulting from top-tier security companies – often firms run by former black-hat hackers. With the popularity of connected car hackathons, and the urgency associated with solving this set of problems, do not miss the opportunity to let the hacking world “have at it” by hosting your own hackathon or participating in one of the many education-based programs including AutoCyber Challenge and university-sponsored programs.

About the Author

Mahbubul Alam joined Movimento as CTO in 2015 and is responsible for aligning automotive and information technology with corporate strategy to enable Movimento to lead the automotive industry’s transition to software-defined vehicles. A 17-year industry veteran, Mahbubul works with Movimento customers to maximize the potential of secure over-the-air (OTA) updates and enable new connected services for the vehicle.

Previously, Mahbubul led Cisco Systems strategy in IoT and M2M where he pioneered and developed this business from the ground up through vision, strategy, platform, and execution. He also helped initiate the company’s smart connected vehicle roadmap. Before joining Cisco, Mahbubul held technical leader positions at Siemens and worked as a technical advisor to the Dutch government.

Mahbubul holds a Master’s degree in Electrical Engineering from Delft University of Technology.

Design category: