Connected Cars Technology Vulnerable to Cyber Attacks

Rhea-AI Summary

Trend Micro has released a significant study highlighting cybersecurity risks in connected cars. Evaluating 29 real-world attack scenarios, the report identifies various threats, including DDoS attacks on Intelligent Transportation Systems. Over 17% of attack vectors are categorized as high risk, requiring minimal expertise from attackers. While the overall risk of cyber attacks is assessed as medium, the evolution of threats due to SaaS applications in vehicle architecture poses further risks. The report emphasizes the need for comprehensive security measures across the connected car ecosystem.

Positive

• The report identifies that currently, there are limited opportunities for successful cyber attacks on connected cars.
• U.N. regulations requiring cybersecurity features in all connected cars may enhance safety.

Negative

• Over 17% of attack vectors are classified as high risk, indicating vulnerability.
• The evolving landscape of connected car technology may lead to increased risk of cyber threats.

DALLAS, Feb. 16, 2021 /PRNewswire/ -- Trend Micro Incorporated (TYO: 4704; TSE: 4704), a global leader in cybersecurity, today announced a major new study into connected car security that describes multiple scenarios in which drivers could encounter attacks that threaten the safety of themselves and others.

Click here to access the full report, Cyber Security for Connected Cars: Exploring Risks in 5G, Cloud and Other Connected Technologies.

The report reveals the scope of the cybersecurity risks examined. Researchers evaluated 29 real-world attack scenarios according to the DREAD¹ threat model for qualitative risk analysis. These attacks could be launched remotely against and/or from victim vehicles. Examples and highlights include:

• DDoS attacks on Intelligent Transportation Systems (ITS) could overwhelm connected car communications and represent a high risk.
• Exposed and vulnerable connected car systems are easily discovered, making them at higher risk of abuse.
• Over 17% of all attack vectors examined were high risk. These require only a limited understanding of connected car technology and could be accomplished by a low-skilled attacker.

"Our research shows that there are ample opportunities for attackers looking to abuse connected car technology," said Rainer Vosseler, threat research manager for Trend Micro. "Fortunately, there are currently limited opportunities for attacks, and criminals have not found reliable ways to monetize such attacks. With the U.N.'s recent regulations requiring all connected cars to include cybersecurity, as well as a new ISO standard underway, now is the time for stakeholders across the industry to better identify and address cyber risk as we accelerate towards a connected and autonomous vehicle future." ²

More than 125 million passenger cars with embedded connectivity are forecast to ship worldwide between 2018 and 2022, and progress continues to advance towards fully autonomous vehicles. This advancement will create a complex ecosystem comprising cloud, IoT, 5G and other key technologies. It also features an enormous attack surface comprising potentially millions of endpoints and end users.

As the industry develops, there will be multiple opportunities for monetization and sabotage for cybercriminals, hacktivists, terrorists, nation states, insiders and even unscrupulous operators, the report warns. Of all 29 attack vectors studied, the overall risk of successful cyber attacks was assessed as Medium. However, as SaaS applications become embedded in the Electrical/Electronics (E/E) architecture of vehicles and cybercriminals create new monetization strategies, an evolution in attacks will lead to higher risk threats.

To mitigate the risks outlined in the study, connected car security must be designed with an integrated view of all critical areas to secure the end-to-end data supply chain. Trend Micro has the following high-level guidance for protecting connected cars:

• Assume compromise and have effective alert, containment, and mitigation processes.
• Protect the end-to-end data supply chain across the car's E/E network, the network infrastructure, backend servers, and VSOC (Vehicle Security Operations Center).
• Apply lessons learned to further strengthen defenses and prevent repeat incidents.
• Relevant security technologies include firewall, encryption, device control, app security, vulnerability scanner, code signing, IDS for CAN, AV for head unit, and much more.

Trend Micro offers IoT cybersecurity solutions specific to connected cars. Learn more here: https://www.trendmicro.com/en_us/business/solutions/iot/connected-car.html.

About Trend Micro
Trend Micro, a global leader in cybersecurity, helps make the world safe for exchanging digital information. Leveraging over 30 years of security expertise, global threat research, and continuous innovation, Trend Micro enables resilience for businesses, governments, and consumers with connected solutions across cloud workloads, endpoints, email, IIoT, and networks. Our XGen™ security strategy powers our solutions with a cross-generational blend of threat-defense techniques that are optimized for key environments and leverage shared threat intelligence for better, faster protection. With over 6,700 employees in 65 countries, and the world's most advanced global threat research and intelligence, Trend Micro enables organizations to secure their connected world. www.trendmicro.com

¹ DREAD evaluates how great the damage is to assets; how easy the attack is to launch and replicate; how easy it is to find an exploitable weakness; and how many users might be affected.
² https://unece.org/press/un-regulations-cybersecurity-and-software-updates-pave-way-mass-roll-out-connected-vehicles  

View original content to download multimedia:http://www.prnewswire.com/news-releases/connected-cars-technology-vulnerable-to-cyber-attacks-301228535.html

SOURCE Trend Micro Incorporated

FAQ

What does the Trend Micro study on connected cars discuss?

The study addresses cybersecurity risks in connected cars, examining various attack scenarios.

What percentage of attack vectors in the report are classified as high risk?

Over 17% of the attack vectors studied are categorized as high risk.

How many attack scenarios were evaluated in the Trend Micro report?

29 real-world attack scenarios were analyzed in the study.

What are some potential threats to connected cars mentioned in the report?

DDoS attacks on Intelligent Transportation Systems and other cybersecurity threats are highlighted.

What does the report suggest is necessary for connected car security?

It emphasizes the need for comprehensive security measures across the entire connected car ecosystem.