Intel Commits To Mitigating Automotive Cybersecurity Risks

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
To help mitigate cybersecurity risks associated with connected automobiles while encouraging technological progression and innovation, Intel Corporation today announced the establishment of the Automotive Security Review Board (ASRB). The board will encompass top security industry talent across the globe with particular areas of expertise in cyber-physical systems. The ASRB researchers will perform ongoing security tests and audits intended to codify best practices and design recommendations for advanced cybersecurity solutions and products to benefit the automobile industry and drivers. Intel also published the first version of its automotive cybersecurity best practices white paper, which the company will continue to update based on ASRB findings.
 
That will go about as well as other computer related security initiatives.

The only way to prevent car tampering from happening is to keep net and CAN on two separate networks. And if the car user experience needs access to CAN information, make it read only. Otherwise isolate the controls to the CAN system.

But they won't do that. Because it would cost too much, even if it made sense.
 
The only way to prevent car tampering from happening is to keep net and CAN on two separate networks. And if the car user experience needs access to CAN information, make it read only. Otherwise isolate the controls to the CAN system.

First, this! ^^

Second, this problem can only be solved the the auto manufacturers. IMO this is not Intel's problem to fix. It doesn't matter how secure Intel makes the system. If the control system has any link to the entertainment (read this as user interface or "cloud") then it's open to compromise. Period. There is no such thing as a hack proof computer system. Given interface access, anything can be hacked. The only solution is to prevent access by de-linking the system.
 
That will go about as well as other computer related security initiatives.

The only way to prevent car tampering from happening is to keep net and CAN on two separate networks. And if the car user experience needs access to CAN information, make it read only. Otherwise isolate the controls to the CAN system.

But they won't do that. Because it would cost too much, even if it made sense.

Two identical vehicles, one cost $200 dollars more for a segregated Entertainment system. Consumers will buy the cheaper one 95% of the time. There's dozen's of those, it would be better if they did this..... If you do them all, you will loose 100% of consumers. People care about cost which is why it isn't done. You can short circuit that effect by making it a government mandate and taking the choice away from the consumer.
 
Back
Top